S.B. 275 State-Endorsed Digital Identity Program Amendments: transcript

Okay. Thank you, chair. Um, pull that up. Close. Yeah. Yep, you go. So, last year this legislature passed SB two 60, which established Utah's guiding Principles for Digital id. Uh, it, that bill did three critical things. It declared that identity belongs to the individual and not the state. It embedded strong privacy and anti surveillance guardrails into the statute. And then it also required study and stakeholder cons, consultation before implementation. So it was, it was intentionally just kind of laying the groundwork. It was a little bit cautious. It didn't create a live program, didn't deploy infrastructure, um, did not mandate participation, but set the philosophical and Civil, civil Liberty Foundation first. And so we told the department to study best practices, consult with privacy experts and technologists and local governments, and then report back before implementation. So the groundwork has now been done. So now we have SB 2 75 before us today that takes principles adopted from last year and turns them into an operational program. So it codifies a digital identity bill of rights, which is important. Uh, it guarantees the right to use a physical ID instead of digital. The right not to be compelled to use digital id. The right to selective disclosure of identity attributes, the right to be from free from surveillance, tracking or profiling, and the right to transparency in how the system operates. And now, it, it, and then it creates the state endorsed digital identity program. Seti, uh, requires formal rulemaking mandates. Public comment requires annual reporting to the legislature, appoints a qualified program manager, and keeps the technical infrastructure in a state controlled data center here in Utah. It establishes clear identity proofing standards, regulates the entire ecosystem, and not, not just the state. Um, it creates enforcement and audit mechanisms and protects against, uh, government overreach. And these, I'm, I'm, uh, painting these with broad strokes, but that's generally what it does. And we can get into the details, although I suspect you'll hear a lot of the details in, in public comment. So, um, so again, last year we declared what the principle should be this year. We take it just in, uh, the next step further. And are, are working on implementation of this, and this is the way that government can really lead out in, in how we use digital ID going forward, ensuring that privacy is there, ensuring that non surveillance is part, is built into the program. And, uh, yeah, ensuring that, that it is consumer and, and citizen centric and not government overreach. Um, if you would like more detail, maybe I could call up Chris Bramwell, or maybe he can talk about this in a public comment, but if it's all right, maybe, maybe, maybe it'll be better if he's part of the public presentation. 'cause I think he can give more detail or, or part of, uh, this presentation so he can give more detail. Yep.

Christopher Brownwell, chief Privacy Officer and director of the Utah Office of Data Privacy, um, chair Winterton. I remember last year when this actually passed, you did express some concern of the digital identity concept. And we had said that in the next year's work, we had pulled together a coalition from all sides of the aisle to, to get consensus on what this should look like. And that's, that's actually who's all here today. We have individuals representing all groups that we've engaged with on, uh, through dozens of town hall, town, town halls, meetings, speaking engagements. We've gone out, uh, to, uh, candidate meetings, talk to stakeholders. Uh, we've traveled the state, traveled the country, even had some international engagement to not only learn what we did not know, but also to learn, uh, what is being done right around the world in digital identity and what's being done wrong. And, and, uh, the result of that, A couple things have come from it, obviously this bill, but also it's the, the pattern by which we did this. The ACL U, uh, national A CU came out and said, because of our work in the last year, uh, they said Utah is the only state doing digital identity, right? And it's not because of the principles in this bill that are good, but it's because we elevated it to actually be a decision by those who are in charge, which is the elected officials. Every other state and even countries are approaching it through bureaucratic, bureaucratic or administrative processes. We are having those discussions and listening to the concerns, and then going back to our elected officials to make the ultimate policy decision. Um, some things that we've learned that is being done wrong around the world, many digital identity approaches are centralized. Uh, these approaches are forms of identity that can be taken away depending on who's actually in charge. Nothing would be worse than to have a digital identity that you go to use, but somebody in government has actually revoked or deactivated. And there's, there's lots of cases that could be used that would be bad. Um, we have learned that there is tracking and surveillance in other countries, that there are authoritarian regimes that use it to do scoring and use it to influence behavior. Um, we've also identified now what's happened the last year in Europe, there are our country's leadership saying, not only do you have to have digital identity, but you have to use it now on all social media to eliminate any form of anonymity or pseudo anonymity, which in America, even to get America started, you had to have anonymity by the founding fathers to post their disagreements and papers because of what had been done against them. So these are forms of contrary values to I think, what we have in Utah and America. And so we've taken all of that to put forth this model of what's in this bill of what our foundational, um, a foundational digital identity approach built on constitutional values, where the individual controls their identity. The state's role is only to endorse it and to ensure the individual has mechanisms to protect it. And then ensures that when an individual uses this out in the market to engage with public or private transactions, those parties they present it to or get data from it, have to act in good faith and as a duty of loyalty to that individual. And so this bill we know is disruptive. It's an intentional disruptive approach to try to empower individuals and to change what the internet and world will look like 10 years from now. But our view is that's the role of what government in Utah should be doing. And if we do this bill, it'll be really good for the people and in our modernization of government and the digital world Anymore. Thank you.

