Utah SB 34 (Governmental Use of Facial Recognition Technology)

• Authority: Utah
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Enacted
• Most recent activity date: 2021-03-16

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Compromise of privacy
• Disinformation, surveillance, and influence at scale
• Overreliance and unsafe use
• Governance failure
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Unfair discrimination and misrepresentation
• Unequal performance across groups
• AI system security vulnerabilities
• Fraud, scams, and targeted manipulation
• Lack of capability or robustness

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 6-8 subdomains, with strong focus on privacy compromise (2.1), AI system security (2.2), disinformation and surveillance (4.1), fraud and manipulation (4.3), lack of transparency (7.4), and governance failure (6.5). Coverage is concentrated in privacy, security, misuse prevention, and governance domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Public Administration (excl. National Security)

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Educational Services
• National Security

All other sectors had no coverage in this document.

Sectors Summary

The document primarily governs Public Administration excluding National Security (comprehensive coverage of government agencies, law enforcement, courts, and educational institutions) and has minimal coverage of National Security through references to the National Guard. It is a government-specific regulation that does not extend to private sector use of facial recognition technology.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding state statute enacted by the Utah Legislature with mandatory language, specific enforcement mechanisms, and legal obligations on government entities regarding facial recognition technology use.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Summary: The document is a state bill enacted by the Legislature of the state of Utah, establishing it as the proposing authority.

Target

• Entity Types: AI_Governance_Actor, AI_Deployer
• Summary: The statute explicitly defines and regulates 'government entities' which includes state agencies, law enforcement, educational institutions, and political subdivisions that use facial recognition systems.

Enforcer

• Entity Types: AI_Governance_Actor
• Summary: The statute establishes reporting requirements to the Government Operations Interim Committee and requires disclosure to prosecutors, indicating oversight and enforcement roles.

Monitor

• Entity Types: AI_Governance_Actor
• Summary: The statute requires annual reporting to the Government Operations Interim Committee and designates the Department of Public Safety as the central authority for facial recognition system use, indicating monitoring responsibilities.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily focuses on the Deploy and Operate and Monitor stages of the AI lifecycle, with detailed requirements for deployment procedures, operational use restrictions, and ongoing monitoring through reporting. It also addresses aspects of Verify and Validate through requirements for human review and verification of AI system outputs.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Systems
• Task-specific AI

Technical Scope Summary

The document explicitly focuses on facial recognition systems and technology, defining them as AI systems that use algorithms to compare biometric data. It does not mention broader AI categories like general purpose AI, foundation models, or generative AI, nor does it reference compute thresholds or open-source models.