Law / United States / 
Utah
Health Insurance Preauthorization AI Disclosure (SB 319, 2026 General Session)
Utah Code 31A-22-650, as amended
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force in 100 days, effective 1 January 2027.
An AI sector rules rule binding private bodies.
As of 8 September 2026.
What it requires
- Disclose to the Insurance Department, to each network health care provider, and to each enrollee whether you use artificial intelligence in reviewing a preauthorization request, if you are a health insurer
- Post that disclosure and your preauthorization statistics on your website
- Base an adverse preauthorization determination on clinical or medical necessity on independent medical judgment, not solely on a recommendation from any other source
- Set an authorization validity period of at least 12 months for a drug, device, or covered service treating a chronic or long-term care condition, and at least six months for an outpatient covered service
- This duty takes effect 2027-01-01, so it is a duty to prepare for rather than one owed today
What it reaches
Obligation class
Disclosure, Governance
What it makes you log
Who may demand the log
Regulator, Public
What the log must hold
Decision basis, Human involvement, Disclosure shown
Logging duty
The section never names a log or a record. It requires an insurer to disclose whether it uses artificial intelligence to review a preauthorization request, and to post and annually report authorization and denial statistics broken out by category, including appeal outcomes and response times, none of which can be stated without a decision-level record of each authorization and denial as it happens.
- Kind
- Implicit
- As of
- 21 September 2026
- Provision
- 31A-22-650(2), (3) and (9)
- Trigger
- automated_decisions
Who checks it
Audit expectation
none
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
SB 319 (2026 General Session) amends Utah Code 31A-22-650, effective 1 January 2027, to require a health insurer to disclose to the Insurance Department, to each network health care provider, and to each enrollee whether the insurer uses artificial intelligence in reviewing a preauthorization request, and to post that fact and its preauthorization statistics on its website.
An adverse preauthorization determination on clinical or medical necessity must be made using independent medical judgment and may not rely solely on a recommendation from any other source. The same bill sets a minimum authorization validity period of at least 12 months for a drug, device, or covered service treating a chronic or long-term care condition (shorter only for an experimental drug or on specified grounds). It separately sets a minimum authorization validity period of at least six months for an outpatient covered service.
When LexLint raises it
high_risk_decisionshandles_health_recordsprovides_financial_services
Read the law
enrolled bill text, Utah State Legislature (official)
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.