AI law comparison · Data verified 2026-08-22
Colorado AI Act vs Utah AI Policy Act
Colorado AI Act and Utah AI Policy Act are two of the 169 AI and data regulations Aegis Firma tracks. They have different scopes, effective dates, and penalties — and many businesses fall under both. Here is the side-by-side, drawn directly from the regulatory registry.
Find which laws apply to my businessSide by side
Summary of publicly available regulatory text. Verify against current official sources before relying on this for compliance decisions. Not legal advice.
The key difference
Utah AI Policy Act takes effect first, so it is usually the more urgent of the two. Colorado AI Act tracks 6 compliance requirements and Utah AI Policy Act tracks 8. They are not interchangeable — meeting one does not discharge the other. The practical question is not which law is “stricter,” but which of them — or both — actually applies to your business.
Colorado AI / ADMT Law — SB 24-205 repealed & replaced by SB 26-189 (operative Jan 1, 2027)
CURRENT LAW: Colorado SB 26-189 — signed by Governor Polis on 14 May 2026 — REPEALED AND REENACTED part 17 of the Colorado Consumer Protection Act (C.R.S. §§ 6-1-1701 to 6-1-1709), replacing the original Colorado AI Act (SB 24-205, 2024) in its entirety. It takes effect 1 January 2027 and applies to consequential decisions made on or after that date. The replacement narrows the regime: it regulates "automated decisio…
Full Colorado AI Act requirementsUtah Artificial Intelligence Policy Act (SB 149, amended by SB 226 / SB 332 / HB 452)
Utah was the first US state to pass AI-focused consumer protection legislation. The AI Policy Act (SB 149, effective May 1, 2024) required businesses using generative AI in consumer interactions to disclose AI involvement, and required proactive disclosure when AI was used in regulated professions. The 2025 amendment package (all effective May 7, 2025) significantly narrowed these duties: SB 226 redefined "generative…
Full Utah AI Policy Act requirementsCommon questions
Could both Colorado AI Act and Utah AI Policy Act apply to my business?
Yes. Colorado AI Act and Utah AI Policy Act are separate regulations with separate scopes — a business can fall under both at once. Colorado AI Act covers CURRENT (SB 26-189, C.R.S. Utah AI Policy Act covers Applies to: any person or business that uses generative AI — defined, after SB 226 (eff. If your operations meet both scopes, you must comply with both. Aegis Firma's free scan checks all 169 tracked regulations against your business profile so you do not have to read each law to find out.
Which has the higher maximum penalty — Colorado AI Act or Utah AI Policy Act?
Colorado AI Act: Civil penalty up to $20,000 per violation — each consumer or transaction involved is a separate violation — and up to $50,000 per violation committed against an elderly person (C.R.S. § 6-1-112(1)(a), (1)(c), via §§ 6-1-1706(1)-(2) and 6-1-105(1)(uuuu)). AG-exclusive enforcement; 60-day cure notice where the AG deems cure possible, waived for knowing or repeated violations (§ 6-1-1706(3)); no private right of action (§ 6-1-1709). Utah AI Policy Act: $2,500 per violation (enforced by Utah Division of Consumer Protection) Penalty structures differ by regulator and violation type — read each law's full page for the cure periods and per-violation detail.
When does each law take effect?
Colorado AI Act — effective 2027-01-01. Utah AI Policy Act — effective 2024-05-01. Dates last verified against official sources on 2026-08-22 and 2026-08-25 respectively.
Related comparisons
Stop guessing which laws apply
Answer a short questionnaire about your business and Aegis Firma tells you exactly which of 169 regulations apply — and what each one requires you to do.
Start free compliance scan