Utah has adopted a pioneering legal framework that redefines the government’s role in establishing digital identity. Under new legislation that took effect on May 7, 2025, the state formally recognizes that it does not create individual identities, but may in some circumstances endorse them. This marks an important shift in how state-level identity systems are framed, with potential implications for digital privacy, civil liberties, and mobile credentialing nationwide.
A Philosophical Shift in Identity Management
The measure, known as Individual Digital Identity Amendments (S.B. 260), was signed into law by Governor Spencer Cox on March 27, 2025, during the state’s General Legislative Session. It establishes the principle that “the state does not establish an individual’s identity,” and that “the state may, in certain circumstances, recognize and endorse an individual’s identity.” The statute explicitly applies to Utah’s digital identity systems, laying the groundwork for future credentialing programs that center individual ownership and consent.
Unlike traditional identity systems where governments are the authoritative source of an individual’s credentials, Utah’s model signals alignment with self-sovereign identity principles. The law reframes the issuance of identity not as the creation of a record, but as a formal recognition of a person’s self-presented identity. It reflects a growing trend in digital identity discourse, where control over personal data and verification processes is shifting away from centralized authorities.
Utah Chief Information Officer Alan Fuller described the change as a necessary evolution in state services. “The government doesn’t give you your identity — your parents do,” Fuller told StateScoop. He added that the law is meant to support more robust digital credentials that go beyond the basic mobile driver’s license currently available in the state.
Policy Implementation and Broader Implications
The statute tasks Utah’s Department of Government Operations, in collaboration with the state’s Chief Privacy Officer and Chief Information Officer, with developing a framework for implementing state-endorsed digital identity systems. These systems could eventually support more sophisticated mobile credentials capable of selective disclosure and online identity verification.
Although Utah already offers a mobile driver’s license, state officials acknowledge it is limited in functionality. Fuller noted the goal is to decouple identity from driving privileges entirely, allowing residents to hold a secure digital ID regardless of whether they operate a vehicle. He also floated future use cases such as issuing digital identity credentials for minors, which could streamline school enrollment and age verification procedures.
Utah’s approach stands out among U.S. states for its legal clarity in defining the government’s role in digital identity. Nick Doty, a senior technologist at the Center for Democracy and Technology, called the legal distinction “significant,” noting that it could influence privacy, free expression, and interoperability with global standards. Doty also pointed to ongoing international efforts to develop technical protocols for mobile IDs, highlighting the need for robust privacy protections across both public and private sectors.
As the federal government continues to debate digital identity policy, Utah’s legislation may serve as a model for states seeking to modernize identity systems while maintaining individual rights and data control.
Source: StateScoop
—
June 9, 2025 – by Ali Nassar-Smith
