California 2017-2018 Regular Session

California Assembly Bill AB22 Compare Versions

Version 1 (Old)

Version 2 (New)

Old	New		Differences
1		-	Assembly Bill No. ~~22 CHAPTER 834~~ An act to amend Section 12168.7 of the Government Code, relating to state government. ~~[ Approved by Governor October 15, 2017. Filed with Secretary of State October 15, 2017. ]~~ LEGISLATIVE COUNSEL'S DIGESTAB 22, Bonta. Secretary of State: storing and recording electronic media.Existing law requires the Secretary of State to approve and adopt uniform statewide standards for the purpose of storing and recording permanent and nonpermanent documents in electronic media, as specified, and requires those standards to include a requirement that a trusted system, as defined, be utilized.This bill would specify that a trusted system, for these purposes, includes cloud computing, as defined, that meets specified requirements.Existing law provides that the Department of Technology is responsible for establishing and enforcing information technology plans, policies, and standards and in furtherance thereof, publishing the Statewide Information Management Manual, and for information technology provisions of the State Administrative Manual.This bill would provide that the standards in these manuals apply to a trusted system.Existing law requires the Secretary of State to adopt appropriate standards established by the American National Standards Institute or the Association for Information and Image Management.This bill would delete this reference to the Association for Information and Image Management.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. Section 12168.7 of the Government Code is amended to read:12168.7. (a) The California Legislature hereby recognizes the need to adopt uniform statewide standards for the purpose of storing and recording permanent documents in electronic media.(b) In order to ensure that uniform statewide standards remain current and relevant, the Secretary of State shall approve and adopt appropriate standards established by the American National Standards Institute.(c) The standards specified in subdivision (b) shall include a requirement that a trusted system be utilized. For this purpose and for purposes of Sections 25105, 26205, 26205.1, 26205.5, 26907, 27001, 27322.2, 34090.5, and 60203, Section 102235 of the Health and Safety Code, and Section 10851 of the Welfare and Institutions Code, trusted system means a combination of technologies, policies, and procedures for which there is no plausible scenario in which a document retrieved from or reproduced by the system could differ substantially from the document that is originally stored.(d) A cloud computing storage service that complies with International Organization for Standardization ISO/IEC 27001:2013, or other applicable industry-recognized standard relating to security techniques and information security management, and provides administrative users with controls to prevent stored records from being overwritten, deleted, or altered shall be considered a trusted system.(e) A trusted system shall comply with applicable standards articulated in the State Administrative Manual and the Statewide Information Management Manual. This requirement applies to state agencies and does not apply to local government entities.(f) For purposes of this section cloud computing is defined by the National Institute of Standards and Technology Special Publication 800-145 or a successor publication, and includes the service and deployment models referenced therein.(g) State officials shall ensure that microfilming, electronic data imaging, and photographic reproduction are done in compliance with the minimum standards or guidelines, or both, as recommended by the American National Standards Institute for recording of permanent records.(h) Nothing in this section shall prohibit a local government entity from adopting applicable standards articulated in the State Administrative Manual and the Statewide Information Management Manual for purposes of utilizing a trusted system as defined in subdivision (c).
