FB pixel

Utah officials, privacy advocates pitch State’s incoming digital ID to public

User control, server retrieval protections little assurance against paranoia
Utah officials, privacy advocates pitch State’s incoming digital ID to public
 

Public officials in Utah are touting the privacy and security protections of the State’s forthcoming digital identity.

The new, optional State-Endorsed Digital Identity (SEDI) initiative was mandated with the passage of SB 260 earlier this year.

The State is already issuing mDLs made with technology from GET Group, Scytáles and FaceTec since 2021. The difference is that this version will endorse, rather than bestow identity, and builds in unusual privacy stipulations to hew closer to the principles of self-sovereign identity (SSI).

Chief Privacy Officer Christopher Bramwell tells local outlet KUTV that “the whole point is to give you control of your identity so no one can impersonate you.”

Senate Majority Leader Kirk Cullimore, who sponsored SB 260, says “the laws and the parameters to establish its safety and security, and the principles of freedom around that, are getting put into place.”

Bramwell says the new digital ID will not track users or log interactions, and emphasized the security advantages of a decentralized data storage model. The architecture will also avoid the need for Utah to reissue all its residents’ digital IDs if State IT systems are breached.

Utah’s SEDI is intended for use accessing government services, airport security checks and transactions with the private sector. The State’s mDL performs similar functions and is accepted as age verification for alcohol purchases. The SEDI is being built with delegation capabilities to allow parents and guardians to act on behalf of children or vulnerable adults, according to a paper describing the initiative.

The digital ID is currently in development by the Utah Department of Government Operations, while the mDL program is managed by the Utah Department of Public Safety’s Driver License Division (DLD).

Comments under the article indicate that at least some among the public consider the assurances of user control and privacy protection hollow, despite SB 260’s endorsement by the ACLU as a digital ID that guarantees protection against the potential to switch on “phone home” capabilities common to other mDLs. The “No Phone Home” campaign was initially sparked by a presentation Bramwell, Anonyme Labs Chief Architect Steve McCown and Timothy Ruff of Digital Trust Venture Partners delivered at IIW 40, the gist of which has been cosigned by several of America’s leading digital privacy experts and advocacy groups.

McCown and Ruff joined The Biometric Update Podcast to discuss the server retrieval issue they say is built into ISO/IEC 18013-5, along with DIF ED Kim Hamilton Duffy, in June.

Standards compliance and interoperability

Utah is one of three states issuing a digital wallet for their mDLs that Trinsic cannot yet integrate.

More than 103,000 people were enrolled in Utah’s mDL program as of June, according to Government Technology. The publication added up the numbers provided 11 state mDL programs, and found at least 4.5 million Americans already have mDLs.

Hawaii, Virginia and West Virginia did not respond with figures.

Trinsic counted 2 million mDLs in Louisiana and 8 million overall, but noted that many are not compliant with ISO/IEC 18013-5, with the legacy LA Wallet a prominent example. GovTech reports that Louisiana has issued 52,000 of its new mDLs compliant with the standard so far.

SEDI is intended to comply with ISO 18013-5 and -7.

This post was updated at 10:17am Eastern on October 23, 2025 to clarify that SEDI and the mDL program are two separate initiatives.

Related Posts

Article Topics

 |   |   |   |   |   | 

Latest Biometrics News

 

Face biometrics use cases outnumbered only by important considerations

With face biometrics now used regularly in many different sectors and areas of life, stakeholders are asking questions about a…

 

Biometric Update Podcast explores identification at scale using browser fingerprinting

“Browser fingerprinting is this idea that modern browsers are so complex.” So says Valentin Vasilyev, Chief Technology Officer of Fingerprint,…

 

Passkeys now pervasive but passwords persist in enterprise authentication

Passkeys are here; now about those passwords. Specifically, passkeys are now prevalent in the enterprise, the FIDO Alliance says, with…

 

Pornhub returns to UK, but only for iOS users who verify age with Apple

In the UK, “wanker” is not typically a term of endearment. However, the case may be different for Pornhub, which…

 

Europol operated ‘shadow’ IT systems without data safeguards: Report

Europol has operated secret data analysis platforms containing large amounts of personal information, such as identity documents, without the security…

 

EU pushes AI Act deadlines for high-risk systems, including biometrics

The EU has reached a provisional agreement on changes to the AI Act that postpone rules on high-risk AI systems,…

Comments

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Biometric Market Analysis and Buyer's Guides

Most Viewed This Week

Featured Company

Biometrics Insight, Opinion

Digital ID In-Depth

Biometrics White Papers

Biometrics Events