63A-12-117. Digital authentication systems -- Technical standards and requirements.

403 words·~2 min read·/ut/title-63a/chapter-12/63a-12-117

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

Effective 5/6/2026

(1)As used in this section:

(a)"Digital authentication system" means technology and procedures used to create digitally authenticated records.

(b)"Digitally authenticated record" means the same as that term is defined in Section 17-71-301.5 .

(c)"Governmental entity" means the same as that term is defined in Section 63G-2-103 .

(2)A governmental entity that creates or accepts digitally authenticated records shall:

(a)maintain the records in accordance with approved retention schedules;

(b)ensure records retain authentication characteristics throughout the retention period;

(c)except as otherwise prohibited by law, transfer records to the state archives in accordance with state archivist requirements; and

(d)maintain data necessary for verification and preservation.

(3)The state archivist shall establish procedures for:

(a)accepting digitally authenticated permanent records;

(b)verifying authentication integrity upon transfer;

(c)long-term preservation of digital authentication characteristics; and

(d)providing public access to archived digitally authenticated records in accordance with Title 63G, Chapter 2, Government Records Access and Management Act.

(a)The state archivist, in consultation with the Division of Technology Services, shall make rules, in accordance with Title 63G, Chapter 3, Utah Administrative Rulemaking Act, establishing:

(i)technical standards for digital authentication systems, including:

(A)security requirements;

(B)authentication verification procedures;

(C)acceptable authentication methods and technologies;

(D)cybersecurity standards; and

(E)system integrity requirements;

(ii)preservation standards for digital authentication systems to ensure long-term preservation;

(iii)retention schedule requirements for digitally authenticated records;

(iv)transfer procedures from governmental entities to state archives;

(v)format specifications for archival storage of digitally authenticated records;

(vi)verification procedures for authentication integrity; and

(vii)data requirements for preservation and access.

(b)The state archivist shall ensure that standards established under this section require digitally authenticated records to demonstrate:

(i)immutability or tamper-evident characteristics sufficient to detect unauthorized alterations;

(ii)verified identity of the person authenticating the record using identity verification procedures that meet or exceed the requirements for satisfactory evidence of identity established for remote notarization under Section 46-1-2 ;

(iii)format sustainability for long-term preservation; and

(iv)compliance with retention schedules.

(5)In making rules under Subsection

(4), the state archivist shall consult with:

(a)the Title and Escrow Commission created in Section 31A-2-403 ;

(b)the County Recorder Standards Board created in Section 63C-30-201 ; and

(c)other relevant industry stakeholders.

Enacted by Chapter 187 , 2026 General Session