Utah House Bill 148

• Authority: Utah
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Enacted
• Most recent activity date: 2024-03-13

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Exposure to toxic content
• Compromise of privacy
• False or misleading information
• Fraud, scams, and targeted manipulation
• AI possessing dangerous capabilities

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Disinformation, surveillance, and influence at scale

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 6-7 subdomains, with strong focus on malicious actors (4.1, 4.3), privacy compromise (2.1), toxic content (1.2), misinformation (3.1), and AI system capabilities (7.2). Coverage is concentrated in misuse prevention, privacy protection, and content-related harms.

Sector coverage

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Information
• Health Care & Social Assistance
• Public Administration (excl. National Security)

All other sectors had no coverage in this document.

Sectors Summary

This legislation does not target specific economic sectors but rather regulates individual conduct across all sectors. The exemptions for service providers indicate some coverage of the Information sector (internet service providers, telecommunications, hosting companies), though these entities receive safe harbor protections rather than being primary regulatory targets.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding state statute enacted by the Utah Legislature that creates criminal offenses with specified penalties, enforcement mechanisms, and mandatory obligations. The document uses mandatory legal language throughout and establishes felony and misdemeanor penalties for violations.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: Utah Legislature
• Summary: The document explicitly states it is enacted by the Legislature of the state of Utah, which is the proposing and enacting authority for this legislation.

Target

• Entity Types: Affected_Stakeholder
• Summary: The law targets 'actors' who distribute intimate images, counterfeit intimate images, or engage in sexual extortion. These are individuals who commit the specified offenses, not specific organizational entities. The law also applies to victims (individuals depicted in images) and service providers who receive exemptions.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: law enforcement agencies; prosecutorial agencies; courts
• Summary: The document references law enforcement agencies, prosecutorial agencies, and court proceedings as entities involved in enforcement. The criminal penalties (misdemeanors and felonies) indicate enforcement through the Utah criminal justice system.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: law enforcement agencies; prosecutorial agencies
• Summary: Law enforcement and prosecutorial agencies are implicitly responsible for monitoring compliance through investigation and prosecution of violations. The document also establishes reporting mechanisms where service providers must respond to notices from these agencies.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

No lifecycle stages identified.

AI Lifecycle Summary

The document does not explicitly address AI development lifecycle stages. It focuses on the distribution and use of AI-generated content (counterfeit intimate images) rather than the development, training, or deployment of AI systems themselves. The law regulates the output and misuse of AI capabilities rather than the AI development process.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• Generative AI

Technical Scope Summary

The document does not explicitly define or mention AI models, AI systems, or specific AI categories. It addresses AI-generated content implicitly through references to 'computer or computer-generated image or picture, or video' and content that 'has been edited, manipulated, or altered' to create counterfeit intimate images, which encompasses AI-generated deepfakes.