{"resourceId":"utah-executive-order-2026-08-pro-human-ai-state-government-20261006","versions":[{"version":"external-9890acd079b6dcc07b7ffbc6522d3c0cc97ec2ba8e7a7c569163d54b00d741ec","resource":{"id":"utah-executive-order-2026-08-pro-human-ai-state-government-20261006","title":"Utah executive order makes AI literacy training mandatory for state employees, requires human review for rights-affecting decisions, and asks agencies to document how AI is used","organization":"Office of Utah Governor Spencer J. Cox; Utah Department of Government Operations (DGO) and Division of Technology Services (DTS)","sector":"State executive-branch AI governance, workforce training and citizen-facing services","geography":"Utah statewide (executive-branch agencies)","publishedAt":"2026-10-06","publicationDate":"2026-10-06","eventDate":"2026-10-06","sourceName":"Office of the Governor of Utah","sourceLabel":"Executive Order 2026-08, Establishing Utah's Pro-Human Approach to Artificial Intelligence in State Government (signed Oct 6, 2026)","sourceUrl":"https://governor.utah.gov/wp-content/uploads/2026.10.06-Pro-Human-AI-Executive-Order-1.pdf","evidenceClass":"standards-guidance","outcomeClass":"emerging","topics":["governance-procurement","accessibility-workforce","data-security","operating-model"],"finding":"Gov. Cox signed Executive Order 2026-08 on Oct 6. It tells executive-branch agencies to avoid AI tools that don't follow the state's 'human-guided' and 'human-enhancing' principles. DGO must set safeguards against cyberattacks and 'unauthorized or rogue AI agents,' help agencies find uses that cut wait times 'while ensuring human-in-the-loop review for determinations affecting individual rights,' and use the State-Endorsed Digital Identity (SEDI) framework where applicable. Every agency must have applicable employees complete AI literacy training set by DTS and the HR division, look for cost-effective AI uses, and document how AI systems' inputs, outputs and roles in decisions fit into processes that affect the public. DTS must also train designated agency AI leads, prefer Utah-based training providers, and publish uniform AI implementation standards. The only reporting is an annual DGO progress report to the governor starting July 1, 2027. Higher education, the State Board of Education, the Attorney General, State Auditor, State Treasurer, the legislature and the courts are excluded.","sledRelevance":"Directly relevant to state CIOs and HR leaders: it turns a governor's AI initiative into binding duties for executive agencies, covering mandatory training, a documentation requirement for public-facing AI, and a human-review rule for rights decisions. It is also a template other governors may copy.","evidence":"Opened the signed PDF on the governor's site (curl, pdftotext) and read all seven sections. Cross-checked against the governor's Oct 6 news release and Utah News Dispatch and KSL coverage, which restate the order and add only official quotes.","architectureImplications":"The order assigns DGO safeguards against 'rogue AI agents' and names SEDI, a cryptographically verifiable identity and credential framework, as the trust layer for AI. That implies identity and credential checks for agents and content touching state systems, but the order sets no technical spec or timeline. DTS is to publish uniform implementation standards later.","governanceImplications":"Agencies must document AI inputs, outputs and decision roles for public-facing processes, and keep a human in the loop for rights-affecting determinations. The order doesn't define 'determinations affecting individual rights,' doesn't create a public inventory or complaint process, and reports only to the governor once a year from July 2027. Independent officers (Auditor, AG, Treasurer) and education bodies are outside its scope.","securityPrivacyImplications":"DGO must protect state systems and data from cyberattacks and unauthorized AI agents, and DTS must evaluate AI tools for detecting threats. The order says it doesn't change obligations under GRAMA (records), the Government Data Privacy Act, or federal privacy and civil-rights law, so AI documentation will likely be subject to records requests.","caveats":"This is a policy instrument, not evidence of results. It contains no metrics, budget, deadlines for training completion, or definition of the human-review threshold. The governor's release carries an 'Oct. 30, 2026' dateline, which appears to be a typo; the order itself is dated Oct 6. Coverage so far restates official statements and includes no independent critique.","streamIds":["state-government"],"roles":{"sales":"Utah has just made AI training and AI-use documentation mandatory for its executive agencies, so the near-term need is help meeting those duties rather than new AI tools. A credible pitch is support for the literacy curriculum, the agency AI-lead training, or a documentation template that captures inputs, outputs and decision roles. The order contains no budget or deadlines, and it prefers Utah-based training providers, so any offer has to fit DTS's plan and can't promise savings the order doesn't measure.","engineering":"The technical hooks are safeguards against unauthorized AI agents and the SEDI identity framework as AI's 'trust infrastructure.' Fit depends on standards DTS hasn't published yet. Before scoping anything, confirm how SEDI credentials would apply to agents or content, what telemetry DGO expects for spotting rogue agents, and where agencies will record AI inputs and outputs. Treat the human-in-the-loop rule as a workflow requirement that needs a logged reviewer decision, not just a policy statement.","delivery":"Delivery work is organizational: rolling out mandatory training, naming agency AI leads, and building a repeatable way to document each public-facing AI use. The first progress report is due July 1, 2027, which is the natural checkpoint. Define what counts as a rights-affecting determination early, because that threshold decides where human review and documentation are required. Expect uneven adoption, since 'applicable employees' isn't defined and education bodies and independent offices are excluded."