PubLedge

A person deploying AI in Utah may enter either a Regulatory Mitigation Agreement (RMA) — which waives specified law in exchange for safeguards, data sharing, and disclosures — or a Joint Interpretation Agreement (JIA) — which clarifies how existing statute applies to a specific AI use without waiver. Agreements run for an initial twelve months with up to two twelve-month extensions, counterparties include OAIP plus the relevant state agency (or judiciary, higher-ed, or political subdivision under HB 320), and participants must satisfy five statutory eligibility prongs.

What Counts

• Demonstrated technical capability to operate the proposed AI use
• Financial resources sufficient for ongoing compliance and indemnification
• Consumer benefits that substantially outweigh identified risks
• Documented risk-monitoring plan covering the agreement scope
• Scope appropriately limited to the statute, use case, and deployment period
• Executed agreement stating scope limits, safeguards, mitigations granted, required consumer disclosures, and reporting requirements
• Submission to OAIP regular audits and annual Nov 30 reporting

What Does Not Count

• Broad regulatory waivers not tied to a specified statute or use case
• Agreements without scope limits, safeguards, or consumer disclosures
• Term exceeding thirty-six months in aggregate (§13-72-403)
• Operating outside the agreement scope (immediate removal + retroactive enforcement)

Implementing Legal Instruments