Thank you. I'll start. Mr. Chair. Uh, my name is Amelia Powers Gardner. I'm a county commissioner in Utah County. Um, I support this bill for not only government uses, but also for citizens. Uh, there's a lot of ease in government. We can reduce costs and increase efficiency and the ease of go of government. But the concern with a lot of those is that it would create a tracking system. This would give us the ability in government to give remote services to our citizens and bring efficiencies to our processes and lower the costs while not tracking those citizens. There's also a misnomer that if we do a digital id, it'll be tracked. And a physical ID is not. Um, every time that physical ID gets scanned at like a, a, a bar or a rated R movie, or any time you can track those systems, this would actually make it so that tracking of those systems would not be possible. But the age verification, for example, to purchase liquor would be confirmed. So this actually makes things more private for the citizens, but from a government standpoint, it actually makes it easier for us to give services and make things more efficient and cheaper without tracking our citizens. So I fully endorse this bill. Thank you.

Thank you. Gail Ika with Utah Eagle Farm. Uh, I have really been quite on quite a journey with this, this legislation. I've sat through several meetings, meetings where I was invited to come and contribute or just listen or, uh, and I was very suspicious. I, uh, I'm always suspicious. So anyway, and I, I had a struggle. I, I, I went through this, I sat through those meetings. I wanted to think it was good. I wasn't sure if it was, I even prayed about it. And the interesting thing, after a few months now and going through all this, I finally decided that this was right and I should, and I should, uh, support it and speak in favor of it. And one of the main things that happened was last week when I actually saw the bill as it was finished. And the first part of the bill was the, the digital bill of Rights. And when I saw that language and saw that, it in fact was there for our, our protection. And I felt that this was the constitutional way to do this and the best way to protect ourselves. And so I'm here today to say it's a good bill. Please vote. Yes.

Thank you. Max Sims speaking on behalf of myself. Um, I'm in full support of this bill. Um, I think it's a sad state of affairs that we have in our current society where we we're not wanting to share our birth date. We're not wanting, we're not wanting to have pictures of us online or to, to be, be careful of like what people are see of us, or we're, we're reluctant to share our name. We're reluctant to share other pieces of information about us. Why? Because all that is currently being used as the, as the foundation of identity. And, and so what I see in this bill is this is the start of where we can use something else besides our immutable characteristics about ourselves that, that helps do identity. And by doing that, it actually provides better security, better privacy, but still a, allows us to, um, interact in society in ways we used to. We all remember how we used to be able to, you know, oh, hey, yeah, Bob's birthday's this. Oh yeah, Bob's so old, right? And no one, no one was concerned about that. And now we wouldn't think about it. Why? Because it's so intrinsically tied to our identity. This gets us on a path to separate those things and give us a mechanism where we can surely establish identity, but without those data points that we're all now scared to share. So I, I encourage your support of this bill. Thank you. Thank you.

Alright, thanks. Maryanne Christensen, Utah Legislative watch. I'm the executive director. I'm very happy to be here to speak in favor of this bill. I'm one of those suspicious types. In fact, I have a folder where I have dropped video and audio and articles about how digital ID has gone horribly wrong in other countries. And so I came to, um, meetings about this with a lot of skepticism. But in the very first meeting, my mind went, boom. I was just, I totally could see how this could protect our identity. Let us be the controllers of it, us, the, the individuals. We are going to own it, and we're going to be able to have multiple verifications to keep it safe. Um, I really love the, the part of the bill where it says that any wallet has to have, have to, has to treat our identity with a fiduciary responsibility, a duty of loyalty. I know what that means 'cause I've acted as a fiduciary many times. And so, um, the bill's just great. And so I appreciate your yes vote. Thank you. Thank you.

