Law / United States / Utah

Identity Protection Modifications, AI Defamation and Identity Replication (SB 256, 2026 General Session)

Utah Code 45-2-3.5, 45-2-14, 45-3-2 to 45-3-7, as amended

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

In force 4 months, effective 6 May 2026.

An AI prohibited practices rule binding public and private bodies.

As of 8 September 2026.

What it requires

  • Do not treat the use of generative AI, computer animation, or digital manipulation as a defense to a libel or slander claim
  • Give a person written notice before filing a defamation action over digitally created content; if you are the publisher and remove the content within 10 days of that notice, the plaintiff's recovery is limited to actual damages
  • Get an individual's consent before distributing an AI-generated, computer-animated, or digitally manipulated replica of that individual's likeness or voice
  • Do not traffic in identity-replication tools without the depicted individual's consent

If you get it wrong

Criminal exposureNo

Private right of actionYes

What it reaches

Obligation class

Consent, Prohibition

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

SB 256 (2026 General Session), effective 6 May 2026, enacts Utah Code 45-2-3.5 to provide that it is not a defense to a libel or slander claim that the communication was created through generative artificial intelligence, computer animation, digital manipulation, or another technological means, or that it uses simulated content rather than an actual recording.

A new Section 45-2-14 requires written notice to the publisher before filing such an action and limits recovery to actual damages if the publisher removes the content within 10 days of notice.

The bill also amends Title 45 Chapter 3, the Abuse of Personal Identity Act, so that every individual's exclusive right to consent to use of their personal identity includes a replication right reaching an AI-generated, computer-animated, or digitally manipulated simulation of their likeness or voice; a person whose identity is abused, including through unauthorized distribution of or trafficking in identity-replication tools, may sue for injunctive relief, damages, exemplary damages, and attorney fees. The chapter does not impose liability on an interactive computer service for content provided by another person.

When LexLint raises it

  • generates_content
  • processes_voice
  • processes_biometrics

Read the law

official Utah Code (Section 45-2-3.5) and enrolled bill text, Utah State Legislature (official)

Back to the example  ·  Lint your app