HB 147 requires Utah state and local government entities (including counties, cities, school districts, and state agencies) to provide electronic options for submitting forms, records, and information instead of requiring in-person visits or physical copies. It mandates electronic submission methods like online entry, digital signing, or email uploads, with specific exceptions for cases where federal/state law requires in-person submission or fingerprints are needed for background checks. The bill takes effect on July 1, 2027, and does not appropriate funds.
HB 182 prohibits Utah medical and genomic research facilities from using genetic sequencers or software developed by foreign adversaries (as defined by federal law) or storing genetic data within foreign adversary countries. It requires facilities to certify compliance with these rules by December 2028 and every decade thereafter, while banning remote access to non-public genetic data by entities in foreign adversary nations without written approval. Violations carry $10,000 fines per instance, enforced by the attorney general, who may also pursue civil actions for damages. The bill protects employees who report suspected violations to the attorney general from workplace retaliation. It takes effect January 1, 2028.
SB 123 amends Utah's cybersecurity law to expand the Utah Cyber Center's responsibilities and structure. It requires the Center to collaborate with the Department of Environmental Quality and include local education agencies in its cybersecurity efforts, while adding a representative from the Utah Education and Telehealth Network to the Cybersecurity Commission. The bill changes the deadline for the statewide cybersecurity plan to January 1, 2027, and creates a restricted account for nonlapsing funds to support cybersecurity tools, incident response, and strategic planning using existing and future funding sources without new legislative appropriations. These changes directly affect the Cyber Center, local education agencies, and the Cybersecurity Commission.
HB 165 establishes security protocols for Utah's critical infrastructure (like power grids, water systems, and state data networks) by addressing risks from foreign adversary technology. It requires the Utah Cyber Center to create annual guidance for state agencies on assessing risks from foreign adversary tech, prohibits state contracts with such companies for critical infrastructure, and bans federally banned equipment. Agencies may request voluntary security assessments for existing or planned foreign adversary technology use, though recommendations are advisory only and don't mandate contract changes or technology transitions. The bill directly affects all state agencies operating critical infrastructure systems and takes effect May 6, 2026.
HB 59 requires businesses serving alcohol (including restaurants, bars, taverns, and beer retailers) to verify the age of individuals appearing to be 35 years old or younger before serving them alcohol or admitting them to the premises. It mandates electronic verification of ID using state-approved technology, limits displayed information to basic details (name, age, ID number), and requires businesses to retain verification data for seven days. The bill also allows authorized personnel to confiscate suspected fake IDs and report them to law enforcement. This law takes effect May 6, 2026, and applies retroactively from January 1, 2026.
HB 581 requires large public transit districts in Utah to gather information about implementing self-driving bus networks by November 2026. It directs the state Department of Transportation to similarly collect data on autonomous vehicle technology, including costs, timelines, and potential benefits. The bill defines key terms like "driverless operation" and "automated driving systems" to clarify future regulations. These information requests aim to inform state decisions about self-driving transit systems without creating new funding or requirements.
HB 407 requires Utah's State Board of Education to establish a statewide student information system for public schools, while allowing local school districts to maintain their own systems under specific conditions. The bill sets strict requirements for local systems - including data security, compliance with state standards, and mandatory audits for noncompliance - and mandates implementation timelines. It also specifies that all school districts must collect and manage student data through this system or approved local alternatives, ensuring data accessibility for parents and educators via the "Student Achievement Backpack" feature. The bill makes no new funding appropriations and updates multiple Utah Code sections related to education data management.
HB 223 updates Utah's process for collecting signatures on petitions by requiring all electronic signature devices to scan voter ID data (like driver's licenses) and operate offline by 2028. Starting January 1, 2030, petition sponsors and circulators must use electronic signatures exclusively, banning manual signature collection entirely. The bill also clarifies security standards for devices and mandates annual reports from the lieutenant governor to the Government Operations Committee. These changes directly affect initiative/referendum petition sponsors and candidate nomination circulators, streamlining the verification process while phasing out manual methods.
HB 438, the AI Companion Chatbot Safety Act, regulates companies that create AI chatbots designed for emotional engagement. It requires suppliers to implement safety protocols for identifying risks, conduct independent safety evaluations, and publicly report on safety measures and user engagement. The bill specifically prohibits sharing minors' data, sending unsolicited messages to encourage use, exposing minors to harmful content, or hiding that the chatbot is AI (mandating clear disclosure). It grants enforcement authority to Utah's Division of Consumer Protection and establishes fines for violations. The law directly affects AI chatbot developers and users, particularly minors, by setting concrete safety and transparency standards.
HB 26 amends Utah's voting equipment rules to enhance security and standardize procurement. It bans wireless communication in all voting machines (except electronic pollbooks), repeals outdated ranked-choice voting certification rules, and requires election officials to purchase only equipment selected by the lieutenant governor's new voting equipment system. The bill creates a Voting Equipment Selection Committee to help the lieutenant governor evaluate and procure secure voting systems that meet mechanical ballot requirements. These changes directly affect election officials, vendors, and voters by standardizing equipment security and procurement processes.