California 2019-2020 Regular Session

California Assembly Bill AB2320 Compare Versions

Only one version of the bill is available at this time.

Old	New	Differences
1	1	CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION Assembly Bill No. 2320Introduced by Assembly Member ChauFebruary 14, 2020 An act to add Chapter 2.3 (commencing with Section 10600) to Part 2 of Division 2 of the Public Contract Code, relating to state contracts. LEGISLATIVE COUNSEL'S DIGESTAB 2320, as introduced, Chau. Personal information: contractors: cyber insurance.Existing law, the Information Practices Act of 1977 (IPA), requires an agency, as defined, to maintain and disclose personal information in accordance with specified conditions and limitations to ensure the security and confidentiality of the personal information.Existing law regulates contracts for goods and services entered into by state agencies. Specified violations of provisions in a state contract is a crime.This bill would require a contract with a contractor doing business with a state agency to require that the contractor maintain cyber insurance if the contractor receives or has access to records containing personal information protected under the IPA.By expanding the scope of existing crimes, this bill would impose a state-mandated local program.The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.This bill would provide that no reimbursement is required by this act for a specified reason.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: YES Bill TextThe people of the State of California do enact as follows:SECTION 1. Chapter 2.3 (commencing with Section 10600) is added to Part 2 of Division 2 of the Public Contract Code, to read: CHAPTER 2.3. Contractors: Cyber Insurance10600. For purposes of this chapter, the following definitions apply:(a) Agency has the same meaning as in subdivision (b) of Section 1798.3 of the Civil Code.(b) Contractor means an individual, business, or other entity doing business with an agency.(c) Personal information has the same meaning as in subdivision (a) of Section 1798.3 of the Civil Code.(d) Record has the same meaning as in subdivision (g) of Section 1798.3 of the Civil Code.10601. If the contract contemplates that, in the course of doing business with an agency, a contractor will receive or have access to records containing personal information protected under the Information Practices Act of 1977 (Title 1.8 (commencing with Section 1798) of Part 4 of Division 3 of the Civil Code), the contract shall require the contractor to carry cyber insurance sufficient to cover all losses resulting from potential unlawful access to or disclosure of personal information, in an amount determined by the contracting agency.SEC. 2. No reimbursement is required by this act pursuant to Section 6 of Article XIIIB of the California Constitution because the only costs that may be incurred by a local agency or school district will be incurred because this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIIIB of the California Constitution.
2	2
3	3	CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION Assembly Bill No. 2320Introduced by Assembly Member ChauFebruary 14, 2020 An act to add Chapter 2.3 (commencing with Section 10600) to Part 2 of Division 2 of the Public Contract Code, relating to state contracts. LEGISLATIVE COUNSEL'S DIGESTAB 2320, as introduced, Chau. Personal information: contractors: cyber insurance.Existing law, the Information Practices Act of 1977 (IPA), requires an agency, as defined, to maintain and disclose personal information in accordance with specified conditions and limitations to ensure the security and confidentiality of the personal information.Existing law regulates contracts for goods and services entered into by state agencies. Specified violations of provisions in a state contract is a crime.This bill would require a contract with a contractor doing business with a state agency to require that the contractor maintain cyber insurance if the contractor receives or has access to records containing personal information protected under the IPA.By expanding the scope of existing crimes, this bill would impose a state-mandated local program.The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.This bill would provide that no reimbursement is required by this act for a specified reason.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: YES
4	4
5	5
6	6
7	7
8	8
9	9	CALIFORNIA LEGISLATURE 20192020 REGULAR SESSION
10	10
11	11	Assembly Bill
12	12
13	13	No. 2320
14	14
15	15	Introduced by Assembly Member ChauFebruary 14, 2020
16	16
17	17	Introduced by Assembly Member Chau
18	18	February 14, 2020
19	19
20	20	An act to add Chapter 2.3 (commencing with Section 10600) to Part 2 of Division 2 of the Public Contract Code, relating to state contracts.
21	21
22	22	LEGISLATIVE COUNSEL'S DIGEST
23	23
24	24	## LEGISLATIVE COUNSEL'S DIGEST
25	25
26	26	AB 2320, as introduced, Chau. Personal information: contractors: cyber insurance.
