SB0226 – Artificial Intelligence Consumer Protection Amendments

UTLawState

Date Passed

3/27/2025

Effective Date

5/7/2025

Summary

Creates consumer‑protection requirements around AI use, including disclosures for AI‑mediated interactions and guardrails against harmful impersonation or deception. Directs enforcement via state consumer‑protection authorities and sets penalties for violations.

Healthcare Implications

Patient‑facing bots, voice agents, and automated outreach used by health systems must clearly disclose AI involvement and avoid deceptive impersonation. Marketing, scheduling, and billing workflows using generative tools should implement policy, logging, and quality assurance to meet the new standards.

Operational Implications

  • Narrows UAIPA disclosure trigger: general consumer requests must now be 'clear and unambiguous'; GenAI definition narrowed to systems simulating human conversation.
  • Narrows regulated-occupation disclosure to 'high-risk AI interactions' only (involving collection of sensitive personal info like health/biometric data, or personalized recommendations/advice in healthcare, law, or finance). Safe harbor: no enforcement action if GenAI itself discloses non-human nature at outset and throughout interaction. Amends UT SB0149 (UAIPA); effective May 7, 2025.

Impact Level

Medium

Keywords

Privacy & Data

Stakeholders

Providers & Health Systems; Patients & Public; Developers & Vendors