From the State Government edition of October 6, 2026
Utah executive order makes AI literacy training mandatory for state employees, requires human review for rights-affecting decisions, and asks agencies to document how AI is used
Office of Utah Governor Spencer J. Cox; Utah Department of Government Operations (DGO) and Division of Technology Services (DTS) · State executive-branch AI governance, workforce training and citizen-facing services · Utah statewide (executive-branch agencies)
- Publisher
- Office of the Governor of Utah
- Original publication
- 2026-10-06
- Source retrieved
- 2026-10-07
- Event date
- 2026-10-06
What happened
Gov. Cox signed Executive Order 2026-08 on Oct 6. It tells executive-branch agencies to avoid AI tools that don't follow the state's 'human-guided' and 'human-enhancing' principles. DGO must set safeguards against cyberattacks and 'unauthorized or rogue AI agents,' help agencies find uses that cut wait times 'while ensuring human-in-the-loop review for determinations affecting individual rights,' and use the State-Endorsed Digital Identity (SEDI) framework where applicable. Every agency must have applicable employees complete AI literacy training set by DTS and the HR division, look for cost-effective AI uses, and document how AI systems' inputs, outputs and roles in decisions fit into processes that affect the public. DTS must also train designated agency AI leads, prefer Utah-based training providers, and publish uniform AI implementation standards. The only reporting is an annual DGO progress report to the governor starting July 1, 2027. Higher education, the State Board of Education, the Attorney General, State Auditor, State Treasurer, the legislature and the courts are excluded.
Why it matters
Directly relevant to state CIOs and HR leaders: it turns a governor's AI initiative into binding duties for executive agencies, covering mandatory training, a documentation requirement for public-facing AI, and a human-review rule for rights decisions. It is also a template other governors may copy.
Evidence and measured results
Opened the signed PDF on the governor's site (curl, pdftotext) and read all seven sections. Cross-checked against the governor's Oct 6 news release and Utah News Dispatch and KSL coverage, which restate the order and add only official quotes.
Limitations and uncertainty
This is a policy instrument, not evidence of results. It contains no metrics, budget, deadlines for training completion, or definition of the human-review threshold. The governor's release carries an 'Oct. 30, 2026' dateline, which appears to be a typo; the order itself is dated Oct 6. Coverage so far restates official statements and includes no independent critique.
Put this evidence to work
Lighthouse Advisory interpretation, grounded in this source. Enriched 2026-10-06; this does not change the original publication date. Each role follows the same checklist so takeaways compare across sources.
Sales
Role takeaway
- Customer problem
- Executive agencies must now train applicable staff, name AI leads, and document AI's role in public-facing decisions, with no published standards or budget yet.
- Stakeholders
- Commissioner of Government Operations (DGO)
- Division of Technology Services (DTS) / state CIO
- Division of Human Resource Management (DHRM)
- Agency AI leads
- Pro-Human AI Initiative co-chairs (Commerce, GOEO)
- Discovery questions
- Which employees count as 'applicable' for mandatory AI literacy training, and by when?
- What format will agencies use to document AI inputs, outputs and decision roles?
- How will DGO define 'determinations affecting individual rights'?
- What will the July 2027 progress report measure?
- Value hypothesis
- Ready-made training and a documentation template could help agencies meet the order's duties faster and more consistently, if they match DTS standards.
- Potential engagement
- A bounded pilot with one agency to draft its AI-use documentation and human-review checkpoints, as input to DTS's uniform standards.
- Unsupported claims
- Any productivity or cost savings: the order sets no metrics
- That human review is already in place for rights decisions
- That SEDI is ready to authenticate AI agents today
Pre-sales engineering
Role takeaway
- Fit
- Fits work on agent identity, AI-use logging and human-review workflow, pending DTS implementation standards.
- Architecture and integration
- Map how SEDI verifiable credentials, agency identity systems and AI tools would connect, and where AI input/output records would be stored and retrieved.
