Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Digital Identity topic
No spam. Unsubscribe anytime.
Committee backs framework bill to guide privacy-first state digital identity work
Summary
SB 260 passed the committee unanimously. The measure does not create a state digital ID but directs agencies to study and recommend a privacy- and individual-control-centered path for a potential future state-endorsed digital identity program, prohibiting coercion and requiring strong security and anti-surveillance safeguards.
The House Economic Development and Workforce Services Standing Committee on Wednesday voted unanimously to recommend SB 260, a bill that sets policy principles and directs study for a potential state-endorsed digital identity program while explicitly prioritizing individual control, privacy, and strong security safeguards.
Chris Bramwell, Utah—s chief privacy officer and director of the Office of Data Privacy, told the committee the bill reflects 18 months of stakeholder work and is meant to ensure that if the state ever implements an endorsed digital identity it will be privacy-preserving and under individual control. "This bill does not create a state endorsed digital identity," Bramwell said. "It requires the Department of Government Operations to explore and recommend ways in which the state may implement a state endorsed digital identity program consistent with this state policy in this bill."
Witnesses and public commenters urged the committee to view digital identity as a trust and autonomy issue. Timothy Ruff, a digital-identity practitioner, said the bill —blazes critical new ground for personal autonomy by instituting new safeguards for digital identity that limit the state's ability to surveil daily personal activities.— Caden Rosenbaum of Libertas Institute also supported the bill and said privacy-respecting design is necessary before adopting other online identity or age-verification systems.
Testimony described key principles in the bill: the state should not create or claim identity; it may recognize or endorse identity in limited circumstances; people must retain control of their identity; a state-endorsed digital identity must not be mandatory or tied to access to government services; and any adoption must include state-of-the-art security and anti-surveillance protections. Witnesses emphasized features such as strong encryption, protections against tracking or logging of credential use, and explicit safeguards for minors and individuals requiring guardianship.
Alan Fuller, the state chief information officer, told the committee other states are pursuing digital identity but warned some maintain logs of credential use in ways he called potentially surveillant. He said Utah should articulate its principles now to guide interoperability efforts and resist models that would enable broad state or private-sector tracking.
Representative Owens (movement recorded in the transcript) moved that the committee give SB 260 a favorable recommendation; the motion passed unanimously.
