United States of America: Governor of Utah signed Digital Content Provenance Standards Act

On 24 March 2026, the Digital Content Provenance Standards Act was signed by the governor. The Act establishes technical standards for the embedding and preservation of provenance data across the digital content supply chain. Large online platforms, defined as public-facing social media platforms, mass messaging platforms, or stand-alone search engines exceeding 2 million unique monthly users, excluding broadband and telecommunications services are required to detect, display, and preserve compliant provenance data in distributed content, and are prohibited from knowingly stripping embedded digital signatures or provenance metadata where technically feasible. Capture device manufacturers must engineer devices to embed latent disclosures identifying the manufacturer and recording the date and time of content creation or alteration, applicable to devices produced for sale in Utah from 1 January 2028, with an option to allow users to disable the disclosure. Covered generative Artificial Intelligence (AI) providers, with over 1 million monthly users that are publicly accessible in Utah, excluding systems used exclusively for internal business operations must embed equivalent latent disclosures in AI-generated or substantially modified image, video, or audio content, consistent with widely accepted industry standards. Additionally, the Chief Information Officer must establish provenance record standards for digital content on public-facing state agency webpages where there is a substantial risk of fraudulent or misleading media causing harm to residents, applicable to content created on or after 1 January 2027. Enforcement is vested in the Division of Consumer Protection, which may impose administrative fines of up to USD 2,500 per violation, with courts able to impose penalties of up to USD 5,000 per violation of an administrative or court order. The Act takes effect on 1 January 2027.