1. (1)

   1. (a) The department shall establish and maintain identity proofing requirements for the issuance of a state-endorsed digital identity that:

      1. (i) follow a generally accepted identity proofing standard;
      2. (ii) are commensurate with the risks of impersonation, fraud, and misuse associated with the credential; and
      3. (iii) are consistent with the privacy, civil liberties, and security requirements of this chapter.

   2. (b) The identity proofing process shall be designed to establish, at a minimum, that:

      1. (i) the applicant is a real individual;
      2. (ii) the applicant is the individual the applicant claims to be;
      3. (iii) the applicant's birth date is the date the applicant claims it to be; and
      4. (iv) the applicant meets the eligibility requirements of Section 63A-20-302.

   3. (c) The department shall ensure that the identity proofing process results in a credential that provides a level of confidence in the individual's identity that is:

      1. (i) sufficiently robust to support reliance by governmental entities and private-sector relying parties where required by law or policy for online age assurance; and
      2. (ii) appropriate for use in both online and offline presentations.

   4. (d) Identity proofing processes shall be designed so that the state's endorsement:

      1. (i) reflects verification at a point in time; and

      2. (ii) does not require:

         1. (A) continuous monitoring; or
         2. (B) tracking.

2. (2)

   1. (a) An applicant shall provide true and accurate information as required under this part.
   2. (b) Knowingly providing materially false information for the purpose of obtaining a state-endorsed digital identity constitutes fraud and may result in denial, revocation, and other remedies provided by law.

3. (3)

   1. (a) Obtaining or holding a state-endorsed digital identity does not affect an individual's physical identity documents.
   2. (b) An individual is not required to surrender, cancel, or replace any physical identity document as a condition of applying for or holding a state-endorsed digital identity.

4. (4)

   1. (a) The department shall define by rule, in accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, the identity proofing standards and processes required for issuance of a state-endorsed digital identity.

   2. (b) The rules shall, at a minimum:

      1. (i) specify the objectives the identity proofing process is intended to achieve;

      2. (ii) describe the acceptable methods of identity proofing, including:

         1. (A) in-person, remote, or hybrid methods, and the conditions under which each may be used; and
         2. (B) minimum evidence requirements and validation methods;
      3. (iii) align with generally accepted identity proofing practices; and
      4. (iv) establish requirements and a process to become an identity proofing entity.

Enacted by Chapter 436, 2026 General Session