Utah HB 276 — Digital Voyeurism Prevention & AI Content Provenance: AI Compliance Requirements
Utah HB 276 was signed by Governor Cox on March 24, 2026, and takes effect approximately May 23, 2026 (60 days post-signing). The law has two major components relevant to AI businesses. (1) AI Content Provenance: AI content operators must embed provenance data or metadata into AI-generated or AI-modified content so that users can determine whether the content was created or altered by AI. This broadly applies to any business generating or distributing AI content, not just intimate images. (2) Non-Consensual Deepfakes: AI image and video generation services must obtain and verify affirmative consent from identifiable individuals before generating or distributing sexually explicit AI-generated content depicting them. Generation services and platforms that knowingly distribute non-consensual intimate AI images face civil liability under the Digital Voyeurism Prevention Act, with potential for actual damages, punitive damages, and attorney fees.
Key Facts
May 23, 2026
Civil liability: actual damages + punitive damages + attorney fees. AG enforcement possible.
What Your Business Must Do
2 compliance requirements identified. Critical requirements carry the highest risk of enforcement action.
Embed Provenance Metadata in AI-Generated Content
High PriorityEffective ~May 23, 2026: If your business generates or distributes AI-created or AI-modified content (images, video, audio, text), you must embed provenance data or metadata that enables users to determine whether the content was created or altered by AI. This requirement applies beyond just explicit content — it covers all AI-generated outputs distributed in Utah. Document your content provenance implementation (e.g., C2PA metadata, watermarks, or equivalent disclosure mechanisms).
Obtain Consent Before Generating Intimate AI Deepfakes
High PriorityAI generation services and platforms must obtain affirmative, verifiable consent from any identifiable real person before generating or distributing sexually explicit AI-generated content depicting them. Implement consent verification workflows. Do not process requests to generate intimate AI content of real individuals without documented consent. Failure exposes the service and distribution platform to civil liability.
Frequently Asked Questions
Does Utah HB 276 — Digital Voyeurism Prevention & AI Content Provenance apply to my business?
Utah HB 276 was signed by Governor Cox on March 24, 2026, and takes effect approximately May 23, 2026 (60 days post-signing). The law has two major components relevant to AI businesses. (1) AI Content Provenance: AI content operators must embed prove. Use ComplianceIQ's free scanner to get a personalized assessment in under 5 minutes.
What is the penalty for non-compliance?
The maximum penalty under Utah HB 276 — Digital Voyeurism Prevention & AI Content Provenance is: Civil liability: actual damages + punitive damages + attorney fees. AG enforcement possible.. Fines are typically scaled by company size, severity of violation, and whether violations were willful or accidental.
How do I comply with Utah HB 276 — Digital Voyeurism Prevention & AI Content Provenance?
The 2 requirements above cover the core obligations. The fastest path to compliance is: (1) conduct an AI risk assessment, (2) document your AI systems, (3) implement transparency disclosures where required. ComplianceIQ generates all required documents automatically.
Official Source
https://le.utah.gov/Session/2026/bills/static/HB0276.htmlLast updated: 2026-04-14 — verify at source before relying on this information.
Don't leave compliance to chance
ComplianceIQ scans your AI tools, tells you exactly which regulations apply, and generates all required documents — in 30 minutes.
Start your free compliance scan