},"roleDetails":{"sales":{"customerProblem":"Executive agencies must now train applicable staff, name AI leads, and document AI's role in public-facing decisions, with no published standards or budget yet.","stakeholders":["Commissioner of Government Operations (DGO)","Division of Technology Services (DTS) / state CIO","Division of Human Resource Management (DHRM)","Agency AI leads","Pro-Human AI Initiative co-chairs (Commerce, GOEO)"],"discoveryQuestions":["Which employees count as 'applicable' for mandatory AI literacy training, and by when?","What format will agencies use to document AI inputs, outputs and decision roles?","How will DGO define 'determinations affecting individual rights'?","What will the July 2027 progress report measure?"],"valueHypothesis":"Ready-made training and a documentation template could help agencies meet the order's duties faster and more consistently, if they match DTS standards.","potentialEngagement":"A bounded pilot with one agency to draft its AI-use documentation and human-review checkpoints, as input to DTS's uniform standards.","unsupportedClaims":["Any productivity or cost savings: the order sets no metrics","That human review is already in place for rights decisions","That SEDI is ready to authenticate AI agents today"]},"engineering":{"fit":"Fits work on agent identity, AI-use logging and human-review workflow, pending DTS implementation standards.","architectureIntegration":"Map how SEDI verifiable credentials, agency identity systems and AI tools would connect, and where AI input/output records would be stored and retrieved.","prerequisites":["Published DTS AI implementation standards","Definition of rights-affecting determinations","An inventory of current agency AI tools"],"constraints":["Applies only to executive-branch agencies, not higher ed, schools, AG, Auditor, Treasurer, legislature or courts","GRAMA records and Government Data Privacy Act obligations still apply","Training vendors: Utah-based providers preferred"],"security":"Requires controls against unauthorized or rogue AI agents; any logging of AI inputs must handle personal data under state privacy law.","proofOfValue":["Show a logged human-review decision for a sample rights-affecting case","Demonstrate detection and blocking of an unapproved AI agent in a test environment","Confirm AI-use documentation can be produced for a records request"]},"delivery":{"work":"Stand up training, name agency AI leads, and build a documentation and human-review process for public-facing AI uses.","dependencies":["DTS/DHRM training curriculum","DTS uniform implementation standards","Agency AI inventories"],"ownership":"DGO leads statewide; DTS owns standards and training; each agency's AI lead owns its documentation.","skillsAdoption":"Mandatory baseline literacy for applicable staff plus deeper systems-analysis training for AI leads.","governanceCheckpoints":["Definition of rights-affecting determinations approved","Documentation template adopted by each agency","First DGO progress report on July 1, 2027"],"acceptanceCriteria":["Proposed: share of applicable employees who completed training, reported by agency","Proposed: every public-facing AI use has a documentation record","Proposed: human-review decisions logged for 100% of rights-affecting determinations"],"risks":["Undefined thresholds lead to uneven coverage across agencies","Documentation becomes a checkbox without review","Excluded offices and education bodies follow different rules"]}},"retrievedAt":"2026-10-06T22:23:59-05:00","enrichedAt":"2026-10-06T22:23:59-05:00","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Makes AI literacy training mandatory for applicable employees across executive agencies, with a three-part curriculum (general concepts, approved state tools, ethics) and specialized training for agency AI leads. 'Applicable' isn't defined, so coverage could vary by agency.","procurementImplications":"Agencies must avoid AI tools that don't 'adhere strictly' to the pro-human principles, and DTS is told to prioritize Utah-based training vendors. That creates a screening criterion for AI purchases, but the order doesn't say how a vendor shows adherence.","operatingModelImplications":"DGO leads statewide AI process improvement and DTS sets standards and training, while each agency names accountable AI leads. It is a central-standards, agency-execution model similar to other states' AI offices, with annual reporting to the governor.","sourceVerification":{"responseId":"curl-ut-eo-20261006","openedUrl":"https://governor.utah.gov/wp-content/uploads/2026.10.06-Pro-Human-AI-Executive-Order-1.pdf","referenceExcerpt":"while ensuring human-in-the-loop review for determinations affecting individual rights.","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}