	1	+	Enrolled September 19, 2017 Passed IN Senate September 12, 2017 Passed IN Assembly September 15, 2017 Amended IN Senate September 08, 2017 Amended IN Senate July 17, 2017 Amended IN Senate July 03, 2017 Amended IN Senate June 05, 2017 Amended IN Assembly April 17, 2017 CALIFORNIA LEGISLATURE 20172018 REGULAR SESSION Assembly Bill No. 22Introduced by Assembly Member BontaDecember 05, 2016 An act to amend Section 12168.7 of the Government Code, relating to state government.LEGISLATIVE COUNSEL'S DIGESTAB 22, Bonta. Secretary of State: storing and recording electronic media.Existing law requires the Secretary of State to approve and adopt uniform statewide standards for the purpose of storing and recording permanent and nonpermanent documents in electronic media, as specified, and requires those standards to include a requirement that a trusted system, as defined, be utilized.This bill would specify that a trusted system, for these purposes, includes cloud computing, as defined, that meets specified requirements.Existing law provides that the Department of Technology is responsible for establishing and enforcing information technology plans, policies, and standards and in furtherance thereof, publishing the Statewide Information Management Manual, and for information technology provisions of the State Administrative Manual.This bill would provide that the standards in these manuals apply to a trusted system.Existing law requires the Secretary of State to adopt appropriate standards established by the American National Standards Institute or the Association for Information and Image Management.This bill would delete this reference to the Association for Information and Image Management.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. Section 12168.7 of the Government Code is amended to read:12168.7. (a) The California Legislature hereby recognizes the need to adopt uniform statewide standards for the purpose of storing and recording permanent documents in electronic media.(b) In order to ensure that uniform statewide standards remain current and relevant, the Secretary of State shall approve and adopt appropriate standards established by the American National Standards Institute.(c) The standards specified in subdivision (b) shall include a requirement that a trusted system be utilized. For this purpose and for purposes of Sections 25105, 26205, 26205.1, 26205.5, 26907, 27001, 27322.2, 34090.5, and 60203, Section 102235 of the Health and Safety Code, and Section 10851 of the Welfare and Institutions Code, trusted system means a combination of technologies, policies, and procedures for which there is no plausible scenario in which a document retrieved from or reproduced by the system could differ substantially from the document that is originally stored.(d) A cloud computing storage service that complies with International Organization for Standardization ISO/IEC 27001:2013, or other applicable industry-recognized standard relating to security techniques and information security management, and provides administrative users with controls to prevent stored records from being overwritten, deleted, or altered shall be considered a trusted system.(e) A trusted system shall comply with applicable standards articulated in the State Administrative Manual and the Statewide Information Management Manual. This requirement applies to state agencies and does not apply to local government entities.(f) For purposes of this section cloud computing is defined by the National Institute of Standards and Technology Special Publication 800-145 or a successor publication, and includes the service and deployment models referenced therein.(g) State officials shall ensure that microfilming, electronic data imaging, and photographic reproduction are done in compliance with the minimum standards or guidelines, or both, as recommended by the American National Standards Institute for recording of permanent records.(h) Nothing in this section shall prohibit a local government entity from adopting applicable standards articulated in the State Administrative Manual and the Statewide Information Management Manual for purposes of utilizing a trusted system as defined in subdivision (c).
2	2
3		-	Assembly Bill No. 22 CHAPTER 834 An act to amend Section 12168.7 of the Government Code, relating to state government. [ Approved by Governor October 15, 2017. Filed with Secretary of State October 15, 2017. ] LEGISLATIVE COUNSEL'S DIGESTAB 22, Bonta. Secretary of State: storing and recording electronic media.Existing law requires the Secretary of State to approve and adopt uniform statewide standards for the purpose of storing and recording permanent and nonpermanent documents in electronic media, as specified, and requires those standards to include a requirement that a trusted system, as defined, be utilized.This bill would specify that a trusted system, for these purposes, includes cloud computing, as defined, that meets specified requirements.Existing law provides that the Department of Technology is responsible for establishing and enforcing information technology plans, policies, and standards and in furtherance thereof, publishing the Statewide Information Management Manual, and for information technology provisions of the State Administrative Manual.This bill would provide that the standards in these manuals apply to a trusted system.Existing law requires the Secretary of State to adopt appropriate standards established by the American National Standards Institute or the Association for Information and Image Management.This bill would delete this reference to the Association for Information and Image Management.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NO
