Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Digital Identity Sb260 topic
No spam. Unsubscribe anytime.
Panel at summit highlights Utah’s ‘state‑endorsed digital identity’ plan, stresses individual control and anti‑surveillance rules
Summary
At the Data Governance Summit, legislators and the state’s chief privacy officer discussed SB260 and the concept of a state‑endorsed digital identity that preserves individual control, prohibits surveillance and aims to reduce data collection needs for government services.
Lawmakers and state privacy officials used the Data Governance Summit at Utah Valley University to describe the state‑endorsed digital identity concept in SB260 and to emphasize principles intended to keep identity control with individuals rather than government or corporations.
What happened: Christopher Bramwell, Utah’s chief privacy officer, said the proposal and related work aim to “flip the script” so that identity is an attribute individuals control, not one created or fully controlled by government or private vendors. Bramwell said a state‑endorsed digital identity would allow agencies to verify attributes (for example, age or residency) without collecting or storing the underlying personal data.
Why it matters: Panelists argued state‑endorsed credentials could enable governments and businesses to confirm claims (age, eligibility, income) without retaining full personal records, reducing data risk and vendor dependence. Representative Jefferson Moss described the approach as an economic opportunity because clear rules and stability encourage businesses and entrepreneurs.
Key policy points
- Individual control and non‑creation principle. Senator Kirk Cullimore framed the approach as returning control of personal identity to individuals and reiterated that “if a digital identity is just an extension of the person, the policies…flow a lot easier.” Panelists emphasized the draft rules would state that the government recognizes but does not create an individual’s identity.
- Anti‑surveillance and governance requirements. Panelists said SB260 requires any state‑endorsed digital identity program to present a detailed plan that complies with the bill’s principles before legislative authorization. Bramwell said the law would bar surveillance and logging that would let government track usage.
- Selective disclosure and service delivery. Bramwell explained selective disclosure (verifying a single attribute without sharing full records) can let agencies deliver services without collecting the underlying personal data.
Implementation and limits
Panelists repeatedly said technology must support the privacy requirements; they did not claim technical feasibility is already universal. They also said authorization for a statewide program requires an approved plan that demonstrates compliance with statutory principles. The timeline for a statewide program is multi‑year and largely contingent on technology maturity and governance decisions; exact dates were not provided at the summit.
Ending
Speakers framed SB260 and related work as consistent with the Government Data Privacy Act and as a way to preserve liberty while enabling efficient government services. They urged continued stakeholder involvement as the technology and governance details are developed.
