PubLedge

A person deploying AI in Utah may enter either a Regulatory Mitigation Agreement (RMA) — which waives specified law in exchange for safeguards, data sharing, and disclosures — or a Joint Interpretation Agreement (JIA) — which clarifies how existing statute applies to a specific AI use without waiver. Agreements run for an initial twelve months with up to two twelve-month extensions, counterparties include OAIP plus the relevant state agency (or the judiciary, a state-funded higher or public education institution, or a political subdivision under HB 320), and participants must satisfy five statutory eligibility prongs.

What Counts

• Demonstrated technical capability to operate the proposed AI use
• Financial resources sufficient to meet obligations during testing
• Potential substantial consumer benefits that may outweigh identified risks
• Documented risk-monitoring plan covering the agreement scope
• Scope appropriately limited to the statute, use case, and deployment period
• Executed agreement stating scope limits, safeguards, mitigations granted, required consumer disclosures, and reporting requirements
• Submission to OAIP regular audits while the agreement is in effect, with agreement reporting requirements to comply with those audits (the annual Nov 30 report is OAIP's duty to the Legislature, not a participant duty)

What Does Not Count

• Broad regulatory waivers not tied to a specified statute or use case
• Agreements without scope limits, safeguards, or consumer disclosures
• Term exceeding thirty-six months in aggregate (§13-72-403)
• Using or deploying AI technology that violates legal or regulatory requirements or the agreement terms (possible immediate removal and all applicable civil and criminal penalties)

Associated records (including proposals)