In an era when personal data has become one of the most valuable commodities in the world, Utah lawmakers are advancing what could become one of the most important privacy frameworks in the United States. A new proposal known as SB275 would create an optional state-endorsed digital identity system anchored by a “digital identity bill of rights,” with protections designed to ensure that individuals retain control over their personal information rather than governments or corporations.
Supporters say the effort recognizes a simple but urgent reality. Data has enormous power and utility, and that power can easily be abused. Without strong safeguards, people can be manipulated, profiled, exploited, or even physically harmed. Utah’s approach attempts to put privacy and individual freedom at the center of the digital future.
Leadership Behind the Initiative
The legislation is being led by Sen. Kirk Cullimore, a Republican from Cottonwood Heights, who has spent more than a year developing the framework. Cullimore previously sponsored legislation to research digital identity systems and establish privacy principles, and SB275 is designed to move from theory to implementation.
“(Last year’s bill) did three critical things,” Cullimore told lawmakers. “It declared that identity belongs to the individual and not the state. It embedded strong privacy and anti-surveillance guardrails into the statute, and it also required study and stakeholder consultation before implementation.”
He explained that the new legislation “takes principles adopted from last year and turns them into an operational program.”
Cullimore argues that digital identity systems are inevitable, whether governments act or not. “Digital identity is coming, regardless of whether we address it or not,” he said. “I think Utah is unique in being ahead of the curve, dealing with this and getting in front of it.”
What the Digital Bill of Rights Includes
At the heart of the proposal is the digital identity bill of rights, which outlines protections intended to ensure personal control over data and prevent government overreach.
Cullimore described the guarantees clearly. The bill provides “the right to use a physical ID instead of digital, the right not to be compelled to use digital ID, the right to selective disclosure of identity attributes, the right to be free from surveillance, tracking and profiling, and the right to transparency and how the system operates.”
In practical terms, that means residents could choose to share only specific information when needed rather than handing over complete identity records. It also ensures that digital participation remains voluntary.
Perhaps most significant is the philosophical foundation. The system is designed around the principle that identity belongs to the individual, not the government.
The State’s Role: Protector, Not Controller
Supporters emphasize that the state would not control citizens’ identities but instead act as a trusted verifier.
Christopher Bramwell, director of the Utah Office of Data Privacy, explained the distinction. “The individual controls their identity, the state’s role is only to endorse it and to ensure the individual has mechanisms to protect it,” he said.
Cullimore echoed the same theme. “We’re trying to redevelop this in a way that becomes more citizen, consumer centric, to where you actually own all your data and you elect what goes out,” he said. “It’s about keeping government in its proper place, and that is to maintain our civil liberties and prevent government encroachment.”
The proposal also includes structural safeguards intended to limit federal involvement. Cullimore emphasized that the system “keeps the technical infrastructure in a state-controlled data center here in Utah,” and that federal authorities would not have access to the data.
Building a National Coalition
Utah leaders do not see this as a purely local initiative. They believe the state could become a national model for privacy-first digital identity systems.
“We’re building a coalition of other states to get on board,” Cullimore said. “As we lead out with this, there’ll be a critical mass of other states that are also doing this.”
If successful, the framework could influence how digital identity is implemented across the country, potentially creating a decentralized alternative to federal systems.
Support From Unexpected Allies
One of the more striking aspects of the proposal is support from civil liberties advocates. The ACLU has expressed approval of Utah’s approach, stating that the state is the only one “asking the right questions.”
That support is significant because privacy groups have historically been skeptical of government-issued digital identity systems. The endorsement suggests that Utah’s safeguards may be strong enough to address longstanding fears about surveillance.
Cullimore also pointed to Utah’s political culture as an advantage. “I think the political climate here is one that respects privacy, one that respects limited government, and that government’s role is to protect our civil liberties,” he said.
NP Editor: We would like to see them also guarantee the “anonymous transaction” – i.e. paying for stuff with cash. A major violation of privacy is toll booths that do not accept cash, that read your license plate and track your movements. It is a scary world.
