REFERENCE TITLE: electronic; digital signatures; requirements; ADOA

 

 

 

State of Arizona

Senate

Fifty-third Legislature

First Regular Session

2017

 

 

SB 1078

 

Introduced by

Senators Worsley: Borrelli, Burges, Fann, Farnsworth D, Smith

 

 

AN ACT

 

providing for TRANSFERRING and RENUMBERING; amending section 18‑106, Arizona Revised Statutes, as transferred and renumbered; amending sections 28‑2065, 41‑121, 41‑352, 44‑7011, 44‑7041 and 44‑7042, Arizona Revised Statutes; relating to electronic and digital signatures.

 

 

(TEXT OF BILL BEGINS ON NEXT PAGE)

 


Be it enacted by the Legislature of the State of Arizona:

Section 1.  Section 18-442, Arizona Revised Statutes, is transferred and renumbered for placement in title 18, chapter 1, article 1, Arizona Revised Statutes, as section 18‑106 and, as so renumbered, is amended to read:

START_STATUTE18-106.  Electronic and digital signatures; exemptions; definitions

A.  The department, in consultation with the state treasurer, shall adopt rules pursuant to title 41, chapter 6 establishing policies and procedures for the use of electronic and digital signatures by all state agencies, boards and commissions for documents filed with and by all state agencies, boards and commissions.

B.  Unless otherwise provided by law, an electronic signature that complies with this section may be used to sign a writing on a document that is filed with or by a state agency, board or commission, and the electronic signature has the same force and effect as a written signature.

B.  C.  An electronic signature shall be unique to the person using it, shall be capable of reliable verification and shall be linked to a record in a manner so that if the record is changed the electronic signature is invalidated.

C.  D.  Except for returns, statements or other documents filed pursuant to titles 42 and 43, a document that contains an electronic signature that is a digital signature shall comply with all of the following:

1.  Contain a computer-based certificate that identifies the issuing entity and the subscriber, contain the subscriber's public key and be digitally signed by the issuing entity.  A valid subscriber to a digitally signed document shall be listed in the certificate, shall accept the certificate and lawfully holds the private key that corresponds to the public key that is listed in that certificate.  A person who acquires a private key through theft, fraud, deceit, eavesdropping or other unlawful means does not lawfully hold the private key.

2.  Contain a key pair used for verifying a digital signature that has a unique property so that the public key can verify the digital signature that the private key creates.

3.  Be capable of verification by the person having the initial message and the signer's public key as follows:

(a)  The person can accurately determine whether the transformation of the message was created by using the private key that corresponds to the signer's key.

(b)  The person can accurately determine whether the initial message has been altered since the transformation was made the rules adopted pursuant to subsection A of this section.

D.  E.  The following records are not public records and are exempt from public inspection and reproduction pursuant to title 39, chapter 1, article 2:

1.  Records containing information that would disclose or may reasonably lead to the disclosure of any component in the process used to execute or adopt an electronic or digital signature if the disclosure would or may reasonably cause the loss of sole control over the electronic or digital signature from the person using it.

2.  Records that if disclosed would jeopardize or may reasonably lead to jeopardizing the security of a certificate issued in conjunction with a digital signature.

E.  F.   For the purposes of this section, unless the context otherwise requires:

1.  "Asymmetric cryptosystem" means an algorithm or series of algorithms that provide a secure key pair for a digital signature.

2.  1.  "Certificate" means a computer-based record that is contained in a document with a digital signature and that identifies the subscriber, contains the subscriber's public key and is digitally signed by the entity issuing the certificate.

3.  2.  "Digital signature" means a type of electronic signature that transforms a message through the use of an asymmetric cryptosystem.

4.  3.  "Electronic signature":

(a)  Means an electronic or digital method of identification that complies with the requirements of this section and that is executed or adopted by a person with the intent to be bound by or to authenticate a record.

(b)  Includes a digital signature.

5.  4.  "Entity issuing the certificate" means a person who that creates and issues a certificate and notifies the subscriber listed in the certificate of the contents of the certificate.

6.  "Key pair" means a private key and its corresponding public key in an asymmetric cryptosystem.

7.  5.  "Person" means a human being or an organization capable of signing a document, either legally or as a matter of fact.

8.  6.  "Private key" means the key of a key pair that is used to create a digital signature.

9.  7.  "Public key" means the key of a key pair that is used to verify a digital signature.

10.  8.  "Record" means information that is inscribed in a tangible medium or that is stored in an electronic or other medium and that is retrievable in a physically perceivable form.  Record includes electronic records and printed, typewritten and tangible records.

11.  9.  "Subscriber" means a person who that is the subject listed in a certificate, accepts that certificate and holds a private key that corresponds to a public key listed in that certificate.