- Prerequisites
- Published DTS AI implementation standards
- Definition of rights-affecting determinations
- An inventory of current agency AI tools
- Constraints
- Applies only to executive-branch agencies, not higher ed, schools, AG, Auditor, Treasurer, legislature or courts
- GRAMA records and Government Data Privacy Act obligations still apply
- Training vendors: Utah-based providers preferred
- Security
- Requires controls against unauthorized or rogue AI agents; any logging of AI inputs must handle personal data under state privacy law.
- Proof of value
- Show a logged human-review decision for a sample rights-affecting case
- Demonstrate detection and blocking of an unapproved AI agent in a test environment
- Confirm AI-use documentation can be produced for a records request
Delivery
Role takeaway
- Work
- Stand up training, name agency AI leads, and build a documentation and human-review process for public-facing AI uses.
- Dependencies
- DTS/DHRM training curriculum
- DTS uniform implementation standards
- Agency AI inventories
- Ownership
- DGO leads statewide; DTS owns standards and training; each agency's AI lead owns its documentation.
- Skills and adoption
- Mandatory baseline literacy for applicable staff plus deeper systems-analysis training for AI leads.
- Governance checkpoints
- Definition of rights-affecting determinations approved
- Documentation template adopted by each agency
- First DGO progress report on July 1, 2027
- Acceptance criteria
- Proposed: share of applicable employees who completed training, reported by agency
- Proposed: every public-facing AI use has a documentation record
- Proposed: human-review decisions logged for 100% of rights-affecting determinations
- Risks
- Undefined thresholds lead to uneven coverage across agencies
- Documentation becomes a checkbox without review
- Excluded offices and education bodies follow different rules
Implementation considerations
Lighthouse Advisory interpretation across the operating dimensions a public-sector buyer must settle before this evidence becomes a design. Each note answers the question under its heading for this specific source.
Architecture and integration
What must connect, and where does the AI sit in the workflow?
The order assigns DGO safeguards against 'rogue AI agents' and names SEDI, a cryptographically verifiable identity and credential framework, as the trust layer for AI. That implies identity and credential checks for agents and content touching state systems, but the order sets no technical spec or timeline. DTS is to publish uniform implementation standards later.
Governance
Who approves, reviews and stays accountable for outcomes?
Agencies must document AI inputs, outputs and decision roles for public-facing processes, and keep a human in the loop for rights-affecting determinations. The order doesn't define 'determinations affecting individual rights,' doesn't create a public inventory or complaint process, and reports only to the governor once a year from July 2027. Independent officers (Auditor, AG, Treasurer) and education bodies are outside its scope.
Security and privacy
What data, permissions and controls need testing?
DGO must protect state systems and data from cyberattacks and unauthorized AI agents, and DTS must evaluate AI tools for detecting threats. The order says it doesn't change obligations under GRAMA (records), the Government Data Privacy Act, or federal privacy and civil-rights law, so AI documentation will likely be subject to records requests.
Accessibility and workforce
Who is affected, and what skills or accommodations follow?
Makes AI literacy training mandatory for applicable employees across executive agencies, with a three-part curriculum (general concepts, approved state tools, ethics) and specialized training for agency AI leads. 'Applicable' isn't defined, so coverage could vary by agency.
Procurement
What should contracts, pricing and exit terms secure?
Agencies must avoid AI tools that don't 'adhere strictly' to the pro-human principles, and DTS is told to prioritize Utah-based training vendors. That creates a screening criterion for AI purchases, but the order doesn't say how a vendor shows adherence.
Operating model
Which teams own the service once it runs?
DGO leads statewide AI process improvement and DTS sets standards and training, while each agency names accountable AI leads. It is a central-standards, agency-execution model similar to other states' AI offices, with annual reporting to the governor.
Publication history
- 2026-10-06State Government · Issue 312 resources
Stable resource ID: utah-executive-order-2026-08-pro-human-ai-state-government-20261006