What would SEDI-style rules change?

SEDI-style rules would bar issuers from tracking credential use, so the body that gives you a digital ID would not be allowed to monitor how, when, or where you present it.

Why does Utah's privacy stance matter amid age-verification fights?

Digital identity is increasingly tied to online age checks, which have become a legal and political flashpoint, and credentials that cannot be tracked by their issuer offer one possible answer to the question of who keeps the record.

Utah Seeks 10-State Coalition for SEDI Digital ID Privacy

Q: What does privacy-by-design mean in this context?

It means the protection is built into the rules and the system itself, rather than depending on a company promising to behave well.

Utah is lobbying other states to adopt a digital identity model that treats privacy as a design requirement rather than an afterthought. According to Biometric Update, the state is seeking a 10-state coalition to adopt SEDI-style rules that prevent issuers from tracking when and where people use their credentials. The Utah SEDI digital ID privacy push is a notable counterpoint to identity systems that can quietly log everyday activity.

The source reporting is brief, so some details, such as which states may join and how the rules would be enforced, are not yet public. Here is what is known, and why it matters.

How Digital ID Systems Can Track Everyday Use

A digital ID is a credential stored on a phone or other device that lets you prove who you are, or a fact about you such as your age, without handing over a physical card. The convenience is real. But the way a system is built determines what it can learn about you.

In some designs, the organization that issues a credential can see each time it is used. That could mean a record of which service asked for proof, at what time, and in what place. Over months, those records can form a detailed picture of someone's routines. This is the tracking risk that privacy advocates raise about identity systems that log everyday activity, and it is the problem Utah's approach is aimed at.

What Utah's SEDI-Style Rules Would Change

According to the report, SEDI-style rules would bar issuers from tracking credential use. In plain terms, the body that gives you a digital ID would not be allowed to monitor how, when, or where you present it. The credential would do its job of proving something about you, while the issuer stays out of the loop afterward.

This is what privacy-by-design means in practice: the protection is built into the rules and the system itself, rather than depending on a company promising to behave well. Utah is now trying to turn that approach into a shared standard by recruiting a coalition of 10 states. A group of states using similar rules could make credentials more consistent and give residents the same protections no matter where they live.

Why Utah's Privacy Stance Matters Amid Age-Verification Fights

Digital identity is increasingly tied to online age checks, and those checks have become a legal and political flashpoint. Utah has been at the center of that debate. The state was the first in its category to pass a controversial age-verification law, and it later agreed to pause enforcement of its VPN age-verification law while a legal challenge proceeds. Separately, a federal judge blocked a Utah rule for adult sites that would have forced them to choose between blocking VPN users or verifying the age of visitors worldwide.

Age verification raises an obvious question: if people must prove who they are or how old they are to use websites, who keeps the record? Credentials that cannot be tracked by their issuer offer one possible answer. They could allow verification without building a log of every site a person visits. That does not settle the broader legal disputes, but it shows how identity design and online access rules are connected.

What This Means For You

For most people, nothing changes today. This is a push to form a coalition, not a finished law, and the details of the rules have yet to be fully laid out in public reporting.

Still, the idea is worth understanding. As digital IDs spread, the question to ask is not only whether a credential works, but who can see how you use it. A system that prevents issuers from tracking usage reduces the amount of sensitive data that exists to be leaked, subpoenaed, or repurposed. If your state considers digital ID legislation, pay attention to whether it includes limits on issuer tracking.

What to Watch as the 10-State Coalition Develops

Several questions will determine whether this effort matters:

Which states join. Reaching 10 states would require buy-in across different political and regulatory environments.
How strong the rules are. The value lies in specifics, such as what counts as tracking and how violations are handled.
How it fits with age-verification laws. Whether privacy-preserving credentials become an accepted way to meet those requirements will be closely watched.
Court outcomes. Ongoing legal fights over Utah's online rules may shape how far states can go.

Key Takeaways

Utah wants a 10-state coalition to adopt SEDI-style rules that stop digital ID issuers from tracking credential use.
The approach builds privacy into the system rather than relying on promises.
When digital ID legislation comes up in your state, look for explicit limits on issuer tracking.
Keep an eye on how age-verification requirements and digital identity design evolve together.

The Utah SEDI digital ID privacy effort is still early, but it is worth following. To understand the state's broader approach to online identity, read how its VPN age-verification law was paused and how a federal court blocked its adult-site VPN rule, and check back as the coalition takes shape.