	3	+	Enrolled September 19, 2017 Passed IN Senate September 12, 2017 Passed IN Assembly September 15, 2017 Amended IN Senate September 08, 2017 Amended IN Senate July 17, 2017 Amended IN Senate July 03, 2017 Amended IN Senate June 05, 2017 Amended IN Assembly April 17, 2017 CALIFORNIA LEGISLATURE 20172018 REGULAR SESSION Assembly Bill No. 22Introduced by Assembly Member BontaDecember 05, 2016 An act to amend Section 12168.7 of the Government Code, relating to state government.LEGISLATIVE COUNSEL'S DIGESTAB 22, Bonta. Secretary of State: storing and recording electronic media.Existing law requires the Secretary of State to approve and adopt uniform statewide standards for the purpose of storing and recording permanent and nonpermanent documents in electronic media, as specified, and requires those standards to include a requirement that a trusted system, as defined, be utilized.This bill would specify that a trusted system, for these purposes, includes cloud computing, as defined, that meets specified requirements.Existing law provides that the Department of Technology is responsible for establishing and enforcing information technology plans, policies, and standards and in furtherance thereof, publishing the Statewide Information Management Manual, and for information technology provisions of the State Administrative Manual.This bill would provide that the standards in these manuals apply to a trusted system.Existing law requires the Secretary of State to adopt appropriate standards established by the American National Standards Institute or the Association for Information and Image Management.This bill would delete this reference to the Association for Information and Image Management.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NO
	4	+
	5	+	Enrolled September 19, 2017 Passed IN Senate September 12, 2017 Passed IN Assembly September 15, 2017 Amended IN Senate September 08, 2017 Amended IN Senate July 17, 2017 Amended IN Senate July 03, 2017 Amended IN Senate June 05, 2017 Amended IN Assembly April 17, 2017
	6	+
	7	+	Enrolled September 19, 2017
	8	+	Passed IN Senate September 12, 2017
	9	+	Passed IN Assembly September 15, 2017
	10	+	Amended IN Senate September 08, 2017
	11	+	Amended IN Senate July 17, 2017
	12	+	Amended IN Senate July 03, 2017
	13	+	Amended IN Senate June 05, 2017
	14	+	Amended IN Assembly April 17, 2017
	15	+
	16	+	CALIFORNIA LEGISLATURE 20172018 REGULAR SESSION
4	17
5	18		Assembly Bill No. 22
6		-	CHAPTER 834
	19	+
	20	+	Introduced by Assembly Member BontaDecember 05, 2016
	21	+
	22	+	Introduced by Assembly Member Bonta
	23	+	December 05, 2016
7	24
8	25		An act to amend Section 12168.7 of the Government Code, relating to state government.
9		-
10		-	[ Approved by Governor October 15, 2017. Filed with Secretary of State October 15, 2017. ]
11	26
12	27		LEGISLATIVE COUNSEL'S DIGEST
13	28
14	29		## LEGISLATIVE COUNSEL'S DIGEST
15	30
16	31		AB 22, Bonta. Secretary of State: storing and recording electronic media.
17	32
18	33		Existing law requires the Secretary of State to approve and adopt uniform statewide standards for the purpose of storing and recording permanent and nonpermanent documents in electronic media, as specified, and requires those standards to include a requirement that a trusted system, as defined, be utilized.This bill would specify that a trusted system, for these purposes, includes cloud computing, as defined, that meets specified requirements.Existing law provides that the Department of Technology is responsible for establishing and enforcing information technology plans, policies, and standards and in furtherance thereof, publishing the Statewide Information Management Manual, and for information technology provisions of the State Administrative Manual.This bill would provide that the standards in these manuals apply to a trusted system.Existing law requires the Secretary of State to adopt appropriate standards established by the American National Standards Institute or the Association for Information and Image Management.This bill would delete this reference to the Association for Information and Image Management.
19	34
20	35		Existing law requires the Secretary of State to approve and adopt uniform statewide standards for the purpose of storing and recording permanent and nonpermanent documents in electronic media, as specified, and requires those standards to include a requirement that a trusted system, as defined, be utilized.
21	36
22	37		This bill would specify that a trusted system, for these purposes, includes cloud computing, as defined, that meets specified requirements.
23	38
24	39		Existing law provides that the Department of Technology is responsible for establishing and enforcing information technology plans, policies, and standards and in furtherance thereof, publishing the Statewide Information Management Manual, and for information technology provisions of the State Administrative Manual.
