Law / United States / 
Utah
Digital Voyeurism Prevention Act (HB 276, 2026 General Session), Utah Code Title 13 Chapter 72b
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force in 100 days, effective 1 January 2027.
An AI prohibited practices rule binding private bodies.
As of 8 September 2026.
What it requires
- Do not distribute a counterfeit intimate image of an identifiable individual without first obtaining that individual's affirmative consent, if you operate a generation service
- Verify the identity of the person giving consent and keep a record of the consent for at least seven years
- Give users a clear way to report a non-consensual counterfeit intimate image and remove a reported image within 48 hours of notice, if you operate a covered platform
- This chapter takes effect 2027-01-01, so it is a duty to prepare for rather than one owed today
If you get it wrong
Criminal exposureNo
Private right of actionYes
What it reaches
Obligation class
Prohibition, Consent
What it makes you log
Who may demand the log
Court
What the log must hold
Consent or opt-out state, Affected person reference
Log retention
The floor runs from when the consent is obtained; the act names no maximum and no purpose-based cap.
- Unit
- Years
- As of
- 21 September 2026
- Basis
- Fixed
- Minimum value
- 7
Logging duty
To obtain the consent that clears a generation service to distribute a counterfeit intimate image, the service must implement and maintain a consent system that assures the depicted individual's identity and maintains a record of the consent for at least seven years. No provision names a route into this record other than the court's own review of the safe harbor defense in a civil action, and that review happens only once a suit is filed, so it is not a standing audit expectation.
- Kind
- Explicit
- As of
- 21 September 2026
- Provision
- 13-72b-201(3)
- Trigger
- consent_or_optout
Who checks it
Audit expectation
none
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
HB 276 (2026 General Session) creates new Chapter 72b, the Digital Voyeurism Prevention Act, effective 1 January 2027. A generation service, a person operating an interactive computer service that lets users generate intimate images using artificial intelligence technology, may not distribute a counterfeit intimate image of an identifiable individual without first obtaining that individual's affirmative, identity-verified consent, and must keep a record of the consent for at least seven years.
An injured individual may bring a civil action for an injunction, actual and punitive damages, and attorney fees, without needing to plead or prove actual damages. A generation service that maintains and follows a qualifying consent system and written policy, and responds promptly once it learns of a violation, has a safe harbor from that civil liability.
A covered platform must give users a way to report a non-consensual counterfeit intimate image and remove a reported image within 48 hours of notice, and a platform that follows those notice-and-takedown procedures in good faith is not liable for anything posted before it received notice.
When LexLint raises it
generates_contentpublishes_adult_contentoperates_social_platform
Read the law
official Utah Code, live codified text, le.utah.gov
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.