HB 3 adjusts state government budgets for fiscal years 2026 and 2027 by increasing or decreasing funding for various agencies, education programs, and higher education institutions. The bill provides specific budget changes for criminal justice agencies, including the Governor's Office, Board of Pardons and Parole, Judicial Council, and Department of Public Safety, with some funds designated for technology upgrades and program implementation. It also allocates money to support bills passed in the 2026 General Session and includes intent language regarding fund usage. The legislation appropriates hundreds of millions of dollars across operating budgets, expendable funds, and business-like activities from multiple funding sources including the General Fund, Income Tax Fund, and various restricted accounts.
SB 256 updates Utah's defamation laws to address AI-generated content and identity protection. It clarifies that AI-created or digitally manipulated content (like deepfakes) still falls under libel/slander laws, requires publishers to receive written notice before a lawsuit can be filed, and limits damages to actual harm if the content is removed within 10 days of notice. The bill also establishes a new right for individuals to consent to the use of their personal identity (including voice, likeness, or name) and expands "identity abuse" to include unauthorized distribution of identity-replication tools. This directly affects content creators, publishers, and anyone whose identity might be used without consent in AI-generated media. The bill is currently in early legislative stages (House committee review).
HB 158 amends Utah law to broaden protections against unauthorized tracking by renaming the offense to "unlawful use of a tracking device or tracking application." It makes it illegal to place trackers on personal property (excluding vehicles) or use tracking apps to monitor someone after they revoke consent, even if initial permission was given. The bill adds statutory damages for victims who choose this option over compensatory damages in civil cases. It includes exemptions for licensed private investigators (under specific conditions), parents tracking minors, caregivers for vulnerable adults, and law enforcement acting under court orders or official duties. The law applies directly to individuals using tracking technology and aims to strengthen privacy rights against persistent monitoring.
SB 275 creates Utah's State-Endorsed Digital Identity Program, managed by the Department of Government Operations. It establishes a digital identity bill of rights, sets standards for verifying identities, and allows state-verified digital IDs to be used as proof of age (e.g., for purchasing alcohol or tobacco). The program requires government agencies, healthcare providers, and digital wallet services to follow specific security and privacy rules when processing these identities. It does not create new costs, as no funding is appropriated, and replaces outdated electronic ID provisions upon sunset review.
HB 72 requires Utah law enforcement to complete cryptocurrency investigation training and mandates prosecuting agencies to certify at least one digital asset specialist. It imposes licensing, registration, and consumer protection rules on virtual currency kiosk operators, including daily transaction limits of $1,000 per customer, a 3% fee cap, mandatory blockchain fraud analysis, and clear disclosure requirements. Kiosks must display multilingual fraud warnings and provide detailed transaction receipts in the customer’s chosen language. The bill also requires law enforcement agencies to report cryptocurrency investigation data to a state commission, which must publish annual legislative summaries.
HB 261 amends Utah's Electronic Information Privacy Act to clarify how law enforcement agencies may access electronic data. It requires warrants for most electronic information, location data, or transmitted data during criminal investigations, directly affecting law enforcement agencies and service providers like phone companies. Key provisions prohibit law enforcement from outsourcing data collection to third parties in ways they couldn’t do themselves, and mandate that illegally obtained data - or evidence derived from it - be excluded from court, similar to constitutional violations. The bill updates definitions and procedures without appropriating new funds or creating new financial obligations.
HB 276 creates Utah's "Digital Voyeurism Prevention Act" to address non-consensual AI-generated intimate images. It directly affects platforms and services that let users create such images (called "generation services"), requiring them to obtain and verify explicit consent from the person depicted before distributing any AI-generated intimate image. The bill mandates platforms to implement verification systems, disclose provenance data for AI content, and follow notice-and-takedown procedures for violations. It establishes civil liability for damages, including actual losses and attorney fees, enforced by Utah's Division of Consumer Protection.
HB 384 clarifies the structure and oversight responsibilities of Utah's Department of Government Operations. It explicitly places the Utah Office of Data Privacy within the department, updates the definition of "executive branch entity" to include the Division of Technology Services for payroll purposes, and shifts the Division of Finance's role from auditing all state claims to overseeing internal controls for financial transactions. The bill also clarifies the department's oversight of the state's accounting system and payroll services provided by the Division of Human Resource Management. These changes directly affect state agencies using payroll systems and the Division of Finance, streamlining administrative oversight without new funding.
HB 425 restricts how Utah cities and towns can charge certain fees. It bars cities from imposing general fees for broadband internet or public safety services (like police/fire) on the public, with limited exceptions (e.g., fees for bonds issued before 2026 must end by 2027). Similarly, towns cannot charge general fees for public safety services, except for existing fees tied to agreements between towns or volunteer services, which must be renewed every three years. The bill also creates a new process for municipalities to establish transportation utility fees (for services like roads), requiring annual reviews, appeal mechanisms, and local referendums for new fees.
SB 290 strengthens privacy protections for victims and witnesses in Utah criminal cases by regulating access to their nonpublic electronic data, such as personal messages or intimate images shared with law enforcement. It requires law enforcement to implement secure "virtual rooms" for defendants' attorneys to review sensitive data without copying it, creates a presumption against disclosing intimate images, and mandates clear disclosure of devices used in investigations. The bill directly affects victims/witnesses (who gain greater control over their private information), law enforcement (who must adopt new policies), and defendants (who must seek court approval to access nonpublic data). Key provisions include defining "nonpublic victim or witness data," requiring prosecutors to notify defendants about device searches, and limiting data sharing to specific court-approved scenarios. The bill makes no changes to existing evidence disclosure rules under Utah Rules of Criminal Procedure.
