| 18 | | - | (b) Not later than December 31, 2016, and annually thereafter, each state agency shall, within available appropriations, submit a list of all automated personal data systems maintained by such agency that contain personal data as of December first of the year of such submission. Such list shall be submitted in a form and manner prescribed by the Secretary of the Office of Policy and Management and shall include: (1) The general nature and purpose of each automated personal data system maintained by such agency, (2) the categories of personal data and other data in such systems, (3) how the personal data is used, and (4) the categories of authorized users of such personal data. |
|---|
| 30 | + | (b) Not later than December 31, 2016, and annually thereafter, each state agency shall submit a list of all automated personal data systems maintained by such agency that contain personal data as of December first of the year of such submission. Such list shall be submitted in a form and manner prescribed by the Secretary of the Office of Policy and Management and shall include: (1) The general nature and purpose of each automated personal data system maintained by such agency, (2) the categories of personal data and other data in such systems, (3) how the personal data is used, and (4) the categories of authorized users of such personal data. |
|---|
| 19 | 31 | | |
|---|
| 20 | 32 | | (c) Not later than January 31, 2017, and annually thereafter, the Secretary of the Office of Policy and Management shall create and post on the office's Internet web site an inventory of all of the state agency lists of automated personal data systems submitted under this section, including the information submitted under subdivisions (1) to (4), inclusive, of subsection (b) of this section. |
|---|
| 21 | 33 | | |
|---|
| 22 | 34 | | Sec. 2. Subdivision (5) of section 4-190 of the general statutes is repealed and the following is substituted in lieu thereof (Effective from passage): |
|---|
| 23 | 35 | | |
|---|
| 24 | 36 | | (5) "Computer accessible files" means any personal data which is stored on-line or off-line, which can be identified by use of electronic means, including, but not limited to, (A) microfilm and microfilm devices, which includes, but is not limited to, magnetic tape, magnetic film, magnetic disks, magnetic drums, internal memory utilized by any processing device, including computers or telecommunications control units, punched cards, optically [scanable] scannable paper or film, or (B) external or removable hard drives, flash cards, flash drives, compact disks or digital video disks. |
|---|
| 25 | 37 | | |
|---|
| 26 | 38 | | |
|---|
| 27 | 39 | | |
|---|
| 28 | 40 | | |
|---|
| 29 | 41 | | This act shall take effect as follows and shall amend the following sections: |
|---|
| 30 | 42 | | Section 1 from passage New section |
|---|
| 31 | 43 | | Sec. 2 from passage 4-190(5) |
|---|
| 32 | 44 | | |
|---|
| 33 | 45 | | This act shall take effect as follows and shall amend the following sections: |
|---|
| 34 | 46 | | |
|---|
| 35 | 47 | | Section 1 |
|---|
| 36 | 48 | | |
|---|
| 37 | 49 | | from passage |
|---|
| 38 | 50 | | |
|---|
| 39 | 51 | | New section |
|---|
| 40 | 52 | | |
|---|
| 41 | 53 | | Sec. 2 |
|---|
| 42 | 54 | | |
|---|
| 43 | 55 | | from passage |
|---|
| 44 | 56 | | |
|---|
| 45 | 57 | | 4-190(5) |
|---|
| 46 | 58 | | |
|---|
| 47 | 59 | | |
|---|
| 48 | 60 | | |
|---|