63A-12-117. Digital authentication systems -- Technical standards and requirements.
(1) As used in this section: "Digital authentication system" means technology and procedures used to create digitally authenticated records. "Digitally authenticated record" means the same as that term is defined in Section. 17-71-301.5 "Governmental entity" means the same as that term is defined in Section. 63G-2-103
(2) A governmental entity that creates or accepts digitally authenticated records shall: maintain the records in accordance with approved retention schedules; ensure records retain authentication characteristics throughout the retention period; except as otherwise prohibited by law, transfer records to the state archives in accordance with state archivist requirements; and maintain data necessary for verification and preservation.
(3) The state archivist shall establish procedures for: accepting digitally authenticated permanent records; verifying authentication integrity upon transfer; long-term preservation of digital authentication characteristics; and providing public access to archived digitally authenticated records in accordance with Title 63G, Chapter 2, Government Records Access and Management Act.
(4) The state archivist, in consultation with the Division of Technology Services, shall make rules, in accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, establishing: technical standards for digital authentication systems, including: security requirements; authentication verification procedures; acceptable authentication methods and technologies; cybersecurity standards; and system integrity requirements; preservation standards for digital authentication systems to ensure long-term preservation; retention schedule requirements for digitally authenticated records; transfer procedures from governmental entities to state archives; format specifications for archival storage of digitally authenticated records; verification procedures for authentication integrity; and data requirements for preservation and access. The state archivist shall ensure that standards established under this section require digitally authenticated records to demonstrate: immutability or tamper-evident characteristics sufficient to detect unauthorized alterations; verified identity of the person authenticating the record using identity verification procedures that meet or exceed the requirements for satisfactory evidence of identity established for remote notarization under Section; 46-1-2 format sustainability for long-term preservation; and compliance with retention schedules.
(5) In making rules under Subsection, the state archivist shall consult with: (4) the Title and Escrow Commission created in Section; 31A-2-403 the County Recorder Standards Board created in Section; and 63C-30-201 other relevant industry stakeholders.