{"data":{"id":"us-ut/utah-code-63a-20-301","jurisdiction":"us-ut","citation":"Utah Code § 63A-20-301","heading":"State-endorsed digital identity requirements.","body":"(1) A state-endorsed digital identity shall:\n(a) incorporate state-of-the-art safeguards for protecting an individual's identity, including compromise detection, recovery mechanisms, and cross-context correlation protections;\n(b) include methods to establish authenticity and integrity;\n(c) be compatible with a wide variety of technological systems while maintaining strong privacy and security;\n(d) support online and offline presentation;\n(e) enable a holder to:\n(i) selectively disclose an individual's identity attributes; or\n(ii) demonstrate that the individual meets a specified minimum age without disclosing the individual's age or birth date;\n(f) allow a holder to choose a digital wallet that conforms with the requirements established by the department; and\n(g) be easy for a holder to adopt and use.\n(2) The department shall:\n(a) validate verification of an individual's identity provided by an identity proofing entity;\n(b) comply with the requirements of this chapter through technological means where possible;\n(c) ensure any technical infrastructure used to control the issuance or revocation of a state-endorsed digital identity is maintained within a state-controlled data center located within the state;\n(d) ensure that a state-controlled data center located within the state shall use best practices in collection, processing, storage, and disclosure of all individual identity and identity attributes;\n(e) select open technological standards for the creation, issuance, use, and acceptance of a state-endorsed digital identity that are:\n(i) publicly available; and\n(ii) free from:\n(A) licensing fees; and\n(B) patent restrictions;\n(f) verify and endorse a specific set of identity attributes including an individual's:\n(i) name;\n(ii) birth date;\n(iii) image; and\n(iv) Utah residence address; and\n(g) create a process for:\n(i) a holder to:\n(A) obtain, maintain, and control an individual's state-endorsed digital identity;\n(B) use an individual's state-endorsed digital identity;\n(C) limit access to an individual's state-endorsed digital identity and identity attributes;\n(D) obtain a new state-endorsed digital identity if the individual's state-endorsed digital identity is compromised; and\n(E) migrate a state-endorsed digital identity to another digital wallet compliant with this chapter;\n(ii) a holder to request that an individual's identity attributes be amended or corrected; and\n(iii) appointment of a digital guardian to obtain or use a state-endorsed digital identity on an individual's behalf.\n(3) A state-endorsed digital identity may not include a mechanism that allows the department to monitor, surveil, or track the presentation of a state-endorsed digital identity to another entity.\n(4) Information provided by an individual to the state to obtain a state-endorsed digital identity may only be:\n(a) used for the purpose of issuing and managing a state-endorsed digital identity;\n(b) used as authorized by the individual;\n(c) retained as long as necessary to issue and manage a state-endorsed digital identity;\n(d) maintained within a state-controlled data center located within the state; or\n(e) disclosed to:\n(i) the subject of the record or the subject's digital guardian; or\n(ii) a person with a warrant or court order.\n(5) The department may only revoke an individual's state-endorsed digital identity if:\n(a) the state-endorsed digital identity has been compromised;\n(b) the department's endorsement was:\n(i) issued in error; or\n(ii) based on fraudulent information; or\n(c) the holder requests that the department revoke the individual's state-endorsed digital identity.\n(6) The department shall report a data breach regarding individual identity or identity attributes in accordance with Section 63A-19-405.","path":["Title 63A Utah Government Operations Code","Chapter 63A-20 State-Endorsed Digital Identity","Part 63A-20-3 State-Endorsed Digital Identity"],"source_url":"https://le.utah.gov/xcode/Title63A/Chapter20/63A-20-S301.html","current_through":"2026 General Session","vintage":"","retrieved_at":"2026-09-03T11:34:33Z","sha256":"f6a98a2622a924db1af85dcf2044920437e7d0d920ea7cd95da64b51323e756b","source_id":"us-ut","stale":false,"prev":"us-ut/utah-code-63a-20-204","next":"us-ut/utah-code-63a-20-302"},"notice":"GroundRules: Original legal text. Not legal advice."}