25	40
26	41		This bill would provide that the standards in these manuals apply to a trusted system.
27	42
28	43		Existing law requires the Secretary of State to adopt appropriate standards established by the American National Standards Institute or the Association for Information and Image Management.
29	44
30	45		This bill would delete this reference to the Association for Information and Image Management.
31	46
32	47		## Digest Key
33	48
34	49		## Bill Text
35	50
36	51		The people of the State of California do enact as follows:SECTION 1. Section 12168.7 of the Government Code is amended to read:12168.7. (a) The California Legislature hereby recognizes the need to adopt uniform statewide standards for the purpose of storing and recording permanent documents in electronic media.(b) In order to ensure that uniform statewide standards remain current and relevant, the Secretary of State shall approve and adopt appropriate standards established by the American National Standards Institute.(c) The standards specified in subdivision (b) shall include a requirement that a trusted system be utilized. For this purpose and for purposes of Sections 25105, 26205, 26205.1, 26205.5, 26907, 27001, 27322.2, 34090.5, and 60203, Section 102235 of the Health and Safety Code, and Section 10851 of the Welfare and Institutions Code, trusted system means a combination of technologies, policies, and procedures for which there is no plausible scenario in which a document retrieved from or reproduced by the system could differ substantially from the document that is originally stored.(d) A cloud computing storage service that complies with International Organization for Standardization ISO/IEC 27001:2013, or other applicable industry-recognized standard relating to security techniques and information security management, and provides administrative users with controls to prevent stored records from being overwritten, deleted, or altered shall be considered a trusted system.(e) A trusted system shall comply with applicable standards articulated in the State Administrative Manual and the Statewide Information Management Manual. This requirement applies to state agencies and does not apply to local government entities.(f) For purposes of this section cloud computing is defined by the National Institute of Standards and Technology Special Publication 800-145 or a successor publication, and includes the service and deployment models referenced therein.(g) State officials shall ensure that microfilming, electronic data imaging, and photographic reproduction are done in compliance with the minimum standards or guidelines, or both, as recommended by the American National Standards Institute for recording of permanent records.(h) Nothing in this section shall prohibit a local government entity from adopting applicable standards articulated in the State Administrative Manual and the Statewide Information Management Manual for purposes of utilizing a trusted system as defined in subdivision (c).
37	52
38	53		The people of the State of California do enact as follows:
39	54
40	55		## The people of the State of California do enact as follows:
41	56
42	57		SECTION 1. Section 12168.7 of the Government Code is amended to read:12168.7. (a) The California Legislature hereby recognizes the need to adopt uniform statewide standards for the purpose of storing and recording permanent documents in electronic media.(b) In order to ensure that uniform statewide standards remain current and relevant, the Secretary of State shall approve and adopt appropriate standards established by the American National Standards Institute.(c) The standards specified in subdivision (b) shall include a requirement that a trusted system be utilized. For this purpose and for purposes of Sections 25105, 26205, 26205.1, 26205.5, 26907, 27001, 27322.2, 34090.5, and 60203, Section 102235 of the Health and Safety Code, and Section 10851 of the Welfare and Institutions Code, trusted system means a combination of technologies, policies, and procedures for which there is no plausible scenario in which a document retrieved from or reproduced by the system could differ substantially from the document that is originally stored.(d) A cloud computing storage service that complies with International Organization for Standardization ISO/IEC 27001:2013, or other applicable industry-recognized standard relating to security techniques and information security management, and provides administrative users with controls to prevent stored records from being overwritten, deleted, or altered shall be considered a trusted system.(e) A trusted system shall comply with applicable standards articulated in the State Administrative Manual and the Statewide Information Management Manual. This requirement applies to state agencies and does not apply to local government entities.(f) For purposes of this section cloud computing is defined by the National Institute of Standards and Technology Special Publication 800-145 or a successor publication, and includes the service and deployment models referenced therein.(g) State officials shall ensure that microfilming, electronic data imaging, and photographic reproduction are done in compliance with the minimum standards or guidelines, or both, as recommended by the American National Standards Institute for recording of permanent records.(h) Nothing in this section shall prohibit a local government entity from adopting applicable standards articulated in the State Administrative Manual and the Statewide Information Management Manual for purposes of utilizing a trusted system as defined in subdivision (c).
