§ 63A-16-108 — Digital verifiable credential and records.

(1) As used in this section:

(1)(a) "Blockchain" means a distributed ledger of ordered electronic records that:
(1)(a)(i) is distributed across a network of computers;
(1)(a)(ii) utilizes technology to prevent the unauthorized alteration of electronic records; and
(1)(a)(iii) is mathematically verified.
(1)(b) "Digital record schema" means a description of the data fields and tamper-evident technologies required to create a digital verifiable credential or digital verifiable record that can be registered on a distributed ledger technology.
(1)(c) "Digital signature" means a tamper-evident, immutable, electronic seal that is equivalent in function and status to a notary seal issued by a government entity.
(1)(d) "Digital verifiable credential" means a digital document that:
(1)(d)(i) attests to a fact;
(1)(d)(ii) is issued by a government entity;
(1)(d)(iii) can be mathematically verified; and
(1)(d)(iv) conveys rights, privileges, and legal enforceability equivalent to the possession of a physical credential of the same type.
(1)(e) "Digital verifiable record" means a digital record that:
(1)(e)(i) is issued by a government entity or has been digitally signed by a government entity;
(1)(e)(ii) has a digital signature;
(1)(e)(iii) can be mathematically verified; and
(1)(e)(iv) conveys rights, privileges, and legal enforceability equivalent to the possession of a physical record of the same type.
(1)(f) "Distributed ledger" means a decentralized database that is maintained by the consensus of replicated, shared, and synchronized digital data.
(1)(g) "Government entity" means:
(1)(g)(i) the state;
(1)(g)(ii) a state agency; or
(1)(g)(iii) a political subdivision of the state.
(1)(h) "Government operations privacy officer" means the government operations privacy officer described in Section 67-1-17.
(1)(i) "State archivist" means the state archivist appointed under Section 63A-12-102.
(1)(j) "State privacy officer" means the state privacy officer described in Section 67-3-13.
(1)(k) "State registrar" means the state registrar of vital records appointed under Section 26B-8-102.
(2) The Division of Technology Services shall:

(2)(a) provide recommendations to government entities regarding:
(2)(a)(i) appropriate digital record schemas that allow a government to issue a digital verifiable credential or record;
(2)(a)(ii) policies and procedures to protect the privacy of personal identifying information maintained within distributed ledger programs;
(2)(a)(iii) the manner and format in which an issuer may certify a document through blockchain; and
(2)(a)(iv) processes and procedures for the preservation, auditability, integrity, security, and confidentiality of digital verifiable credentials and records;
(2)(b) create a pilot program for the implementation of digital verifiable credentials by governmental entities; and
(2)(c) report to Public Utilities, Energy, and Technology Interim Committee by October 31, 2023, on the duties described in Subsections (2)(a) and (b).
(3) In performing the duties described in Subsections (2)(a) and (b), the Division of Technology Services shall consult with:

(3)(a) the state archivist;
(3)(b) the state privacy officer;
(3)(c) the government operations privacy officer;
(3)(d) the state registrar;
(3)(e) private industry professionals with relevant expertise;
(3)(f) the Utah League of Cities and Towns; and
(3)(g) an association of counties in the state.

Legislative History

Enacted by Chapter 201, 2023 General Session