27	27
28	28	Existing law, the Information Practices Act of 1977 (IPA), requires an agency, as defined, to maintain and disclose personal information in accordance with specified conditions and limitations to ensure the security and confidentiality of the personal information.Existing law regulates contracts for goods and services entered into by state agencies. Specified violations of provisions in a state contract is a crime.This bill would require a contract with a contractor doing business with a state agency to require that the contractor maintain cyber insurance if the contractor receives or has access to records containing personal information protected under the IPA.By expanding the scope of existing crimes, this bill would impose a state-mandated local program.The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.This bill would provide that no reimbursement is required by this act for a specified reason.
29	29
30	30	Existing law, the Information Practices Act of 1977 (IPA), requires an agency, as defined, to maintain and disclose personal information in accordance with specified conditions and limitations to ensure the security and confidentiality of the personal information.
31	31
32	32	Existing law regulates contracts for goods and services entered into by state agencies. Specified violations of provisions in a state contract is a crime.
33	33
34	34	This bill would require a contract with a contractor doing business with a state agency to require that the contractor maintain cyber insurance if the contractor receives or has access to records containing personal information protected under the IPA.
35	35
36	36	By expanding the scope of existing crimes, this bill would impose a state-mandated local program.
37	37
38	38	The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.
39	39
40	40	This bill would provide that no reimbursement is required by this act for a specified reason.
41	41
42	42	## Digest Key
43	43
44	44	## Bill Text
45	45
46	46	The people of the State of California do enact as follows:SECTION 1. Chapter 2.3 (commencing with Section 10600) is added to Part 2 of Division 2 of the Public Contract Code, to read: CHAPTER 2.3. Contractors: Cyber Insurance10600. For purposes of this chapter, the following definitions apply:(a) Agency has the same meaning as in subdivision (b) of Section 1798.3 of the Civil Code.(b) Contractor means an individual, business, or other entity doing business with an agency.(c) Personal information has the same meaning as in subdivision (a) of Section 1798.3 of the Civil Code.(d) Record has the same meaning as in subdivision (g) of Section 1798.3 of the Civil Code.10601. If the contract contemplates that, in the course of doing business with an agency, a contractor will receive or have access to records containing personal information protected under the Information Practices Act of 1977 (Title 1.8 (commencing with Section 1798) of Part 4 of Division 3 of the Civil Code), the contract shall require the contractor to carry cyber insurance sufficient to cover all losses resulting from potential unlawful access to or disclosure of personal information, in an amount determined by the contracting agency.SEC. 2. No reimbursement is required by this act pursuant to Section 6 of Article XIIIB of the California Constitution because the only costs that may be incurred by a local agency or school district will be incurred because this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIIIB of the California Constitution.
47	47
48	48	The people of the State of California do enact as follows:
49	49
50	50	## The people of the State of California do enact as follows:
51	51
52	52	SECTION 1. Chapter 2.3 (commencing with Section 10600) is added to Part 2 of Division 2 of the Public Contract Code, to read: CHAPTER 2.3. Contractors: Cyber Insurance10600. For purposes of this chapter, the following definitions apply:(a) Agency has the same meaning as in subdivision (b) of Section 1798.3 of the Civil Code.(b) Contractor means an individual, business, or other entity doing business with an agency.(c) Personal information has the same meaning as in subdivision (a) of Section 1798.3 of the Civil Code.(d) Record has the same meaning as in subdivision (g) of Section 1798.3 of the Civil Code.10601. If the contract contemplates that, in the course of doing business with an agency, a contractor will receive or have access to records containing personal information protected under the Information Practices Act of 1977 (Title 1.8 (commencing with Section 1798) of Part 4 of Division 3 of the Civil Code), the contract shall require the contractor to carry cyber insurance sufficient to cover all losses resulting from potential unlawful access to or disclosure of personal information, in an amount determined by the contracting agency.
53	53
54	54	SECTION 1. Chapter 2.3 (commencing with Section 10600) is added to Part 2 of Division 2 of the Public Contract Code, to read:
55	55
56	56	### SECTION 1.