12.  "Transform" or "transform a message" means to subject data in a message to a mathematical change by electronic means. END_STATUTE

Sec. 2.  Section 28-2065, Arizona Revised Statutes, is amended to read:

START_STATUTE28-2065.  Electronic and digital signatures; documents

A.  The director, in cooperation with a statewide association of franchised new motor vehicle dealers, shall establish a program to accept and use electronic or digital signatures.

B.  In the process of developing the program, the director shall research and develop methods to allow the department, authorized third parties, licensed financial institutions, licensed insurers or any other business or individual as determined by the director to accept, exchange and use electronic or digital signatures for any document or for any transaction prescribed in this chapter and sections 28‑370, 28‑444, 28‑453 and 28‑5111.

C.  The participants shall ensure that adequate security measures are in place to prevent any illegal use of the signatures or other information exchanged pursuant to this section.

D.  The director may determine and require reimbursement from program participants for costs related to computer programming, hardware, development and personnel.  The department shall deposit, pursuant to sections 35‑146 and 35‑147, all monies received pursuant to this section in a separate account of the state highway fund established by section 28‑6991.  Monies in the separate account are continuously appropriated.  The director may transfer monies deposited pursuant to this subsection from the separate account to the operating budget of the department's motor vehicle division for the purpose of reimbursing the department's operating budget for expenditures made by the division pursuant to this section.

E.  This section does not limit the use of electronic and digital signatures used by state agencies, boards or commissions pursuant to section 18‑442 18‑106.

F.  The director may adopt rules necessary to implement this section. END_STATUTE

Sec. 3.  Section 41-121, Arizona Revised Statutes, is amended to read:

START_STATUTE41-121.  Duties

A.  The secretary of state shall:

1.  Receive bills and resolutions from the legislature, and perform such other duties as devolve on the secretary of state by resolution of the two houses or either of them.

2.  Keep a register of and attest the official acts of the governor.

3.  Act as custodian of the great seal of this state.

4.  Affix the great seal, with the secretary of state's attestation, to public instruments to which the official signature of the governor is attached.

5.  File in the secretary of state's office receipts for all books distributed by the secretary of state and direct the county recorder of each county to do the same.

6.  Certify to the governor the names of those persons who have received at any election the highest number of votes for any office, the incumbent of which is commissioned by the governor.

7.  Publish slip laws of each act of the legislature promptly on passage and approval of such act, make such acts available to interested persons for a reasonable fee to compensate for the cost of printing and provide each house of the legislature and the legislative council with a certified copy of each bill or resolution, showing the chapter or resolution number of each, as each is filed in the secretary of state's office.

8.  Keep a fee book of fees and compensation of whatever kind and nature earned, collected or charged by the secretary of state, with the date, the name of the payer and the nature of the service in each case.  The fee book shall be verified annually by the secretary of state's affidavit entered in the fee book.

9.  Perform other duties imposed on the secretary of state by law.

10.  Report to the governor on January 2 each year, and at such other times as provided by law, a detailed account of the secretary of state's official actions taken since the secretary of state's previous report together with a detailed statement of the manner in which all appropriations for the secretary of state's office have been expended.

11.  Transfer all noncurrent or inactive books, records, deeds and other papers otherwise required to be filed with or retained by the secretary of state to the custody of the Arizona state library, archives and public records.

12.  Make available to the public, without charge, title 33, chapters 10 and 11 on the secretary of state's website.

13.  Accept, and approve for use, electronic and digital signatures that comply with section 18‑442, 18‑106 for documents filed with and by all state agencies, boards and commissions.  In consultation with the department of administration and the state treasurer, the secretary of state shall adopt rules pursuant to chapter 6 of this title establishing policies and procedures for the use of electronic and digital signatures by all state agencies, boards and commissions for documents filed with and by all state agencies, boards and commissions.

14.  Meet at least annually with personnel from the federal voting assistance office of the United States department of defense and with county recorders and other county election officials in this state to coordinate the delivery and return of registrations, ballot requests, voted ballots and other election materials to and from absent uniformed and overseas citizens.

B.  The secretary of state may refuse to perform a service or refuse a filing based on a reasonable belief that the service or filing is being requested for an unlawful, illegitimate, false or fraudulent purpose or is being requested or submitted in bad faith or for the purpose of harassing or defrauding a person or entity.  This subsection does not apply to election filings. END_STATUTE

Sec. 4.  Section 41-352, Arizona Revised Statutes, is amended to read:

START_STATUTE41-352.  Applicability of article; electronic signature laws

A.  Any notarial act in which a person by oath or affirmation signs a document may be performed electronically as prescribed by this article if under applicable law that document may be signed with an electronic signature.