All right. Good afternoon. My name is Steve McCowen. I am here speaking on behalf of myself, but I am also a commissioner on the Utah Privacy Commission. And we, we've been looking at this, uh, legislation and process for a long time. Um, I would like to encourage you to vote in favor of this bill. Uh, digital identity is upon us. It's not a question of whether it will be here, but what form it will take, um, when left to commercial entities. Um, it's often to their benefit for tracking and monitoring and advertising and so forth. And what this bill is doing is it's shifting that locus of control over personal identity back to the individual where it belongs. Um, I work in the identity space professionally and work a lot with, um, international consortia, and I've shared this with them. And there is lots of eyes on, on Utah and what we're doing here by putting the emphasizing from government that the, um, the identity belongs to the individual and is not created by the state. Thank you.

Uh, my name is Timothy Ruff. Um, I, uh, am a partner in Digital Trust Venture partners, and I've been in the identity space for about 13 years. And I specifically in the area of self-sovereign identity, trying to find a way that, uh, humans can own and control their own digital identity and not be subject to other systems. And, um, I've noticed a, a major trend where our digital identities have been primarily provided by private industry. Uh, but lately it's now government all over the world that's getting into the ID business, country after country, every, uh, even, you know, the entire EU is, is coming out with, with things that track, uh, their users. All of these systems track. And this tracking, uh, creates a, a privacy nightmare. And Seti, uh, the state endorsed digital identity and SB 2 75 is the first system that does not. And it has an opportunity to show the world how we can do digital identity the right way that respects liberty. Thank you.

Awesome. Um, so my name is Will Sagos. I'm here as a private citizen of Park City. I've been a very active participant in many of the steady work groups. Uh, I have worked, uh, in the hospitality industry, currently work in a public for a public benefit corporation that focuses on, uh, giving people access to data for their benefits and saving governments. Lots and lots of, um, unnecessary expenses. But as we look at the Olympics right now in Milan, I think one thing we're reminded of is 2034 is right around the corner. And many of these countries around the world have already implemented digital IDs that want to come here. They want to purchase real estate, they want to go out to restaurants, they want to go on the ski hills, and they want to have it accepted in a way that fits with Utah's values. Uh, one of the big things with Seti that I am very passionate about is it is a economic fix at its very foundation where it sets the rules of the road, the Utah way. Um, the decentralized identity industry is projected to be a $23 billion market in the US by 2030. And with Utah leading the way for United States, that is, you know, assuming we capture above our weight to 3% of that, that's about $690 million of new economic activity, which is a huge win for Utah and a huge win for the people here that are building these systems and building this for the whole world to export our way of freedom for everyone. Uh, and this is something I'm heavily supportive of, especially in the AI era where it's very hard to trust online and having verifiable credentials and self-sovereign identity through the Seti Bill. And the work we've done here is going to fix a lot of problems on the digital age we have around the world. Uh, I respectfully ask that you vote in favor of this bill. Thank

Hello and thank you for your time. My name is Michael Proper. I actually work with an organization and is a member of the digital world. I also am an advisor to the Utah Blockchain Association, and not only a resident, but I'm born here in Utah and raised here in Utah and grateful to be in Utah. I've actually personally had the opportunity to travel over 28 countries in the world, specifically around digital identity and as it relates to other things associated with digital identity. After that, I believe that what's happening here in Utah is disruptive, not only for Utah, but as a leader within this whole consolidation of identity payments along with AI that will wrap around healthcare and control humanity, if not managed correctly. Now, I believe that what has been put forward is true and correct. I do believe there needs to be tightening around. The ownership should only be with the individual. It could never be controlled by a central organization, whether it's government or corporation or other, with that control, which has been sent to brother to Killmore as well as Chris, um, this bill should be passed for humanity and we would ag ask that you support it. Thank you.

Thank you so much, committee. I really appreciate your time. I just wanted to speak in favor of the bill as someone who's had my identity stolen twice, it's such a horrible nightmare. I appreciate the fact that this bill will give me protection for my identity, not in the hands of anyone else. Thank you so much.

