Utah 2023 Regular Session

Utah House Bill HB0470 Compare Versions

OldNewDifferences
1-Enrolled Copy H.B. 470
1+1st Sub. H.B. 470
2+LEGISLATIVE GENERAL COUNSEL
3+6 Approved for Filing: S. Elder 6
4+6 02-23-23 8:11 AM 6
5+H.B. 470
6+1st Sub. (Buff)
7+Representative Paul A. Cutler proposes the following substitute bill:
28 1 GOVERNMENT DI GITAL VERIFIABLE
39 2 RECORD AMENDMENTS
410 3 2023 GENERAL SESSION
511 4 STATE OF UTAH
612 5 Chief Sponsor: Paul A. Cutler
713 6 Senate Sponsor: Kirk A. Cullimore
814 7
915 8LONG TITLE
1016 9General Description:
1117 10 This bill requires the Division of Technology Services to create a pilot program and
1218 11provide recommendations for certain digital verifiable records.
1319 12Highlighted Provisions:
1420 13 This bill:
1521 14 <defines terms; and
1622 15 <requires the Division of Technology Services to:
1723 16 Cprovide recommendations to government entities regarding digital verifiable
1824 17records and credentials; and
1925 18 Ccreate a pilot program for digital verifiable credentials.
2026 19Money Appropriated in this Bill:
2127 20 None
2228 21Other Special Clauses:
2329 22 None
2430 23Utah Code Sections Affected:
2531 24ENACTS:
2632 25 63A-16-108, Utah Code Annotated 1953
33+*HB0470S01* 1st Sub. (Buff) H.B. 470 02-23-23 8:11 AM
34+- 2 -
2735 26
2836 27Be it enacted by the Legislature of the state of Utah:
2937 28 Section 1. Section 63A-16-108 is enacted to read:
30-29 63A-16-108. Digital verifiable credential and records. H.B. 470 Enrolled Copy
31-- 2 -
38+29 63A-16-108. Digital verifiable credential and records.
3239 30 (1) As used in this section:
3340 31 (a) "Blockchain" means a distributed ledger of ordered electronic records that:
3441 32 (i) is distributed across a network of computers;
3542 33 (ii) utilizes technology to prevent the unauthorized alteration of electronic records; and
3643 34 (iii) is mathematically verified.
3744 35 (b) "Digital record schema" means a description of the data fields and tamper-evident
3845 36technologies required to create a digital verifiable credential or digital verifiable record that can
3946 37be registered on a distributed ledger technology.
4047 38 (c) "Digital signature" means a tamper-evident, immutable, electronic seal that is
4148 39equivalent in function and status to a notary seal issued by a government entity.
4249 40 (d) "Digital verifiable credential" means a digital document that:
4350 41 (i) attests to a fact;
4451 42 (ii) is issued by a government entity;
4552 43 (iii) can be mathematically verified; and
4653 44 (iv) conveys rights, privileges, and legal enforceability equivalent to the possession of a
4754 45physical credential of the same type.
4855 46 (e) "Digital verifiable record" means a digital record that:
4956 47 (i) is issued by a government entity or has been digitally signed by a government entity;
5057 48 (ii) has a digital signature;
5158 49 (iii) can be mathematically verified; and
5259 50 (iv) conveys rights, privileges, and legal enforceability equivalent to the possession of a
5360 51physical record of the same type.
5461 52 (f) "Distributed ledger" means a decentralized database that is maintained by the
5562 53consensus of replicated, shared, and synchronized digital data.
5663 54 (g) "Government entity" means:
5764 55 (i) the state;
58-56 (ii) a state agency; or
59-57 (iii) a political subdivision of the state. Enrolled Copy H.B. 470
60-- 3 -
65+56 (ii) a state agency; or 02-23-23 8:11 AM 1st Sub. (Buff) H.B. 470
66+- 3 -House Committee Amendments 2-24-2023 pf/se1
67+57 (iii) a political subdivision of the state.
6168 58 (h) "Government operations privacy officer" means the government operations privacy
6269 59officer described in Section 67-1-17.
6370 60 (i) "State archivist" means the state archivist appointed under Section 63A-12-102.
6471 61 (j) "State privacy officer" means the state privacy officer described in Section 67-3-13.
6572 62 (k) "State registrar" means the state registrar of vital records appointed under Section
6673 6326-2-3.
6774 64 (2) The Division of Technology Services shall:
6875 65 (a) provide recommendations to government entities regarding:
6976 66 (i) appropriate digital record schemas that allow a government to issue a digital
7077 67verifiable credential or record;
7178 68 (ii) policies and procedures to protect the privacy of personal identifying information
7279 69maintained within distributed ledger programs;
7380 70 (iii) the manner and format in which an issuer may certify a document through
7481 71blockchain; and
7582 72 (iv) processes and procedures for the preservation, auditability, integrity, security, and
76-73confidentiality of digital verifiable credentials and records;
83+73confidentiality of digital verifiable credentials and records,
7784 74 (b) create a pilot program for the implementation of digital verifiable credentials by
7885 75governmental entities; and
79-76 (c) report to Public Utilities, Energy, and Technology Interim Committee by October
80-7731, 2023, on the duties described in Subsections (2)(a) and (b).
86+76 (c) report to  º [Government Operations Interim Committee] Public Utilities, Energy,
87+76aand Technology Interim Committee »  by October 31, 2023, on the
88+77duties described in Subsections (2)(a) and (b).
8189 78 (3) In performing the duties described in Subsections (2)(a) and (b), the Division of
8290 79Technology Services shall consult with:
8391 80 (a) the state archivist;
8492 81 (b) the state privacy officer;
8593 82 (c) the government operations privacy officer;
8694 83 (d) the state registrar;
8795 84 (e) private industry professionals with relevant expertise;
88-85 (f) the Utah League of Cities and Towns; and H.B. 470 Enrolled Copy
89-- 4 -
96+85 (f) the Utah League of Cities and Towns; and
9097 86 (g) an association of counties in the state.