B.  Unless otherwise expressly prohibited by law, the following notarial acts, terms and entities have the same legal effect as those prescribed by article 2 of this chapter:

1.  Electronic acknowledgment as acknowledgment.

2.  Electronic oath as oath.

3.  Electronic jurat as jurat.

4.  Electronic affidavit as affidavit.

5.  Electronic notarial act as notarial act.

6.  Electronic notarial certificate token as notarial certificate.

7.  Electronic notary as notary.

C.  An electronic commission is a commission to perform only electronic notary acts and only an electronic notary is authorized to perform electronic notary acts.

D.  Unless otherwise expressly prohibited by law, any electronic notarial act may be performed by either:

1.  An act in the presence of an electronic notary as prescribed by this article.

2.  An electronic notarial service as prescribed by this article for which the person signing appears before an electronic notary and by oath or affirmation acknowledges that any notary service electronic document that is created by the person pursuant to this article has the same legal force and effect as if the person appeared before an electronic notary and by oath or affirmation executed an electronic notarial act.

E.  Section 18‑442 18‑106 applies in conjunction with this article to electronic signatures used by electronic notaries.

F.  This article applies to electronic notarial acts that are performed by electronic notaries who are appointed in this state and applies only to their acts performed in the United States. END_STATUTE

Sec. 5.  Section 44-7011, Arizona Revised Statutes, is amended to read:

START_STATUTE44-7011.  Notarization; acknowledgment

Notwithstanding title 41, chapter 2, article 2, if the law requires a signature or record to be notarized, acknowledged, verified or made under oath, that requirement is satisfied if a notary completes a notarial act on the electronic message or document.  That notarial act on the electronic message or document is complete without the imprint of the notary's seal if all of the following apply:

1.  The electronic message or document is signed pursuant to this chapter or section 18‑442 18‑106 in the presence of a notary.

2.  The notary confirms that the electronic signature on the electronic message or document is verifiably the electronic signature issued to the signer pursuant to this chapter or section 18‑442 18‑106.

3.  The notary electronically signs with an electronic signature that is consistent with this chapter, title 41, chapter 2, article 3 or any other applicable law.

4.  The following information appears electronically within the message electronically signed by the notary:

(a)  The notary's full name and commission number exactly as it appears on the notary's commission.

(b)  The words "electronic notary public", "state of Arizona" and "my commission expires on (date)".

(c)  The address of the notary's principal place of contact exactly as it appears on the notary's commission.

(d)  The notary's e-mail or other electronic address exactly as it appears on the notary's commission. END_STATUTE

Sec. 6.  Section 44-7041, Arizona Revised Statutes, is amended to read:

START_STATUTE44-7041.  Creation; retention; conversion of written records

A.  Each governmental agency shall determine if, and the extent to which, the governmental agency will create and retain electronic records and convert written records to electronic records.  Any governmental agency that is subject to the management, preservation, determination of value and disposition of records requirements prescribed in sections 41‑151.12, 41‑151.13, 41‑151.14, 41‑151.15, 41‑151.16, 41‑151.17, 41‑151.18 and 41‑151.19 and the permanent public records requirements prescribed in section 39‑101 shall comply with those requirements.

B.  State agencies shall comply with the standards adopted by the department of administration pursuant to title 18, chapter 1.

C.  All governmental agencies shall comply with the policies that are established by the secretary of state pursuant to section 18‑442 18‑106 and that apply to the use of electronic signatures. END_STATUTE

Sec. 7.  Section 44-7042, Arizona Revised Statutes, is amended to read:

START_STATUTE44-7042.  Sending and accepting electronic records

A.  Except as otherwise provided in section 44‑7012, subsection E, and this subsection, each governmental agency shall determine if, and the extent to which, the governmental agency will send and accept electronic records and electronic signatures to and from other persons and otherwise create, generate, communicate, store, process, use and rely on electronic records and electronic signatures.  State agencies shall accept electronic records and electronic signatures and shall comply with the appropriate standards and policies adopted or established by the department of administration pursuant to title 18, chapter 1 and the secretary of state pursuant to section 18‑442.

B.  To the extent that a governmental agency uses electronic records and electronic signatures pursuant to subsection A of this section, the governmental agency after giving due consideration to security may specify:

1.  The manner and format in which the electronic records must be created, generated, sent, communicated, received and stored and the systems established for those purposes.

2.  If electronic records must be signed by electronic means, the type of electronic signature required, the manner and format in which the electronic signature must be affixed to the electronic record and the identity of or criteria that must be met by any third party used by a person filing a document to facilitate the process.

3.  Control processes and procedures as appropriate to ensure adequate preservation, disposition, integrity, security, confidentiality and ability to perform audits of electronic records.

4.  Any other required attributes for electronic records that are specified for corresponding nonelectronic records or that are reasonably necessary under the circumstances.

C.  Except as otherwise provided in section 44‑7012, subsection E, this chapter does not require a governmental agency to use or allow the use of electronic records or electronic signatures. END_STATUTE