You're previewing an early version of the Bill Tracker. We're still ironing out some bugs — thanks for your patience as we build this out.

H.B. 276

Signed into Law

Artificial Intelligence Modifications

HB0276S02 (Substitute)

View on le.utah.gov
H.B. 276Signed into Law

Artificial Intelligence Modifications

House
Senate
Governor

What This Bill Does

This bill enacts provisions related to counterfeit intimate images and digital content provenance standards.

Key Provisions

This bill:

  • defines terms;
  • creates the Digital Voyeurism Prevention Act to address non-consensual generation and distribution of counterfeit intimate images;
  • prohibits generation services and platforms from distributing counterfeit intimate images without obtaining and verifying consent from the depicted individual;
  • establishes civil liability for violations of the act, with actual damages, punitive damages, attorney fees, and injunctive relief;
  • establishes safe harbor protections for generation services and covered platforms that implement reasonable safeguards and respond appropriately to notices;
  • establishes heightened pleading standards requiring plaintiffs to plead specific facts;
  • requires platforms to implement notice and takedown procedures and disclosure requirements;
  • requires large online platforms to detect, disclose, and preserve provenance data in distributed content;
  • establishes requirements for capture device manufacturers regarding latent disclosures in captured content;
  • requires covered providers to include disclosures in AI-generated content;
  • provides exemptions for certain products and services;
  • provides for enforcement by the Division of Consumer Protection; and
  • provides a severability clause.

Plain-Language Summary

AI-generated summary. We recommend consulting the bill text for important decisions.

Two new laws take effect January 1, 2027 under this bill. The first, called the Digital Voyeurism Prevention Act, prohibits AI services from generating or distributing fake intimate images — sometimes called "deepfake" pornography — of a real, identifiable person without that person's verified consent, requires platforms to remove such images within 48 hours of receiving a complaint, and allows victims to sue for damages including emotional distress, punitive damages, and attorney fees. The second law, the Digital Content Provenance Standards Act, requires large social media platforms and search engines to detect and display hidden data tracking where digital content came from and how it was made, requires AI companies with over one million users to embed similar origin disclosures in AI-generated images, video, and audio, and requires camera and smartphone manufacturers to embed timestamp and device-origin data into photos and videos starting in 2028.