Which AI laws have small business exemptions and what the thresholds are. Here is what Utah businesses need to know in 2026.
Utah has enacted SB 149 — AI Policy Act (amended 2025 by SB 226 & SB 332). Suppliers using generative AI must disclose it up-front only in high-risk interactions (e.g., regulated professions or consequential advice) and otherwise only on a consumer's clear and unambiguous request; separately, AI mental-health chatbots must disclose they are not human and face data-sharing and advertising limits (HB 452).
State law does not replace federal law — you must comply with both. These federal rules apply to small business ai nationwide:
It depends on the thresholds written into the specific statute, and those are not comparable across laws — some key on employee count or revenue, others on user volume or on the kind of system you deploy. We do not publish a generic small-business exemption for Utah, because stating one the statute does not contain would be worse than stating none. Read the primary source linked from our Utah law page to confirm whether you are in scope.
The key deadline in Utah is In effect since May 1, 2024 (2025 amendments effective May 7, 2025; sunset July 2027). This law is already in effect — you must comply now.
Utah penalties for AI non-compliance: Up to $2,500 per violation (administrative, Utah Div. of Consumer Protection). Who enforces, and how, varies by statute — check the primary source linked from our Utah law page for the enforcement authority and process that actually applies to you.
Federal law does not currently preempt state AI law. Utah's AI statutes apply independently of federal rules, and federal laws like ECOA, FCRA, and HIPAA apply alongside them — so you must comply with both.
Best practice: document all AI systems used, conduct an internal audit, implement required disclosures, and keep records for at least 3 years. For high-risk uses like small business ai, consider hiring an independent third-party auditor to validate compliance.
Take the free 4-question risk snapshot. See which laws apply, your risk level, and the first actions to take — no signup required.
Take the Free Assessment →