Facilities Lack Infrastructure, Incentives to Accept MDL
Utah CIO Alan Fuller carries his mobile driver’s license on his phone, and the Transportation Security Administration advertises accepting the Utah MDL as a valid form of identification. But when he recently took an international trip, the device reader at his home airport was broken. The transportation security officer checking credentials was confused as to how to read it otherwise, and he encouraged Fuller to use his physical credential. Fuller also tried to use the mobile credential at another airport in his travels, and that too failed.
“It’s getting to the point where TSA recognizes they need it, but airlines often don’t. And I don’t know if a hotel does; I don’t know if banks do. So, we have an adoption problem, and adoption is absolutely essential,” Fuller said at NASCIO 2025 Midyear.
Fuller and Sloan agreed that service providers should be able to authenticate the mobile driver’s license without maintaining a log, because that turns the state credential into a surveillance tool. “The answer for an MDL is to look at the ISO standards,” Fuller said.
“I don’t want to be negative about it. It’s a great first effort, and we are learning a lot. But it’s not cutting it, and we need to do something better,” he said.
States also have to work out financial incentives for app developers, Fuller acknowledged. Currently, Utah’s vendor wants to charge both the credential holder and the identity verification authority for using an app. And so, Utah citizens have to pay annually to maintain their digital mobile driver’s license, which makes them “annoyed,” particularly when they cannot use it as expected at TSA facilities and elsewhere.
In addition, the state has encountered challenges where participants have no incentive to pay into the system. The app vendor went to the Utah Department of Alcoholic Beverage Services and requested they pay $1,000 per state-owned liquor store to use the mobile driver’s license as a credential. The Department of Alcoholic Beverage Services declined to do so; it can continue to verify physical credentials at no additional cost.
“So, this go-to-market strategy is terrible,” Fuller said.
Keep this page bookmarked for our coverage of the NASCIO 2025 Midyear Conference. Follow us on the social platform X at @StateTech and the official conference account, @NASCIO. Join the conversation using the hashtag #NASCIO25.