Digital authentication of county records -- Standards and approval process.

Utah Code § 17-71-301.5, under Part 17-71-3: Powers, Duties, and Prohibitions.

Utah Code § 17-71-301.5

17-71-301.5. Digital authentication of county records -- Standards and approval process.

(1) As used in this section: "Digital authentication" means a method of verifying the identity of a person and the integrity of an electronic document using tamper-evident technology that: creates a verifiable record of the authentication; and meets standards established under Section. 63A-12-117 "Digital authentication system" means the technology and procedures used to create digitally authenticated records. "Digitally authenticated record" means an electronic document that: has been authenticated using digital authentication as defined in this section; meets the requirements established by rule under Section; and 63A-12-117 if the document is to be recorded by a county recorder, has been approved for county use in accordance with Section. 17-71-301.5 "Division" means the Division of Technology Services created in Section. 63A-16-103 "Records Management Committee" means the Records Management Committee created in Section. 63A-12-112 "State Archives" means the Division of Archives and Records Service created in Section. 63A-12-101 "Tamper-evident technology" means technology that: creates a permanent, verifiable record that allows detection of any unauthorized alteration to an electronic document after authentication; and maintains an immutable audit trail of authentication events.

(2) A county recorder may accept and record a digitally authenticated record if: the county has obtained approval under Subsection; and (3) the digitally authenticated record meets the requirements of Section. 17-71-602 A county recorder that accepts digitally authenticated records shall: maintain procedures for accepting both digitally authenticated records and traditionally notarized documents; provide public notice of the types of digital authentication the county accepts; ensure compliance with retention requirements established by the state archivist under Section; and 63A-12-117 maintain audit trails for all digitally authenticated records accepted.

(3) Before accepting digitally authenticated records, a county shall: submit a proposal to the State Archives that describes: the digital authentication system the county proposes to use; security measures to protect record integrity; procedures for verification of authentication; the types of records the county proposes to accept through digital authentication; implementation timelines and training plans; compliance with retention schedules approved by the Records Management Committee; preservation requirements for permanent records; transfer procedures for records to be archived; format specifications for long-term storage; consultation conducted with: the Title and Escrow Commission created in Section; 31A-2-403 the County Recorder Standards Board created in Section; and 63C-30-201 other private industry stakeholders with interests affected by the proposal; and a summary of concerns raised during the consultations described in Subsection; and (3)(a)(x) obtain approval from the state archivist in accordance with Subsection. (4)

(4) The state archivist shall review each county proposal submitted under Subsectionfor: (3) compliance with: retention schedules approved by the Records Management Committee; preservation standards for digital records established under Section; 63A-12-117 transfer requirements for permanent records; and technical standards established by rule under Section; 63A-12-117 sufficiency of county resources and training for implementation; and completeness of the consultation requirements described in Subsectionand consideration of concerns described in Subsection. (3)(a)(x) (3)(a)(xi) The state archivist shall consult with the division regarding technical aspects of a proposal. Before the state archivist approves a proposal, the county, with assistance from State Archives, shall present the proposal to the Records Management Committee in a public meeting that provides opportunity for public comment. The state archivist shall provide written approval or denial to the county within 45 days after the day on which the county submits a proposal under Subsection. (3) If the state archivist denies a proposal, the state archivist shall provide: specific reasons for denial; and recommendations for modification. A county may resubmit a modified proposal in accordance with this section.

(5) An approval granted under Subsectionis valid for three years and may be renewed upon demonstration of continued compliance with the requirements of this section. (4)

(6) A county recorder may establish and collect fees for accepting and recording digitally authenticated records in accordance with Section. 17-71-407