Regulates mental health chatbots using AI by prohibiting unauthorized data sharing, restricting advertising, and mandating transparency about AI use. Empowers the Division of Consumer Protection for enforcement. Requires suppliers to adhere to privacy and safety regulations.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.
All other risk subdomains had no coverage in this document.
Risk Coverage Summary
The document has good coverage of approximately 6-8 subdomains, with strong focus on privacy compromise (2.1), security vulnerabilities (2.2), overreliance and unsafe use (5.1), loss of agency and autonomy (5.2), false information (3.1), and lack of transparency (7.4). Coverage is concentrated in privacy/security, human-computer interaction, and AI system safety domains.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.
All other sectors had no coverage in this document.
Sectors Summary
The document primarily governs the Health Care and Social Assistance sector through regulation of mental health chatbots. It also has secondary coverage of the Information sector as suppliers of AI chatbot technology are regulated.
Hard Law
Legislative Status Summary
This is a binding state statute (Utah HB 452) with mandatory obligations, enforcement mechanisms including administrative fines up to $2,500 per violation and court actions, and explicit penalties for non-compliance enforced by the Division of Consumer Protection.
Proposer
Target
Enforcer
Monitor
Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems
AI Lifecycle Summary
The document primarily addresses the Deploy and Operate and Monitor stages of the AI lifecycle, with some coverage of Verify and Validate. It focuses on requirements for deploying mental health chatbots to users and ongoing operational monitoring, safety protocols, and user protection measures.
Terms relating to technical scope that are mentioned or implicitly referenced in the document
Technical Scope Summary
The document explicitly defines and regulates 'artificial intelligence', 'artificial intelligence technology', and 'generative artificial intelligence' in the context of mental health chatbots. It does not mention frontier AI, general purpose AI, foundation models (except in documentation requirements), task-specific AI, predictive AI, open-weight models, or compute thresholds.
Document data from AGORA, CSET Emerging Technology Observatory.