43	58
44	59		SECTION 1. Section 12168.7 of the Government Code is amended to read:
45	60
46	61		### SECTION 1.
47	62
48	63		12168.7. (a) The California Legislature hereby recognizes the need to adopt uniform statewide standards for the purpose of storing and recording permanent documents in electronic media.(b) In order to ensure that uniform statewide standards remain current and relevant, the Secretary of State shall approve and adopt appropriate standards established by the American National Standards Institute.(c) The standards specified in subdivision (b) shall include a requirement that a trusted system be utilized. For this purpose and for purposes of Sections 25105, 26205, 26205.1, 26205.5, 26907, 27001, 27322.2, 34090.5, and 60203, Section 102235 of the Health and Safety Code, and Section 10851 of the Welfare and Institutions Code, trusted system means a combination of technologies, policies, and procedures for which there is no plausible scenario in which a document retrieved from or reproduced by the system could differ substantially from the document that is originally stored.(d) A cloud computing storage service that complies with International Organization for Standardization ISO/IEC 27001:2013, or other applicable industry-recognized standard relating to security techniques and information security management, and provides administrative users with controls to prevent stored records from being overwritten, deleted, or altered shall be considered a trusted system.(e) A trusted system shall comply with applicable standards articulated in the State Administrative Manual and the Statewide Information Management Manual. This requirement applies to state agencies and does not apply to local government entities.(f) For purposes of this section cloud computing is defined by the National Institute of Standards and Technology Special Publication 800-145 or a successor publication, and includes the service and deployment models referenced therein.(g) State officials shall ensure that microfilming, electronic data imaging, and photographic reproduction are done in compliance with the minimum standards or guidelines, or both, as recommended by the American National Standards Institute for recording of permanent records.(h) Nothing in this section shall prohibit a local government entity from adopting applicable standards articulated in the State Administrative Manual and the Statewide Information Management Manual for purposes of utilizing a trusted system as defined in subdivision (c).
49	64
50	65		12168.7. (a) The California Legislature hereby recognizes the need to adopt uniform statewide standards for the purpose of storing and recording permanent documents in electronic media.(b) In order to ensure that uniform statewide standards remain current and relevant, the Secretary of State shall approve and adopt appropriate standards established by the American National Standards Institute.(c) The standards specified in subdivision (b) shall include a requirement that a trusted system be utilized. For this purpose and for purposes of Sections 25105, 26205, 26205.1, 26205.5, 26907, 27001, 27322.2, 34090.5, and 60203, Section 102235 of the Health and Safety Code, and Section 10851 of the Welfare and Institutions Code, trusted system means a combination of technologies, policies, and procedures for which there is no plausible scenario in which a document retrieved from or reproduced by the system could differ substantially from the document that is originally stored.(d) A cloud computing storage service that complies with International Organization for Standardization ISO/IEC 27001:2013, or other applicable industry-recognized standard relating to security techniques and information security management, and provides administrative users with controls to prevent stored records from being overwritten, deleted, or altered shall be considered a trusted system.(e) A trusted system shall comply with applicable standards articulated in the State Administrative Manual and the Statewide Information Management Manual. This requirement applies to state agencies and does not apply to local government entities.(f) For purposes of this section cloud computing is defined by the National Institute of Standards and Technology Special Publication 800-145 or a successor publication, and includes the service and deployment models referenced therein.(g) State officials shall ensure that microfilming, electronic data imaging, and photographic reproduction are done in compliance with the minimum standards or guidelines, or both, as recommended by the American National Standards Institute for recording of permanent records.(h) Nothing in this section shall prohibit a local government entity from adopting applicable standards articulated in the State Administrative Manual and the Statewide Information Management Manual for purposes of utilizing a trusted system as defined in subdivision (c).
