New Digital Identity Framework Limits State Surveillance
A new governors' consortium aims to shift states to decentralized ID systems that prevent tracking by early 2027.
Updated on Oct. 21, 2026 in Cybersecurity
Live Poll
Should states be prohibited from tracking how and when you use your digital government ID?
Utah Chief Privacy Officer Christopher Bramwell has launched a governors' consortium to promote the State-Endorsed Digital Identity (SEDI) framework. The initiative aims to shift states toward decentralized credentialing systems that prevent government tracking of identity usage.
Why it matters
The framework seeks to mitigate systemic risks like the 2024 AU10TIX breach by abandoning server-retrieval models that allow identity issuers to monitor when and where digital credentials are presented.
The framework utilizes W3C-standardized Decentralized Identifiers and Verifiable Credentials to eliminate tracking capabilities. The architecture creates a statutory prohibition against state agencies monitoring credential presentation, contrasting with current centralized models.
The players
Christopher Bramwell
Utah chief privacy officer leading the effort to standardize decentralized digital identity across state lines.
Kantara Initiative
An organization focused on digital identity standards that serves as the home for the new governors' consortium.
California
A state that has deployed 2.2 million mobile driver's licenses utilizing the centralized ISO/IEC 18013-5 standard.
The details
The SEDI framework leverages Decentralized Identifiers (DIDs) — unique, verifiable digital identifiers that do not require centralized registration — and Verifiable Credentials, which are tamper-proof digital documents. By adopting these W3C specifications, states move away from server-retrieval models where an issuer tracks every check-in. The architecture is designed to prevent surveillance pricing and credential misuse by ensuring that identity verification occurs locally without alerting the issuing authority.
Timeline
2024: AU10TIX identity data breach occurred.
April 2026: SEDI Summit took place.
May 6, 2026: Utah SB 275 took effect.
October 2026: Christopher Bramwell presented SEDI in Las Vegas.
January 2027: Target date for ten states to adopt SEDI governance.
The Tech Race
The SEDI framework competes with the centralized ISO/IEC 18013-5 standard currently used by states like California. By championing W3C-based decentralized identifiers, Utah is positioning its model as a privacy-focused alternative to the predominant mobile driver's license infrastructure.
Residents in participating states will eventually present digital credentials through decentralized systems that prevent the state from tracking their physical movements. This transition replaces existing centralized driver's license apps, though the exact rollout timeline remains dependent on state adoption.
The takeaway
The move toward decentralized identity represents a shift in state policy to curb mass surveillance capabilities inherent in centralized verification. Watch the adoption rate of SEDI-style frameworks across state legislatures leading up to the January 2027 target.
Further reading
Learn more about the latest developments in Cybersecurity as states transition to new identity standards.
Source note: This article includes information reported by Biometric Update.
Live Poll
Should states be prohibited from tracking how and when you use your digital government ID?