57	57
58	58	CHAPTER 2.3. Contractors: Cyber Insurance10600. For purposes of this chapter, the following definitions apply:(a) Agency has the same meaning as in subdivision (b) of Section 1798.3 of the Civil Code.(b) Contractor means an individual, business, or other entity doing business with an agency.(c) Personal information has the same meaning as in subdivision (a) of Section 1798.3 of the Civil Code.(d) Record has the same meaning as in subdivision (g) of Section 1798.3 of the Civil Code.10601. If the contract contemplates that, in the course of doing business with an agency, a contractor will receive or have access to records containing personal information protected under the Information Practices Act of 1977 (Title 1.8 (commencing with Section 1798) of Part 4 of Division 3 of the Civil Code), the contract shall require the contractor to carry cyber insurance sufficient to cover all losses resulting from potential unlawful access to or disclosure of personal information, in an amount determined by the contracting agency.
59	59
60	60	CHAPTER 2.3. Contractors: Cyber Insurance10600. For purposes of this chapter, the following definitions apply:(a) Agency has the same meaning as in subdivision (b) of Section 1798.3 of the Civil Code.(b) Contractor means an individual, business, or other entity doing business with an agency.(c) Personal information has the same meaning as in subdivision (a) of Section 1798.3 of the Civil Code.(d) Record has the same meaning as in subdivision (g) of Section 1798.3 of the Civil Code.10601. If the contract contemplates that, in the course of doing business with an agency, a contractor will receive or have access to records containing personal information protected under the Information Practices Act of 1977 (Title 1.8 (commencing with Section 1798) of Part 4 of Division 3 of the Civil Code), the contract shall require the contractor to carry cyber insurance sufficient to cover all losses resulting from potential unlawful access to or disclosure of personal information, in an amount determined by the contracting agency.
61	61
62	62	CHAPTER 2.3. Contractors: Cyber Insurance
63	63
64	64	CHAPTER 2.3. Contractors: Cyber Insurance
65	65
66	66	10600. For purposes of this chapter, the following definitions apply:(a) Agency has the same meaning as in subdivision (b) of Section 1798.3 of the Civil Code.(b) Contractor means an individual, business, or other entity doing business with an agency.(c) Personal information has the same meaning as in subdivision (a) of Section 1798.3 of the Civil Code.(d) Record has the same meaning as in subdivision (g) of Section 1798.3 of the Civil Code.
67	67
68	68
69	69
70	70	10600. For purposes of this chapter, the following definitions apply:
71	71
72	72	(a) Agency has the same meaning as in subdivision (b) of Section 1798.3 of the Civil Code.
73	73
74	74	(b) Contractor means an individual, business, or other entity doing business with an agency.
75	75
76	76	(c) Personal information has the same meaning as in subdivision (a) of Section 1798.3 of the Civil Code.
77	77
78	78	(d) Record has the same meaning as in subdivision (g) of Section 1798.3 of the Civil Code.
79	79
80	80	10601. If the contract contemplates that, in the course of doing business with an agency, a contractor will receive or have access to records containing personal information protected under the Information Practices Act of 1977 (Title 1.8 (commencing with Section 1798) of Part 4 of Division 3 of the Civil Code), the contract shall require the contractor to carry cyber insurance sufficient to cover all losses resulting from potential unlawful access to or disclosure of personal information, in an amount determined by the contracting agency.
81	81
82	82
83	83
84	84	10601. If the contract contemplates that, in the course of doing business with an agency, a contractor will receive or have access to records containing personal information protected under the Information Practices Act of 1977 (Title 1.8 (commencing with Section 1798) of Part 4 of Division 3 of the Civil Code), the contract shall require the contractor to carry cyber insurance sufficient to cover all losses resulting from potential unlawful access to or disclosure of personal information, in an amount determined by the contracting agency.
85	85
86	86	SEC. 2. No reimbursement is required by this act pursuant to Section 6 of Article XIIIB of the California Constitution because the only costs that may be incurred by a local agency or school district will be incurred because this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIIIB of the California Constitution.
87	87
88	88	SEC. 2. No reimbursement is required by this act pursuant to Section 6 of Article XIIIB of the California Constitution because the only costs that may be incurred by a local agency or school district will be incurred because this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIIIB of the California Constitution.
89	89
90	90	SEC. 2. No reimbursement is required by this act pursuant to Section 6 of Article XIIIB of the California Constitution because the only costs that may be incurred by a local agency or school district will be incurred because this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIIIB of the California Constitution.
91	91
92	92	### SEC. 2.