51	66
52	67		12168.7. (a) The California Legislature hereby recognizes the need to adopt uniform statewide standards for the purpose of storing and recording permanent documents in electronic media.(b) In order to ensure that uniform statewide standards remain current and relevant, the Secretary of State shall approve and adopt appropriate standards established by the American National Standards Institute.(c) The standards specified in subdivision (b) shall include a requirement that a trusted system be utilized. For this purpose and for purposes of Sections 25105, 26205, 26205.1, 26205.5, 26907, 27001, 27322.2, 34090.5, and 60203, Section 102235 of the Health and Safety Code, and Section 10851 of the Welfare and Institutions Code, trusted system means a combination of technologies, policies, and procedures for which there is no plausible scenario in which a document retrieved from or reproduced by the system could differ substantially from the document that is originally stored.(d) A cloud computing storage service that complies with International Organization for Standardization ISO/IEC 27001:2013, or other applicable industry-recognized standard relating to security techniques and information security management, and provides administrative users with controls to prevent stored records from being overwritten, deleted, or altered shall be considered a trusted system.(e) A trusted system shall comply with applicable standards articulated in the State Administrative Manual and the Statewide Information Management Manual. This requirement applies to state agencies and does not apply to local government entities.(f) For purposes of this section cloud computing is defined by the National Institute of Standards and Technology Special Publication 800-145 or a successor publication, and includes the service and deployment models referenced therein.(g) State officials shall ensure that microfilming, electronic data imaging, and photographic reproduction are done in compliance with the minimum standards or guidelines, or both, as recommended by the American National Standards Institute for recording of permanent records.(h) Nothing in this section shall prohibit a local government entity from adopting applicable standards articulated in the State Administrative Manual and the Statewide Information Management Manual for purposes of utilizing a trusted system as defined in subdivision (c).
53	68
54	69
55	70
56	71		12168.7. (a) The California Legislature hereby recognizes the need to adopt uniform statewide standards for the purpose of storing and recording permanent documents in electronic media.
57	72
58	73		(b) In order to ensure that uniform statewide standards remain current and relevant, the Secretary of State shall approve and adopt appropriate standards established by the American National Standards Institute.
59	74
60	75		(c) The standards specified in subdivision (b) shall include a requirement that a trusted system be utilized. For this purpose and for purposes of Sections 25105, 26205, 26205.1, 26205.5, 26907, 27001, 27322.2, 34090.5, and 60203, Section 102235 of the Health and Safety Code, and Section 10851 of the Welfare and Institutions Code, trusted system means a combination of technologies, policies, and procedures for which there is no plausible scenario in which a document retrieved from or reproduced by the system could differ substantially from the document that is originally stored.
61	76
62	77		(d) A cloud computing storage service that complies with International Organization for Standardization ISO/IEC 27001:2013, or other applicable industry-recognized standard relating to security techniques and information security management, and provides administrative users with controls to prevent stored records from being overwritten, deleted, or altered shall be considered a trusted system.
63	78
64	79		(e) A trusted system shall comply with applicable standards articulated in the State Administrative Manual and the Statewide Information Management Manual. This requirement applies to state agencies and does not apply to local government entities.
65	80
66	81		(f) For purposes of this section cloud computing is defined by the National Institute of Standards and Technology Special Publication 800-145 or a successor publication, and includes the service and deployment models referenced therein.
67	82
68	83		(g) State officials shall ensure that microfilming, electronic data imaging, and photographic reproduction are done in compliance with the minimum standards or guidelines, or both, as recommended by the American National Standards Institute for recording of permanent records.
69	84
70	85		(h) Nothing in this section shall prohibit a local government entity from adopting applicable standards articulated in the State Administrative Manual and the Statewide Information Management Manual for purposes of utilizing a trusted system as defined in subdivision (c).