Thank you, Mr. Chair. I would make a motion that we favor, we recommend Senate Bill 2 75

No, I appreciate the motion, appreciate this committee's work. Um, I would just say as, as some of the comments alluded to, digital identity is coming regardless of whether we address it or not. And so I think Utah is unique in being ahead of the curve in dealing with this and, and getting in front of it. And hopefully by the work we're doing here, Chris Bramwell has been a rock star in this stuff. We're building a coalition of other states to get on board so that when, as we lead out with this, there'll be a critical mass of other states that are also doing this so that the technology is implemented and, and it has widespread effects. And so, uh, just appreciate his work and, and we just assure the committee that we're moving in the right direction on this.

No, thank you. I appreciate it. It's not, it's interesting that you get, um, you know, this much support for Bill and as I was receiving texts while you're, you know, presenting and even, even agriculture is, you know, is on board for this, right? So there's, you got everybody from sheep to whatever, you know, supporting it. So anyway, I just, I I appreciate your in the bill.

Thank you Chair. Chair Committee. As you might recall, last year you guys voted for freedom when you voted for SB two 60. Uh, and this bill builds on that foundation. The bill did three critical things last year. It declared that identity belongs to the in individual, not the state. It embedded strong privacy and anti surveillance guardrails and statute and required study and stakeholder consultation before implement implementation. So it was intentionally co cautious and just lay, uh, laying the groundwork. It didn't create a live program. It didn't deploy infrastructure, it didn't mandate participation. It just set the philosophical structure and Civil, civil Liberty Foundation. And so now we're back with 2 75. And it takes the principles adopted last year and turns them into an operational program while preserving and strengthening the, the protections we established last year. So this bill codifies a digital identity bill of rights. It creates the, the state endorsed digital identity program set. Uh, as in part of doing that, it requires formal rulemaking mandates. Public comment requires annual reporting to the legislature, appoints a qualified program manager and keeps technical infrastructure in a state controlled data center located in Utah. This bill also establishes clear identity proofing standards, and then we're looking to regulate the entire ecosystem, not just the states. So, um, it would govern digital wallets, verifiers, relying parties, government entities, even large, publicly funded healthcare systems, and requires that they almost process only the minimum data necessary. Obtain clear consent, avoid secondary use of identity attributes, refrain from requiring the surrender of a device, and they're acting under statutory duty of loyalty. And then it creates some enforcement and audit mechanisms. Essentially, this protects against government overreach. And I'm gonna let, uh, Chris Bramwell explain further. Oh, if that's okay. Chair

Christopher Brownwell, chief Privacy Officer and director of the Utah Office of Data Privacy. Um, we know this bill is absolutely disruptive. It is meant to be disruptive to say, here's what we want the world to look like in 10 years, and give a tool to start building upon that. So, um, what we have done in the last year in terms of stakeholder engagement, uh, engaging in town halls, holding summits. Uh, we had 12 states come to Utah in October to learn about what we're doing, uh, engaging with all groups across the political spectrum. Uh, A CLU came out in October and said, Utah is the only state in the entire country doing digital identity rights. And it's not because, and this was national a LU. It's not because of of our technical approach. It's 'cause we are the only state Having the actual public discussion and having elected officials deliberate and set, um, intentional public policy that is based on constitutional rights and putting individuals first. Um, and with that, we've brought together a large group of stakeholders that are here with us today that will make comments on the bill. Um, I don't wanna go into too, too much detail, but I do wanna say we know we're having an impact on the market. Uh, many in this room have been in meetings with us as we've met with stakeholders, we've met with the big tech companies. We've met with those, uh, that currently have digital identity products in the field. And they're all asking to me to learn more about what we are doing that is causing this disruption. But it's disruption in a good way because it's shifting control of data and identity to the individual. And for privacy, our view is in the future, privacy is not so much about stopping your data from being breached. A lot of data's already been breached out there, but with this tool, privacy is gonna become about you controlling your identity, and nobody will be able to impersonate you and nobody will be able to take that away from you. So, um, with that said, that's, that's everything I have. Thank you.

Maxims, uh, speaking on behalf of myself, or full disclosure, I do work for the attorney general, but I'm not speaking for the office. Um, there has been a little bit of a controversy or, or some scuttlebutt since this past the Senate, um, committee and the Senate floor. Uh, some, uh, some people have been, have some apprehension, uh, about digital identity. And, and, and let me make this comment about that digital identity is coming one way or another. There is not an option to say we are not going to do digital identity in, in my view, it's kind of like ai. A lot of people are really nervous about ai. You're not gonna put that genie back in the bottle. AI is here and it's going to happen. Digital identity's the same way. But this version of digital identity where people can have control of their base identity, and it's not government controlling. This is the very best version of digital identity. And this doesn't guarantee it's gonna be perfect. It doesn't guarantee that some government entity may decide to wrestle more controls than they really should. But it puts us on the path for the best version of digital identity that we can have. And so I strongly urge your support of this bill. Thank you.

