Utah is seeking broader adoption of its privacy-focused digital-identity framework through a multistate consortium, as the state prepares to replace its current mobile-driver-license program. Chief Privacy Officer Christopher Bramwell described the effort at the Money20/20 financial-technology conference on October 18, according to October 19 reporting by Payments Dive.
Bramwell said Utah had not announced the participating states and expected 10 states to have legislative or executive-branch work underway on comparable governance frameworks by January. Those comments, reported by Payments Dive, describe anticipated policy work—not confirmation that 10 states have joined, adopted Utah’s law or launched interoperable credentials.
The consortium builds on an initiative already underway, rather than a program first unveiled this week. In a May interview published by the Council of State Governments, Bramwell said Gov. Spencer Cox’s office was inviting other governors to participate. He described shared legislative foundations, policy templates and implementation resources as goals for the collaboration.
For Utah residents, the approaching administrative change is more concrete. The Driver License Division’s transition notice says the State-Endorsed Digital Identity Program created by Senate Bill 275 will replace the existing mobile-driver-license program, which is scheduled to sunset January 1, 2027. That notice concerns the digital program, not a directive for residents to surrender their physical licenses.
Utah’s digital-identity law expressly protects the ability to choose and use a state-endorsed physical form of identification. It says the state may not compel someone to use a digital version instead. The law also protects access to otherwise lawful services and benefits regardless of the lawful identification format chosen. Residents also have a right not to surrender their device to the state when presenting digital identification. That safeguard is separate from how much information a credential discloses.
The framework aims to limit unnecessary disclosure. The Department of Government Operations’ summit account describes cryptographic proof as a way to verify identity without sharing every underlying detail. The statute makes that principle specific: a credential must support proving that someone meets a minimum age without revealing the person’s age or birth date, and permit a choice of digital wallet that meets state requirements.
Implementation also carries public-accountability requirements. The law requires a 45-day comment period for proposed program rules and a response to substantive comments before a rule becomes effective. Annual reporting beginning in 2027 must cover adoption, security incidents, remediation, public feedback and the availability of compliant wallet and verification tools.
Those requirements separate the promise of the consortium from evidence of results. The state officials’ explanation emphasizes individual control rather than centralized tracking. Whether the system delivers that control depends on implementation and acceptance, not simply on how many states discuss the framework. A scheduled mobile-license transition and a growing policy coalition should not be read as proof that every business or public agency already accepts the replacement credential.
