Title 63A, Title 63A: Utah Government Operations Code

63A-20-204. Coordination on use cases -- Report. (1) The department shall coordinate with the following agencies to evaluate mechanisms by which a state-endorsed digital identity may be accepted and verified in the performance of their statutory duties or authorized functions: th…

63A-20-301. State-endorsed digital identity requirements. (1) A state-endorsed digital identity shall: incorporate state-of-the-art safeguards for protecting an individual's identity, including compromise detection, recovery mechanisms, and cross-context correlation protections; …

63A-20-302. Application and eligibility for state-endorsed digital identity. (1) An individual who is at least 18 years old, or is an emancipated minor, may apply to the department for a state-endorsed digital identity. (2) An individual who is under 18 years old, and is not an e…

63A-20-303. Identity proofing. (1) The department shall establish and maintain identity proofing requirements for the issuance of a state-endorsed digital identity that: follow a generally accepted identity proofing standard; are commensurate with the risks of impersonation, frau…

63A-20-304. Requirements for governmental entities. (1) A governmental entity may not: convey a material benefit upon an individual for using a state digital identity instead of a physical identity; withhold services or benefits from an individual if the individual uses a physica…

63A-20-305. Requirements for health care providers. (1) Within two years from the date the first state-endorsed digital identity is issued, a health care provider that receives at least $10,000,000 a year in public funding shall accept a state-endorsed digital identity if the hea…

63A-20-401. Requirements for digital wallet providers. (1) A digital wallet produced by a digital wallet provider shall: incorporate state-of-the-art safeguards for protecting an individual's identity; process an individual's identity attributes in a secure manner; comply with th…

63A-20-501. Requirements for verifiers. (1) A verifier shall: incorporate state-of-the-art safeguards for protecting an individual's identity in the verification process; comply with the requirements of this part through technological means where possible; process an individual's…

63A-20-601. Requirements for relying parties. (1) A relying party shall: incorporate state-of-the-art safeguards for protecting an individual's identity in the verification process; comply with the requirements of this part through technological means where possible; process an i…

63A-20-701. Duty of loyalty. The department, a digital wallet provider, a verifier, a relying party, and a digital guardian shall refrain from practices or activities related to the processing of an individual's identity attributes from a digital identity that: (1) conflict with …

63A-20-702. Processing restrictions. (1) Any record of a presentation of a state digital identity may only be processed by a digital wallet provider, a verifier, or a relying party: for the primary purpose for which the presentation was performed; or if required by law. (2) Infor…

63A-20-801. Complaints and enforcement. (1) An individual may submit a complaint to the data privacy ombudsperson alleging a violation of this chapter by: the department; a digital wallet provider; a verifier; or a relying party. (2) The data privacy ombudsperson may receive and …

63A-20-802. Auditing. (1) Subject to prioritization of the Legislative Audit Subcommittee created in Section, the Office of the Legislative Auditor General shall conduct an audit of the program beginning on January 1, 2028. 36-12-8 (2) The audit shall evaluate: the department's c…

63A-20-901. Severability. (1) If any provision of this chapter or the application of any provision to any person or circumstance is held invalid by a final decision of a court of competent jurisdiction, the remainder of this chapter shall be given effect without the invalid provi…