Maryanne Christensen, executive Director of Utah Legislative Watch. I'm very excited to be here speaking in favor of this bill. When I first heard about it and got all the details about it, I got it. I understood exactly what we were trying to accomplish, and it seems like it can be complicated, but it really isn't. So when we were born, the government issued a a birth certificate, so everyone knows where we were born. The government certifies of that. When we die, same thing. We get a death certificate. When we get a passport. The government certifies our identity to the entire world. And now we can travel the world with a government certified identity in our pocket. This is what it is for digital identity. I love the first part where it talks about our, um, identity bill of rights. That was so important to me to make sure that we included the fact that our identity is part of our unalienable rights. It belongs to us, and can't be usurped by government, can't be used by government or for, by bad actors or, or anything else. I love the fact that we get to keep it, control it, and no one according to the bill, no one can request or obtain any more information than they have to have to do the very thing that we're authorizing them to do at the moment, it's a fantastic system. And so I'm excited to see it pass through. Thank you for voting. Yes.

Thank you Mr. Chairman, resident of the committee. My name is Jason Chipman. I'm the policy director for the Bertis Institute here to speak in favor of, uh, digital identity. Uh, I'll be real quick. A lot of, you know, our opposition to a lot of the, um, identity requirements that the legislature has put in place at least recently, uh, in order for people to, uh, access certain services. And it's mainly because of the privacy issues turning over our, our driver's licenses to third parties and not knowing what's gonna be done with that, what's gonna happen in a data breach. Um, and we think this program will solve that problem, uh, for people only having to give up what they absolutely need, uh, in order to get the service instead of having to give all of the information over. So we would gladly, uh, like to see your support on this. Thank you.

I'd like your permission for a 60 minute comment so we can really infringe on the weekend. Um, my name is Timothy Ruff. I'm with Digital Trust Venture Partners. I've been in this, uh, digital identity industry for a while, and I wanna say that, um, there is an opportunity here to show the world how to do something, right. Um, my comment in the, uh, in the Senate committee was about how this bill doesn't have tracking other digital identity systems around the world. They have tracking and that enables surveillance and all kinds of nasty things that we don't. This, this technology actually makes it so that people can have digital identity and autonomy without being tracked and surveilled. And we have an opportunity to export the way to do it right to the rest of the world and show real, real leadership. There's, there's an importance here beyond the obligation we have to the citizens of Utah that I hope we not only respect, but we embrace and we, we we start to really show everybody else how it can be done and get behind it. Thank you.

Thank you. I'm Jeremy Smith. I'm with the, uh, Utah Blockchain Coalition and, uh, fully support what Utah is doing here. I think a lot of the speakers have already, uh, spoken quite eloquently, uh, of how important, uh, this is. Uh, to me, this is one of the most important bills that will set the pattern going forward, uh, for all of us and including, uh, our own children who I, who I brought with me actually in the audience, to, to see how the process works. Uh, if we just, if people sit idly back and just let digital identity happen and not really take a lead in it, my fear is that we will go down the wrong path of tracking surveillance control. You say the wrong thing, your identity gets removed, and Utah is taking a lead in this. And it's an important leave that I hope other states will follow. Thank you.

Mr. Chair, I'd like to move, uh, substitute one for SB 2 75.

Uh, the, I believe this, uh, substitute ch uh, improves the bill clarifies, has some clarifying language in it from stakeholders. Great. Thank you.

Oh, yeah, that's, that's a friendly motion. It's just some technical cleanup stuff.

Mr. Chair, I'd like to move Senate Amendment one.

This has just an, an additional technical cleanup to, uh, clarify. A have drafting code person versus individual Oh. Makes it clear that it's an individual.

Yeah, same. Okay, good.

Mr. Chair. I'd like to favorably recommend, uh, first substitute SB 2 75 as amended to the full house.

