Published Date : 10/23/2025Â
Public officials in Utah are touting the privacy and security protections of the State’s forthcoming digital identity. The new, optional State-Endorsed Digital Identity (SEDI) initiative was mandated with the passage of SB 260 earlier this year.
The State is already issuing mDLs (mobile driver's licenses) made with technology from GET Group, Scytáles, and FaceTec since 2021. The difference is that this version will endorse, rather than bestow identity, and builds in unusual privacy stipulations to hew closer to the principles of self-sovereign identity (SSI).
Chief Privacy Officer Christopher Bramwell tells local outlet KUTV that “the whole point is to give you control of your identity so no one can impersonate you.” Senate Majority Leader Kirk Cullimore, who sponsored SB 260, says “the laws and the parameters to establish its safety and security, and the principles of freedom around that, are getting put into place.”
Bramwell emphasizes that the new digital ID will not track users or log interactions, and highlighted the security advantages of a decentralized data storage model. The architecture will also avoid the need for Utah to reissue all its residents’ digital IDs if State IT systems are breached.
Utah’s SEDI is intended for use accessing government services, airport security checks, and transactions with the private sector. The State’s mDL performs similar functions and is accepted as age verification for alcohol purchases. The SEDI is being built with delegation capabilities to allow parents and guardians to act on behalf of children or vulnerable adults, according to a paper describing the initiative.
The digital ID is currently in development by the Utah Department of Government Operations, while the mDL program is managed by the Utah Department of Public Safety’s Driver License Division (DLD).
Comments under the article indicate that at least some among the public consider the assurances of user control and privacy protection hollow, despite SB 260’s endorsement by the ACLU as a digital ID that guarantees protection against the potential to switch on “phone home” capabilities common to other mDLs. The “No Phone Home” campaign was initially sparked by a presentation Bramwell, Anonyme Labs Chief Architect Steve McCown, and Timothy Ruff of Digital Trust Venture Partners delivered at IIW 40, the gist of which has been cosigned by several of America’s leading digital privacy experts and advocacy groups.
McCown and Ruff joined The Biometric Update Podcast to discuss the server retrieval issue they say is built into ISO/IEC 18013-5, along with DIF ED Kim Hamilton Duffy, in June.
Utah is one of three states issuing a digital wallet for their mDLs that Trinsic cannot yet integrate. More than 103,000 people were enrolled in Utah’s mDL program as of June, according to Government Technology. The publication added up the numbers provided by 11 state mDL programs, and found at least 4.5 million Americans already have mDLs.
Hawaii, Virginia, and West Virginia did not respond with figures. Trinsic counted 2 million mDLs in Louisiana and 8 million overall, but noted that many are not compliant with ISO/IEC 18013-5, with the legacy LA Wallet a prominent example. GovTech reports that Louisiana has issued 52,000 of its new mDLs compliant with the standard so far.
SEDI is intended to comply with ISO 18013-5 and -7.Â
Q: What is the State-Endorsed Digital Identity (SEDI) initiative in Utah?
A: The SEDI initiative is a new, optional digital identity program in Utah designed to enhance privacy and security. It was mandated by SB 260 and aims to give users control over their identity while ensuring robust security measures.
Q: How does SEDI differ from the existing mDL program?
A: SEDI endorses rather than bestows identity and includes unique privacy stipulations to align with self-sovereign identity principles. It also avoids tracking users or logging interactions and uses a decentralized data storage model.
Q: What are the primary functions of SEDI?
A: SEDI is intended for accessing government services, airport security checks, and transactions with the private sector. It also includes delegation capabilities for parents and guardians to act on behalf of children or vulnerable adults.
Q: How does SEDI ensure user privacy and security?
A: SEDI does not track users or log interactions, and it uses a decentralized data storage model. This architecture helps prevent the need for Utah to reissue all residents’ digital IDs if State IT systems are breached.
Q: What is the 'No Phone Home' campaign, and how is it related to SEDI?
A: The 'No Phone Home' campaign is a privacy initiative that warns against the potential for digital IDs to switch on 'phone home' capabilities, which could compromise user privacy. SEDI has been endorsed by the ACLU for its strong privacy protections.Â