Utah Unauthorized AI Impersonation (SB 271)

UTFor all AI companiesLowseverityIn effect

In effect since

Overview

Expands Utah's abuse of personal identity law to cover AI-generated deepfakes and digital replicas used for commercial purposes without consent. Prohibits distributing software primarily designed for unauthorized commercial impersonation. Covers AI-generated simulations of voice, video likeness, and audiovisual appearance. Not limited to deepfakes: it covers commercial misuse of personal identity including non-AI methods. First Amendment exemptions for newsworthiness, artistic expression, and parody. The software distribution prohibition targets nudification apps and similar tools.

This is an AI-specific state law.

Utah AI regulation guide lists every tracked rule for this jurisdiction with timelines and obligation tallies.

Who this applies to

This regulation applies to both companies that build AI products and companies that use AI tools from other vendors.

AI categories covered

  • Consumer-facing AI
  • General purpose AI

Specific AI use cases:

  • Content generation

What this requires you to do

  • Prohibited practices

    Prohibited practices. Review this obligation in the source text.

  • Consent required

    Obtain consent. Get explicit permission from individuals before collecting or using their data with AI.

    Obligation explainer: Consent

Enforcement and penalties

Civil damages via private right of action. Injunctive relief, actual damages, attorneys' fees.

This regulation includes a private right of action, which means individuals can file lawsuits directly. This significantly increases litigation risk.

Legislative history

How this law got here

  1. Latest

    effective

    Takes effect

  2. signed

    Signed by Governor Cox

    Earliest

Source

Read the full text

https://le.utah.gov/~2025/bills/static/SB0271.html

Last verified: April 9, 2026

Always verify current language and amendments at the official source.

Other Utah regulations

Explore more rules in the same jurisdiction that may apply to your AI systems.

Want to know what else applies to your company?

Run a free XIRA scan to see all regulations that match your states and AI tools.