Briefly. I, as, as many of the commenters have, have, have mentioned, this is one of the most important long-term, uh, policies that we can set as a state to protect people's individual identity, and which is becoming more and more important in this, uh, world of ai. Where there is, uh, so much confusion about who, who is someone who they really say they are. And I, I believe this will, um, allow Utah to continue to show leadership and help our people. Uh, and if, as was said, digital identity is coming, no matter what, we can either let the giant co tech companies, uh, set the policy for us where we can set the policy. And in Utah, we choose to set the policy and protect the freedom and privacy of our people.

Yes. I just had a question regarding that amendment. Um, the, the word only on line 31 39, I think that I'm not under, well, I'm not understanding it.

I might be able to explain it.

So I, uh, I, sometime we, we, there are systems that use a, a username and a password. I, I believe what this is saying is, the intent of digital identity is, is not to say, uh, a, a username and password or a shared authentications system. This digital identity is an electronic record. It's basically saying digital identity in this case means a state endorsed digital identity credential that can be mathematically proved and verified, not a username and password only. Only. Okay.

That's all, that's what I wanted to understand. Thank you.

Uh, no. I, I, I, uh, appreciate representative Cutler's, uh, motion and his explanation. I think he's exactly right. Digital ID is coming regardless of what we do. Last year, we laid the foundation. This year we're responsibly building upon that foundation, and we're doing it the Utah way that protects individual autonomy, privacy, and freedom from government overreach. And so I would appreciate your support.

Okay, so last year the legislature passed SB two 60, which established Utah's guiding principles for digital identity. Identity. Uh, the bill did three critical things that declared that identity belongs to the indi individual, not the state. And embedded strong privacy and anti surveillance guardrails and statute. It required a study in stakeholder cons consultation before implementation. So that bill was intentionally cautious. It didn't create a live program, it didn't deploy infrastructure and it didn't mandate participation. It just set the philosophical foundation. And then we told the department to study best practices, consult privacy, and report back before implement implementation. That groundwork was done and now 2 75. So 2 75 takes the principles adopted last year and turns them into an operational program while preserving and strengthening the protect protections we established last year. So it codifies a digital identity bill of rights. It creates the actual state endorsed digital identity program. It requires form formal rulemaking in in setting up that program mandates public comment requires annual reporting to the legislature. It appoints a qualified program manager and then keeps the technical infrastructure in a state controlled data center. Uh, finally the third thing it does is it establishes clear identity proofing standards. So it requires alignment with generally accepted identity proofing standards. Prohibits continuous monitoring or tracking, uh, ensures endorsement reflects verification at a point in time, not ongoing surveillance. And it allows in-person remote or hybrid proofing methods. Um, one of the most important things in here is that it governs digital wallet providers. Verifiers relying parties, government entities, large publicly funded healthcare systems. And it says that they must process only the minimum data necessary. They must obtain clear consent. They need to avoid secondary use of identity attributes. They need to refrain from, uh, requiring surrender of a device and they're acting under a statutory duty of loyalty. And then there are some enforcement and auto mechanisms. So what this does is it overall as a package, this prohibits monitoring or tracking the presentation of digital identity. Prohibits conditioning benefits on the use of a digital identity prohibits requiring, uh, requiring the surrender of devices, uh, mandates open technological standards, free of patent or licensing barriers. So it's, uh, vendor agnostic and requires in-state infrastructure control. And, um, and with that I am open to any questions.

I'll just say, uh, this also has broad support from anybody from the A CLU to, you know, on the other side of the spectrum. So, uh, with that I will move that we read SB 2 75 for a third time. Thank

Your president. As discussed yesterday, last year we passed SB two 60, which, uh, which did a few things as it relates to state indoor digital. ID declared that identity belongs to the individual, not the state. Embedded strong privacy and anti surveillance guardrails and then required study and stakeholder consultation before implementation. This bill is building upon that After the stakeholder, um, consultation and, and further looks to implement some of these privacy guidelines, it creates a digital bill of rights. It creates the actual state endorse digital identity program and requires, uh, the Department of Government operations to do formal rulemaking, uh, mandates. Public comment requires annual reporting, uh, points a qualified program manager. It establishes clear identity proofing standards. It and it it regulates the entire ecosystem, not just the state. So anybody that wants to accept digital wallets, verifiers, relying parties, government entities, uh, they must process only the minimum data necessary. They must obtain clear consent. Uh, they must re refrain from requiring surrender of device. And they also have to agree that there will be no tracking. It creates enforcement and audit mechanisms. It protects against government overreach by expressly prohibiting monitoring or tracking prohibiting conditioning benefits on the use of a digital ID prohibits requiring surrendering of a device and then it mandates open technological standards free of patent or licensing barriers. Uh, and with that, uh, open to any questions.

