How Utah Artificial Intelligence Policy Act applies to healthcare organizations and the obligations to plan for.
Healthcare providers, payers, and health-tech vendors deploying AI for clinical decision support, diagnostics, prior authorization, or patient interaction.
Licensed healthcare providers using generative AI in patient-facing high-risk medical or mental-health advice interactions must disclose AI use under Utah Chapter 77; mental-health chatbots also need Chapter 72a controls. Organizations operating in Utah should treat this law as part of the baseline regulatory obligations alongside any sector-specific federal rules.
A supplier using generative AI in a consumer transaction must disclose that the individual is interacting with generative AI and not a human when the individual makes a clear and unambiguous request about whether AI is being used; regulated-occupation providers must prominently disclose GenAI use for high-risk AI interactions, verbally at the start of verbal interactions or in writing before written interactions.
Deadline: On clear request or before regulated service interaction
Maintain accountability for consumer-protection compliance when generative AI makes a violative statement, undertakes a violative act, or is used in furtherance of a violation; Chapter 77 states that generative AI is not a defense to statutes administered and enforced by the Division of Consumer Protection.
Deadline: Ongoing
Mental health chatbot suppliers may not sell or share individually identifiable health information or a Utah user's chatbot input with a third party, and must keep Chapter 72a privacy controls separate from the general Chapter 77 consumer-transaction disclosure rule.
Deadline: Ongoing
Mental health chatbot suppliers must clearly and conspicuously disclose that the chatbot is artificial intelligence technology and not human before features are accessed, at the beginning of an interaction after a seven-day gap, and whenever a Utah user asks or prompts about whether AI is being used.
Deadline: Before access after 7 day gap or on prompt
Licensed healthcare providers using generative AI in patient-facing high-risk medical or mental-health advice interactions must disclose AI use under Utah Chapter 77; mental-health chatbots also need Chapter 72a controls. The law should be read with the source-derived obligations listed on this page and any sector-specific federal rules that apply to healthcare workflows.
Utah Artificial Intelligence Policy Act has been effective since May 7, 2025.
Utah Artificial Intelligence Policy Act lists deployer, vendor as the role coverage for Utah. The actual duty depends on whether the organization develops, deploys, procures, or uses the covered AI system in the law's scope.
Utah Artificial Intelligence Policy Act lists a maximum penalty of $5K in the Atlas record. Penalty exposure depends on the source section, violation type, and factual context.
We may receive referral commissions from recommended compliance tools. Recommendations are based on product fit and not on commission size. Links marked “partner link” include a tracked redirect.