Utah S.B. 271 (Unauthorized Artificial Intelligence Impersonation Amendments)

• Authority: Utah
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Enacted
• Most recent activity date: 2025-02-14

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Fraud, scams, and targeted manipulation

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Compromise of privacy
• False or misleading information
• Disinformation, surveillance, and influence at scale

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document primarily addresses risks related to malicious actors (4.1, 4.3) through unauthorized AI impersonation for commercial purposes. It has good coverage of fraud and manipulation (4.3), minimal coverage of disinformation (4.1), and addresses privacy concerns (2.1) through protection of personal identity. The document focuses on preventing harmful uses of generative AI rather than technical AI safety or broader societal impacts.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Information
• Professional & Technical Services

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Finance & Insurance
• Health Care & Social Assistance
• Arts, Entertainment & Recreation
• Accommodation, Food & Other Services
• Public Administration (excl. National Security)

All other sectors had no coverage in this document.

Sectors Summary

This statute governs AI use across multiple commercial sectors where advertising, marketing, and commercial endorsements occur. The primary sectors affected are Information (media and publishing), Professional and Technical Services (advertising and marketing), and potentially Finance and Insurance, Health Care, and other sectors that engage in commercial advertising and fundraising activities.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding state statute enacted by the Utah Legislature with clear enforcement mechanisms including civil causes of action, injunctive relief, damages, and attorney's fees for violations.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: Utah State Legislature
• Summary: The document is a state bill enacted by the Legislature of the state of Utah, as indicated in the opening clause and the effective date provision.

Target

• Entity Types: AI_Developer, AI_Deployer
• Summary: The statute targets persons who use generative AI to create unauthorized content using individuals' personal identities for commercial purposes, and those who distribute technology designed for such unauthorized uses. This includes both developers of such technology and deployers who use it for advertisements or commercial purposes.

Enforcer

• Entity Types: Affected_Stakeholder
• Summary: The statute creates a private right of action, meaning enforcement is conducted by affected individuals through civil lawsuits rather than by a government agency. Individuals whose personal identity has been abused can bring actions in civil courts.

Monitor

• Summary: The statute does not establish any formal monitoring body or mechanism. Compliance monitoring is implicit through the private right of action, where affected individuals identify violations and bring lawsuits.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily addresses the Deploy and Operate and Monitor stages of the AI lifecycle, focusing on the use of generative AI systems for creating unauthorized content. It does not substantially cover planning, data collection, model building, or verification stages.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• Generative AI

Technical Scope Summary

The document explicitly defines and covers generative artificial intelligence systems. It does not mention AI models, AI systems broadly, frontier AI, general purpose AI, task-specific AI, foundation models, predictive AI, open-weight models, or compute thresholds. The focus is specifically on generative AI technology used to create content simulating personal identities.