I move that we pass Senate bill 2 75.

Senator Vickers Baldry Aye. Lewin Brammer Aye. Bus a Comore Aye. Escamia Fillmore Grover Harper Kins Ipson Johnson Juab McKay Mikel Milner Musselman Owens pitcher Plum Rebe Sandal Stevenson Stratton Bickers Weiler Aye. Wilson Aye. Winterton Winterton President Adams Aye.

Yeah, sorry for that motion. UNC Circle Senate bill 1 54. We have a motion to Uncer Senate bill gimme the number again. 1 54. 1 54. Protection of an advocacy agency Reporting

Yes. I'd like to move amendment one which deletes section

Representative Cutler, Mr. Speaker Motion to circle

Yes. We're we're waiting for the, uh, to catch up on a, a sub that was requested by, um, an agency.

Thank you Mr. Speaker. We'd like to move second substitute, uh, to SB 2 75. And I'd like to speak to that,

Thank you. Uh, colleagues. Uh, second substitute was requested by some of our friends at, uh, DPS and it does two important things. It clarifies that a state endorsed digital identity can be used for age verification, which was always the intent. Uh, second, it, uh, sunsets the, uh, current, uh, mobile driver's license Pro driver's license program, uh, only in a timeframe after the state endorsed digital identity, uh, is made operational. Uh, that's the intent of the, uh, and that will allow, uh, department of Public Safety to save, uh, uh, over a million dollars on an audit by clearly signifying we're going to a new standard for digital identity. Uh, that ex that is the, uh, uh, substitute to

No, no discussion.

Thank you Mr. Speaker. Last year, uh, the legislature passed SB two 60, which established key guiding principles for digital identity. And, uh, that set up, uh, some very important things, uh, that we all rely on, such as digital identity belongs to an individual, not to the state that individuals control their own digital identity. It included strong privacy and anti surveillance guardrails, uh, into the statute, which is becoming more and more important in this age of ai. And it required us to work carefully with stakeholders and work on the technical, uh, details of this. Before any implementation this year, we're coming back with the implementation plan. So the purpose, uh, of, of SB 2 75 is to now implement that state endorsed digital identity. We've been working with stakeholders including, uh, all of the big wallet providers, uh, digital wallet providers, uh, on implementation details, working with better, better identity, uh, coalition and, and those who, uh, care deeply about how we do digital identity. I want to thank my, uh, good colleague from the Highland Alpine area for her work on the Digital Identity Bill of Rights, which starts on line 85 of this, uh, of the substitute two, that makes it clear that we have a right to use a physical ID instead of a digital one that you, no one can be compelled to use digital id. Uh, the right to selective disclosure, which means you get to choose what you disclose in terms of your age or other, i i identity characteristics when you present a, a digital IT id and that only those attributes necessary can be revealed. Most importantly, that we have a right to be free from surveillance and tracking or profiling in this digital age. And that there is a right to transparency for people to understand how this system is operating. But with that, I'll just, HB two or SB 2 75 creates the state endorsed digital identity program to roll out these digital identities. Uh, that it, it mandates regular reporting to the legislature. It makes sure that the key technical infrastructure that's required, uh, for this program, uh, remains in Utah and has a number of standards around that, uh, to present, prevent against misuse or overreach. Our principles remain the same. That individual controls identity, there's non surveillance and we are, have protections against government overreach. Some have said Why do we need to do Dig Digital identity? The reality is, if we don't do this, then we let the tech, the big tech companies, establish their own standards, which will not include protections against surveillance and protections for the individual. Oh, uh, this has passed unanimously through House and Senate committees and, uh, we have many states watching us and interested in joining our coalition. That concludes my presentation, Mr. Speaker.

Um, this is a bill that I have spent the last couple of years, probably three years working on, and I am very excited to finally see it here for a vote. And I appreciate the, um, the good representative who is at my right, but not to the right of me. Um, and, and I appreciate all of the efforts of also of Senator Comore. There have been so many people who have worked on this. We've brought in a huge coalition of people, and I would encourage a yes vote on this bill.

