LIS

Code of Virginia

Creating a Report: Check the sections you'd like to appear in the report, then use the "Create Report" button at the bottom of the page to generate your report. Once the report is generated you'll then have the option to download it as a pdf, print or email the report.

Code of Virginia
Title 2.2. Administration of Government
Subtitle I. Organization of State Government
Chapter 4.3. Commonwealth Identity Management Standards
11/8/2024

Chapter 4.3. Commonwealth Identity Management Standards.

§ 2.2-436. Approval of electronic identity standards.

A. The Secretary of Commerce and Trade in consultation with the Secretary of Administration, shall review and approve or disapprove, upon the recommendation of the Identity Management Standards Advisory Council pursuant to § 2.2-437, guidance documents that adopt (i) nationally recognized technical and data standards regarding the verification and authentication of identity in digital and online transactions; (ii) the minimum specifications and standards that should be included in an identity trust framework, as defined in § 59.1-550, so as to warrant liability protection pursuant to the Electronic Identity Management Act (§ 59.1-550 et seq.); and (iii) any other related data standards or specifications concerning reliance by third parties on identity credentials, as defined in § 59.1-550.

B. Final guidance documents approved pursuant to subsection A shall be posted on the Virginia Regulatory Town Hall and published in the Virginia Register of Regulations as a general notice. The Secretary of Commerce and Trade shall send a copy of the final guidance documents to the Joint Commission on Administrative Rules established pursuant to § 30-73.1 at least 90 days prior to the effective date of such guidance documents. The Secretary of Commerce and Trade shall also annually file a list of available guidance documents developed pursuant to this chapter pursuant to § 2.2-4103.1 of the Virginia Administrative Process Act (§ 2.2-4000 et seq.) and shall send a copy of such list to the Joint Commission on Administrative Rules.

2015, cc. 482, 483; 2017, c. 488; 2020, c. 738; 2021, Sp. Sess. I, c. 258.

§ 2.2-437. Identity Management Standards Advisory Council.

A. The Identity Management Standards Advisory Council (the Advisory Council) is established to advise the Secretary of Commerce and Trade on the adoption of identity management standards and the creation of guidance documents pursuant to § 2.2-436.

B. The Advisory Council shall consist of seven members, to be appointed by and serve at the pleasure of the Governor, with expertise in electronic identity management and information technology. Members shall include a representative of the Commonwealth of Virginia Innovation Partnership Authority, five representatives of the business community with appropriate experience and expertise, and one representative of Virginia consumers. In addition to the seven appointed members, the Commissioner of the Department of Motor Vehicles, or his designee, and the Chief Information Officer of the Commonwealth, or his designee, may also serve as ex officio members with voting privileges on the Advisory Council. After the initial staggering of terms, members shall be appointed for terms of four years. Members may be reappointed.

The Advisory Council shall designate one of its members as chairman.

Members shall serve without compensation but shall be reimbursed for all reasonable and necessary expenses incurred in the performance of their duties as provided in § 2.2-2825.

Staff to the Advisory Council shall be provided by the Office of the Secretary of Commerce and Trade.

C. Proposed guidance documents and general opportunity for oral or written submittals as to those guidance documents shall be posted on the Virginia Regulatory Town Hall and published in the Virginia Register of Regulations as a general notice following the processes and procedures set forth in subsection B of § 2.2-4031 of the Virginia Administrative Process Act (§ 2.2-4000 et seq.). The Advisory Council shall allow at least 30 days for the submission of written comments following the posting and publication and shall hold at least one meeting dedicated to the receipt of oral comment no less than 15 days after the posting and publication. The Advisory Council shall also develop methods for the identification and notification of interested parties and specific means of seeking input from interested persons and groups. The Advisory Council shall send a copy of such notices, comments, and other background material relative to the development of the recommended guidance documents to the Joint Commission on Administrative Rules.

2015, cc. 482, 483; 2017, c. 395; 2020, c. 738; 2021, Sp. Sess. I, c. 258.