Utah HB 452 (Artificial Intelligence Amendments 2025)

Regulates mental health chatbots using AI by prohibiting unauthorized data sharing, restricting advertising, and mandating transparency about AI use. Empowers the Division of Consumer Protection for enforcement. Requires suppliers to adhere to privacy and safety regulations.

  • Authority: Utah
  • Parent authority: State governments
  • Jurisdiction: United States
  • Collections: U.S. state and local documents
  • Most recent activity: Enacted
  • Most recent activity date: 2025-03-25

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

  • Compromise of privacy
  • Overreliance and unsafe use
  • Lack of capability or robustness
  • Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

  • Unfair discrimination and misrepresentation
  • AI system security vulnerabilities
  • False or misleading information
  • Fraud, scams, and targeted manipulation
  • Loss of human agency and autonomy

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 6-8 subdomains, with strong focus on privacy compromise (2.1), security vulnerabilities (2.2), overreliance and unsafe use (5.1), loss of agency and autonomy (5.2), false information (3.1), and lack of transparency (7.4). Coverage is concentrated in privacy/security, human-computer interaction, and AI system safety domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

  • Health Care & Social Assistance

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

  • Information
  • Scientific Research & Development Services

All other sectors had no coverage in this document.

Sectors Summary

The document primarily governs the Health Care and Social Assistance sector through regulation of mental health chatbots. It also has secondary coverage of the Information sector as suppliers of AI chatbot technology are regulated.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding state statute (Utah HB 452) with mandatory obligations, enforcement mechanisms including administrative fines up to $2,500 per violation and court actions, and explicit penalties for non-compliance enforced by the Division of Consumer Protection.

Actors

Proposer

  • Entity Types: AI_Governance_Actor
  • Entities: Utah State Legislature
  • Summary: This is a state legislative bill (HB 452) enacted by the Legislature of the state of Utah, establishing regulatory requirements for mental health chatbots using AI.

Target

  • Entity Types: AI_Developer, AI_Deployer
  • Summary: The document targets 'suppliers' of mental health chatbots, defined as entities that provide AI-powered mental health chatbot services to users. These suppliers are responsible for developing, deploying, and operating the chatbots, making them both developers and deployers.

Enforcer

  • Entity Types: AI_Governance_Actor
  • Entities: Division of Consumer Protection; Attorney General of Utah
  • Summary: The Division of Consumer Protection is designated as the primary enforcement authority with power to impose fines and bring court actions. The Attorney General provides legal support and can bring civil actions on behalf of the Division.

Monitor

  • Entity Types: AI_Governance_Actor
  • Entities: Division of Consumer Protection
  • Summary: The Division of Consumer Protection monitors compliance through policy filings, documentation requirements, and ongoing oversight of suppliers' adherence to safety and privacy standards.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

  • Plan and Design
  • Collect and Process Data
  • Build and Use Model
  • Verify and Validate
  • Deploy
  • Operate and Monitor

AI Lifecycle Summary

The document primarily addresses the Deploy and Operate and Monitor stages of the AI lifecycle, with some coverage of Verify and Validate. It focuses on requirements for deploying mental health chatbots to users and ongoing operational monitoring, safety protocols, and user protection measures.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

  • AI Models
  • Foundation Models
  • AI Systems
  • Generative AI

Technical Scope Summary

The document explicitly defines and regulates 'artificial intelligence', 'artificial intelligence technology', and 'generative artificial intelligence' in the context of mental health chatbots. It does not mention frontier AI, general purpose AI, foundation models (except in documentation requirements), task-specific AI, predictive AI, open-weight models, or compute thresholds.

https://le.utah.gov/Session/2025/bills/introduced/HB0452S02.pdf
https://agora.eto.tech/instrument/4781
Explore in the Document View

Document data from AGORA, CSET Emerging Technology Observatory.