Critical RiskIn Effect

AI Compliance for 🏛️ Government Contractor in Utah

Government Contractor companies in Utah face specific AI requirements under SB 149 — AI Policy Act. Federal AI guidance plus state laws create complex compliance landscape. FAR AI provisions apply.

By AI Law Tracker Editorial Team · Legal research team

Published Apr 22, 2026Reviewed Apr 22, 2026

Law

SB 149 — AI Policy Act

Deadline

May 1, 2024

Penalty

Up to $2,500 per violation

Sector Risk

Very High

What Government Contractor businesses in Utah must do

Generative AI must disclose AI nature when asked. First comprehensive state AI law in US.

Federal AI guidance plus state laws create complex compliance landscape. FAR AI provisions apply.

What this means for Government Contractor in Utah

Government Contractor companies in Utah are navigating the intersection of two accelerating trends: the rapid integration of AI tools into proposal automation, contract management, compliance monitoring, and security analysis, and a growing body of state law that places direct obligations on businesses that deploy these systems. Whether you use AI for proposal writing or deploy AI-powered security monitoring tools, the regulatory landscape in Utah has concrete implications for how your business must operate today.

SB 149 — AI Policy Act is already in effect in Utah, which means compliance is a current legal requirement — not a future planning exercise. The law requires generative ai must disclose ai nature when asked. first comprehensive state ai law in us. For government contractor businesses specifically, this obligation is especially significant because federal contractors face both the FAR AI provisions and state AI law — creating one of the most complex dual-jurisdiction compliance environments. Businesses found in violation face penalties of Up to $2,500 per violation.

Within the government contractor sector, AI systems commonly scrutinized by regulators include proposal generation AI, contract lifecycle management tools, AI security analytics, automated compliance monitoring, and workforce management AI. UT regulators have called out FAR AI provisions, security AI transparency, and state employment AI requirements as areas of elevated concern under SB 149. Importantly, these requirements apply regardless of whether a business built the AI system internally or purchased it from a third-party vendor — organizations that deploy AI bear compliance responsibility for the systems they use.

The sector risk classification for Government Contractor is Very High, reflecting the reality that government contractors hold sensitive federal data and are subject to both federal oversight and state law, creating layered compliance obligations that must be managed in parallel. Federal AI guidance plus state laws create complex compliance landscape. FAR AI provisions apply. In Utah, businesses that process federal contract data, personnel records, security assessments, and performance metrics through automated decision systems face the greatest exposure. The law's scope, however, typically captures a broad range of operators — not just large incumbents — so smaller government contractor businesses should not assume they are below the regulatory threshold.

The most effective starting point for government contractor businesses in Utah is an AI inventory: a documented list of every AI system in use, the decisions it influences, and whether those decisions affect individuals in ways the law covers. From there, companies typically need written disclosure notices, a designated internal owner for AI compliance, and a regular review cadence to track the technology and regulatory landscape as both continue to evolve. Disclosure and documentation requirements are often achievable in a matter of weeks; technical controls around bias testing and impact assessment require longer runway. Given Utah's active enforcement environment, the time to begin is now.