Rep. Norm Thurston — Voting Record

Bill

Number

H.B. 319 First Substitute (2017GS)

Sponsor

Rep. Spendlove, R.

Final action

Governor Signed 3/22/2017

Outcome

Became law — signed by Gov. Gary R. Herbert

Summary

What it does

• This bill:
• requires the Department of Technology Services to assess each executive branch agency's information security technology; and
• requires the Department of Technology Services to develop recommendations to address the results of the assessment and make recommendations to the Legislature.

Every vote on this bill

Bill text

DATA SECURITY MANAGEMENT
GENERAL SESSION
STATE OF UTAH
Chief Sponsor: Robert M. Spendlove
Senate Sponsor: 
D. Gregg Buxton
LONG TITLE
General Description:
This bill amends provisions related to executive branch agency information security
technology.
Highlighted Provisions:
This bill:
▸ requires the Department of Technology Services to assess each executive branch
agency's information security technology; and
▸ requires the Department of Technology Services to develop recommendations to
address the results of the assessment and make recommendations to the Legislature.
Money Appropriated in this Bill:
None
Other Special Clauses:
None
Utah Code Sections Affected:
ENACTS:
63F-1-901
, Utah Code Annotated 1953
63F-1-902
, Utah Code Annotated 1953
Be it enacted by the Legislature of the state of Utah:
Section 1. Section 
63F-1-901
 is enacted to read:
Part 9. Executive Branch Agency Data Security
 63F-1-901.
Title.
This part is known as "Executive Branch Agency Data Security."
Section 2. Section 
63F-1-902
 is enacted to read:
 63F-1-902.
Executive branch agencies -- Data security review -- Report to
Legislature.
(1) As used in this section:
(a) "Restricted data" means data that, if disclosed, altered, or destroyed, would cause a
significant harm to the state or the state's data partners.
(b) "Restricted data" includes data protected by a state regulation or by a confidentiality
agreement.
(2) On or before December 31, 2017, the department shall assess each executive
branch agency with restricted data to determine if the executive branch agency's information
security technology requires the use of digital rights management technology to continuously
monitor documents stored by the department.
(3) Before April 18, 2018, the department shall:
(a) develop recommendations to address the findings of the assessment described in
Subsection (2); and
(b) report the recommendations described in Subsection (3)(a) to the Public Utilities,
Energy, and Technology Interim Committee.