Ariz. Admin. Code § 2-12-1305

Current through Register Vol. 30, No. 50, December 13, 2024

Section R2-12-1305 - Standards for Identity Verification

A. If a notary public does not have satisfactory evidence of the identity of a remotely located individual under subsection (D), the notary public must reasonably verify the individual's identity through a multi-factor authentication procedure as provided in this section and in subsections (B) and (C). The procedure must analyze the individual's identification credential that is the subject of remote presentation against trusted third-person data sources, bind the individual's identity to the individual following successful dynamic knowledge-based authentication assessment, and permit the notary public to visually compare the identification credential and the individual. Credential analysis and identity proofing must be performed by a reputable third party who has provided evidence to the notary public of the ability to satisfy the requirements of this Article.

B. Credential analysis must use public or private data sources to confirm the validity of the identification credential that is the subject of remote presentation by a remotely located individual and shall, at a minimum:

1. Use automated software processes to aid the notary public in verifying the identity of each remotely located individual;

2. Require the identification credential to pass an authenticity test, consistent with sound commercial practices, that uses appropriate technologies to confirm the integrity of visual, physical, or cryptographic security features and to confirm that the identification credential is not fraudulent or inappropriately modified;

3. Use information held or published by the issuing source or an authoritative source, as available and consistent with sound commercial practices, to confirm the validity of personal details and identification credential details; and

4. Enable the notary public to visually compare for consistency the information and photograph on the identification credential and the remotely located individual as viewed by the notary public in real time through communication technology.

C. Identity proofing must be performed by means of a dynamic knowledge-based authentication assessment. The assessment is successful if it meets the following requirements:

1. The remotely located individual must answer a quiz consisting of a minimum of five questions related to the individual's personal history or identity formulated from public or private data sources;

2. Each question must have a minimum of five possible answer choices;

3. At least 80% of the questions must be answered correctly;

4. All questions must be answered within two minutes;

5. If the remotely located individual fails the first attempt, the individual may retake the quiz one time within 24 hours;

6. During a retake of the quiz, a minimum of 40% of the prior questions must be replaced;

7. If the remotely located individual fails the second attempt, the individual is not allowed to retry with the same online notary public within 24 hours of the second failed attempt; and

8. The notary public must not be able to see or record the questions or answers.

D. A notary public has satisfactory evidence of the identity of a remotely located individual if:

1. The notary public has personal knowledge of the identity of the individual; or

2. The individual is identified by oath or affirmation of a credible witness in accordance with the following requirements:

a. To be a credible witness, the witness must have personal knowledge of the remotely located individual.

b. The notary public must have personal knowledge of the credible witness or verify the identity of the credible witness by multi-factor authentication in accordance with subsections (A), (B) and (C).

c. A credible witness may be outside the physical presence of the notary public or remotely located individual if the notary public, credible witness, and remotely located individual can communicate by using communication technology.

Ariz. Admin. Code § R2-12-1305

Adopted by final rulemaking at 26 A.A.R. 537, effective 3/19/2020.