Technology and privacy

The bill would require community drinking water systems to have an emergency response plan and to report security breaches to the Utah Cyber Center within two hours.

The bill requires school districts to cancel contracts with education technology vendors that share student information with third parties if the problem is not fixed within 30 days.

The bill would require crypto ATM operators to show fraud warnings, limit daily transactions to $2,000 for the first three days and $5,000 a day after that, and provide a customer service line.

H.B. 147 would require state and local government agencies to offer an electronic way, such as online submission, email, or fax, to submit forms and records that currently must be filed in person or on paper.

The bill requires government entities and special districts to check operational technology in critical systems such as water, communications, and electrical systems for malware and to block remote access to it.

This bill amends Utah's Electronic Information Privacy Act to set when state and local police may obtain electronic evidence from another jurisdiction and when that evidence may be thrown out in court.

H.B. 276 would require large online platforms to get consent from people shown in AI-generated intimate images, or take those images down, with a safe harbor for companies acting in good faith.

H.B. 289 splits child sexual abuse material into three categories: real children, AI-generated images that appear to show children under 12 or prepubescent, and obscene material depicting minors or adults.

H.B. 319 would let counties propose secure digital methods to verify the identity of people submitting records, as an alternative to notarization.

H.B. 320 changes the Office of Artificial Intelligence Policy so it can make agreements with other state agencies, the judiciary, and educational institutions, not just the Department of Commerce and private companies, and adds joint interpretation agreements on how state law applies to AI.

H.B. 354 makes it a Class B misdemeanor to tamper with, damage, or destroy rescue tracking equipment, which is small GPS devices placed in public restrooms and rest stops.

H.B. 408 would tighten Utah's 2025 Digital Choice Act, which lets users move their data from one online platform to another.

In its latest version, the bill changes state data privacy rules so complaints go to the responsible agency before the ombudsman, and it removes the state data privacy auditor position while keeping audit duties with the state auditor's office.

H.B. 498 amends Utah's app store age-verification law by delaying most of its requirements to May 6, 2027, and limiting enforcement to private lawsuits, with the state regulator's role removed.

H.B. 519 gives the state treasurer a set of rules for handling unclaimed digital assets such as cryptocurrency.

This joint resolution would amend Utah's rules of evidence so that machine-generated evidence is judged by the same reliability standards used for expert evidence.

The bill would require local law enforcement agencies to examine seized cell phones themselves or through agreements with other agencies, instead of sending them to the FBI-run RCFL lab.

S.B. 69 would set a statewide default that students may not use cell phones during school hours, from the opening bell to the closing bell.

SB 73 would require websites where at least a third of content is adult material to verify visitors' ages, and would place a 2% excise tax on paid access to such content, collected by the Tax Commission.

This bill narrows last year's law on app-based platforms that match temporary healthcare shifts with workers.

The bill creates a restricted account that state funds could be appropriated into to pay for cybersecurity support for K-12 schools and local governments.

The bill would clarify that streamed and downloaded digital products, such as audio, books, and gaming services, are both subject to Utah sales tax.

S.B. 183 would bar law enforcement from tampering with privately installed surveillance cameras on private property, meaning covering, removing, or changing their direction.

S.B. 275 would create a state-endorsed digital identity program run by a state-appointed program manager, with rulemaking, public comment, and annual reports to the Legislature.

The bill would require law enforcement and prosecutors to separate non-public victim and witness data, such as intimate images, personal messages, and private device records, from ordinary evidence.

H.B. 112 would add social media, including paid influencer posts and paid digital ads, to the rules requiring political advertising to say who paid for it.

This bill would require large AI companies to publish plans for keeping users safe and to disclose risks.

The bill would regulate companion chatbots, meaning AI chatbots designed to act as relationships, and would require them to let users request copies of saved conversations and get clear permission before using sensitive personal data.

H.B. 504 would require printed political advertising that includes visual content generated by artificial intelligence to say so.

This bill would require retailers that use personalized, or surveillance, pricing to disclose that practice on their webpages.

S.B. 205 would require law enforcement agencies that use artificial intelligence tools to generate police reports to disclose that use and the safeguards they apply.

This joint resolution would have the Utah Legislature formally express friendship and support for Taiwan, citing existing trade and a driver's license agreement.

This resolution would encourage other Utah state departments to explore responsible ways to use artificial intelligence, following a small pilot by the Legislative Research and General Counsel office.

This bill would direct the state cybersecurity commission to write rules setting minimum cybersecurity standards for Utah schools, with a timeline for adopting them.