Thank you, Mr. Speaker. I rise in support of this bill having been another individual in this body who has worked very closely to make sure that we have a balance of privacy and transparency. And the good representative from Centerville has worked diligently on this and for several years. And so as a member of this body, I encourage you to support this. I have with me a constituent. We've had a discussion on this and some people don't understand what this is really doing and what we're, I believe what we're doing is we're putting protections on the people to be able to share the information they want to share and that they have to share, but no others. So I ask for your support for this bill. Thank you, Mr. Speaker.

SB 2 75 will allowed us to lead responsibly in digital identity innovation while staying grounded in our core principles of liberty, privacy, and transparency. Thank you.

Thank you Mr. Speaker. Last year, uh, the legislature passed SB two 60, which established key guiding principles for digital identity. And, uh, that set up, uh, some very important things, uh, that we all rely on, such as digital identity belongs to an individual, not to the state that individuals control their own digital identity. It included strong privacy and anti surveillance guardrails, uh, into the statute, which is becoming more and more important in this age of ai. And it required us to work carefully with stakeholders and work on the technical, uh, details of this. Before any implementation this year, we're coming back with the implementation plan. So the purpose, uh, of, of SB 2 75 is to now implement that state endorsed digital identity. We've been working with stakeholders including, uh, all of the big wallet providers, uh, digital wallet providers, uh, on implementation details, working with better, better identity, uh, coalition and, and those who, uh, care deeply about how we do digital identity. I want to thank my, uh, good colleague from the Highland Alpine area for her work on the Digital Identity Bill of Rights, which starts on line 85 of this, uh, of the substitute two, that makes it clear that we have a right to use a physical ID instead of a digital one that you, no one can be compelled to use digital id. Uh, the right to selective disclosure, which means you get to choose what you disclose in terms of your age or other, i i identity characteristics when you present a, a digital IT id and that only those attributes necessary can be revealed. Most importantly, that we have a right to be free from surveillance and tracking or profiling in this digital age. And that there is a right to transparency for people to understand how this system is operating. But with that, I'll just, HB two or SB 2 75 creates the state endorsed digital identity program to roll out these digital identities. Uh, that it, it mandates regular reporting to the legislature. It makes sure that the key technical infrastructure that's required, uh, for this program, uh, remains in Utah and has a number of standards around that, uh, to present, prevent against misuse or overreach. Our principles remain the same. That individual controls identity, there's non surveillance and we are, have protections against government overreach. Some have said Why do we need to do Dig Digital identity? The reality is, if we don't do this, then we let the tech, the big tech companies, establish their own standards, which will not include protections against surveillance and protections for the individual. Oh, uh, this has passed unanimously through House and Senate committees and, uh, we have many states watching us and interested in joining our coalition. That concludes my presentation, Mr. Speaker.

Um, this is a bill that I have spent the last couple of years, probably three years working on, and I am very excited to finally see it here for a vote. And I appreciate the, um, the good representative who is at my right, but not to the right of me. Um, and, and I appreciate all of the efforts of also of Senator Comore. There have been so many people who have worked on this. We've brought in a huge coalition of people, and I would encourage a yes vote on this bill.

Thank you, Mr. Speaker. I rise in support of this bill having been another individual in this body who has worked very closely to make sure that we have a balance of privacy and transparency. And the good representative from Centerville has worked diligently on this and for several years. And so as a member of this body, I encourage you to support this. I have with me a constituent. We've had a discussion on this and some people don't understand what this is really doing and what we're, I believe what we're doing is we're putting protections on the people to be able to share the information they want to share and that they have to share, but no others. So I ask for your support for this bill. Thank you, Mr. Speaker.

SB 2 75 will allowed us to lead responsibly in digital identity innovation while staying grounded in our core principles of liberty, privacy, and transparency. Thank you.

This was in consultation at the, and at the request of the Department of Public Safety. Uh, the second sub clarifies that Seti, the state endorse digital identity may be used for age verification. It also looks at the MDL program, the mobile Driver's License program and Sunset. It sunsets that program after the SETI program is in place.

Vote. Senator Spry Bwin Brammer bus Comore Aye. Escamia Fillmore Grover Harper Hankins Ipson Johnson Quan McKay Mikel Milner Musselman Owens pitcher Plum Rebe Sandal Stevenson Stratton Bickers Weiler Wilson Winterton Fillmore Fillmore. President Adams

I Aye.