Making Utah the first U.S. state to enact a major artificial intelligence (AI) statute governing private-sector AI usage, on March 13, 2024—coincidentally, the same day the European Parliament adopted the EU AI Act—Utah Gov. Cox signed into law S.B. 149 (AI Law). The AI Law, set to take effect May 1, 2024, was incorporated into Utah’s consumer protection statutes. Its key elements include establishing liability for inadequate/improper disclosure of generative AI (GenAI) use and creating the Office of Artificial Intelligence Policy (Office) to administer a state AI program.

Continue reading the full GT Alert.

Photo of Reena Bajowala Reena Bajowala

Reena R. Bajowala has deep experience in artificial intelligence (AI), cybersecurity, data privacy, and information technology law. With advanced certifications as a Certified Information Privacy Manager (CIPM), a Certified Information Privacy Professional U.S. Private-Sector (CIPP/US), and a Certified Information Privacy Technologist (CIPT), and…

Reena R. Bajowala has deep experience in artificial intelligence (AI), cybersecurity, data privacy, and information technology law. With advanced certifications as a Certified Information Privacy Manager (CIPM), a Certified Information Privacy Professional U.S. Private-Sector (CIPP/US), and a Certified Information Privacy Technologist (CIPT), and being named a Fellow of Information Privacy (FIP) by the International Association of Privacy Professionals, Reena is a trusted advisor to clients navigating complex privacy and cybersecurity challenges. Her leadership extends to her role as Vice Chair of the American Bar Association Business Law Section’s Cyber and Tech Committee and serving on the Steering Committee of the U.S. Secret Service’s Chicago Cyber Fraud Task Force. Reena was previously selected as a 2021-2023 Fellow of the ABA BLS’s Cyberspace Law Subcommittee.

Reena helps companies stand up AI governance programs, including creating policies, procedures, disclosures, vendor management, and trainings for a defensible compliance program. She drafts agreements for companies that are developing and/or deploying AI tools. She keeps up to date on AI legislation and regulatory enforcement domestically and globally. She has helped regulated companies institute programs that navigate complexities of existing privacy regulation and artificial intelligence laws.

When faced with a data breach, including in business email compromise, ransomware, or wire transfer fraud scenarios, clients turn to Reena to investigate, remediate, and comply with legal obligations. She conducts risk assessments, develops privacy and InfoSec compliance programs, and leads proactive incident response planning, including developing incident response and communications plans, and conducting executive tabletop exercises. Reena helps regulated entities comply with cybersecurity requirements.

Reena’s compliance and investigation guidance is informed by her historical wide-ranging litigation and trial experience, including over 100 days of first-chair trial experience. She continues to represent buyers and providers of IT services regarding issues ranging from billing and performance disputes arising from Master Services Agreements and Service Level Agreements to copyright and licensing disputes pursuant to Software Licensing and SaaS agreements in pursuing pre-litigation resolutions, working with the Firm’s experienced litigators as needed to pursue formal claims. Reena also works to protect the interests of companies during software audits.

Reena has been widely recognized for her leadership and pro bono work. She has been named a “cornerstone” of SABA North America, a “best under 40” by NAPABA, and a “powerful and influential woman” by the Illinois Diversity Council. Her dedication to justice has earned her accolades from organizations such as the Shriver Center on Poverty Law and the Public Interest Law Initiative. In 2005, she founded the University of Michigan Law School’s Origins Public Interest Fellowship, which has provided hundreds of thousands of dollars of funding to public interest students.

Photo of Arda Goker Arda Goker

Arda advises businesses on navigating complex data privacy and cybersecurity issues. He focuses on designing and maintaining privacy and security programs in compliance with existing and emerging U.S. and international privacy laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act…

Arda advises businesses on navigating complex data privacy and cybersecurity issues. He focuses on designing and maintaining privacy and security programs in compliance with existing and emerging U.S. and international privacy laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Colorado Privacy Act (CPA), Virginia Consumer Data Protection Act (VCDPA), Utah Consumer Privacy Act (UCPA), and Connecticut Data Privacy Act (CTDPA). He is certified as a privacy professional by the International Association of Privacy Professionals (CIPP/US).

In addition to his privacy and security practice, Arda litigates state and federal appeals and original appellate proceedings primarily involving consumer financial services, intellectual property, and defaulted tax-exempt bonds. His appellate experience also encompasses a variety of other subject matters, including catastrophic personal injuries and wrongful death, professional negligence, breach of contract, dignitary and business torts, employment issues, civil rights, divorce, child custody, immigration, and white-collar crime. Beyond his advocacy in the appellate courts, Arda regularly provides litigation support to trial counsel through strategic analysis, legal research, and pre- and post-trial motion practice geared toward preserving error and positioning cases for success on appeal.