EXPLANATION: CAPITALS INDICATE MAT TER ADDED TO EXISTIN G LAW. [Brackets] indicate matter deleted from existing law. *hb0346* HOUSE BILL 346 S1, S2, P5 2lr0416 By: Delegate Novotny Introduced and read first time: January 19, 2022 Assigned to: Health and Government Operations A BILL ENTITLED AN ACT concerning 1 Department of Information Technology – Oversight of Legislative Branch 2 Information Technology 3 FOR the purpose of applying certain provisions related to the oversight of information 4 technology, information technology projects, information technology accessibility, 5 and cybersecurity by the Secretary of Information Technology to the Legislative 6 Branch of State government; and generally relating to information technology and 7 the Legislative Branch of State government. 8 BY repealing and reenacting, without amendments, 9 Article – State Finance and Procurement 10 Section 3A–301(a), 3A–305(a), 3A–306, and 3A–307(a)(1) 11 Annotated Code of Maryland 12 (2021 Replacement Volume) 13 BY adding to 14 Article – State Finance and Procurement 15 Section 3A–301(m) 16 Annotated Code of Maryland 17 (2021 Replacement Volume) 18 BY repealing and reenacting, with amendments, 19 Article – State Finance and Procurement 20 Section 3A–302 and 3A–303(a) 21 Annotated Code of Maryland 22 (2021 Replacement Volume) 23 SECTION 1. BE IT ENACTED BY THE GENERAL ASSEMBLY OF MARYLAND, 24 That the Laws of Maryland read as follows: 25 Article – State Finance and Procurement 26 2 HOUSE BILL 346 3A–301. 1 (a) In this subtitle the following words have the meanings indicated. 2 (M) “UNIT OF STATE GOVERNMENT ” INCLUDES, UNLESS OTHERWISE 3 SPECIFIED, AN AGENCY OR A UNIT OF THE LEGISLATIVE BRANCH OF STATE 4 GOVERNMENT . 5 3A–302. 6 (a) This subtitle does not apply to changes relating to or the purchase, lease, or 7 rental of information technology by: 8 (1) public institutions of higher education solely for academic or research 9 purposes; 10 (2) the Maryland Port Administration; 11 (3) the University System of Maryland; 12 (4) St. Mary’s College of Maryland; 13 (5) Morgan State University; 14 (6) the Maryland Stadium Authority; or 15 (7) Baltimore City Community College. 16 (b) Except as provided in subsection (a) of this section, this subtitle applies to any 17 project of a unit of the Executive Branch OR THE LEGISLATIVE BRANCH of State 18 government that involves an agreement with a public institution of higher education for a 19 portion of the development of the project, whether the work on the development is done 20 directly or indirectly by the public institution of higher education. 21 (c) Notwithstanding any other provision of law, except as provided in subsection 22 (a) of this section and §§ 3A–307(a)(2), 3A–308, and 3A–309 of this subtitle, this subtitle 23 applies to all units of the Executive [Branch] AND LEGISLATIVE BRANCHES of State 24 government including public institutions of higher education other than Morgan State 25 University, the University System of Maryland, St. Mary’s College of Maryland, and 26 Baltimore City Community College. 27 3A–303. 28 (a) The Secretary is responsible for carrying out the following duties: 29 HOUSE BILL 346 3 (1) developing, maintaining, revising, and enforcing information 1 technology policies, procedures, and standards; 2 (2) providing technical assistance, advice, and recommendations to the 3 Governor and any unit of State government concerning information technology matters; 4 (3) reviewing the annual project plan for each unit of State government to 5 make information and services available to the public over the Internet; 6 (4) developing and maintaining a statewide information technology master 7 plan that will: 8 (i) be the basis for the management and direction of information 9 technology within the Executive [Branch] AND LEGISLATIVE BRANCHES of State 10 government; 11 (ii) include all aspects of State information technology including 12 telecommunications, security, data processing, and information management; 13 (iii) consider interstate transfers as a result of federal legislation and 14 regulation; 15 (iv) work jointly with the Secretary of Budget and Management to 16 ensure that information technology plans and budgets are consistent; 17 (v) ensure that State information technology plans, policies, and 18 standards are consistent with State goals, objectives, and resources, and represent a 19 long–range vision for using information technology to improve the overall effectiveness of 20 State government; and 21 (vi) include standards to assure nonvisual access to the information 22 and services made available to the public over the Internet; 23 (5) adopting by regulation and enforcing nonvisual access standards to be 24 used in the procurement of information technology services by or on behalf of units of State 25 government in accordance with subsection (b) of this section; 26 (6) in consultation with the Attorney General, advising and overseeing a 27 consistent cybersecurity strategy for units of State government, including institutions 28 under the control of the governing boards of the public institutions of higher education; 29 (7) advising and consulting with the [Legislative and] Judicial [branches] 30 BRANCH of State government regarding a cybersecurity strategy; and 31 (8) in consultation with the Attorney General, developing guidance on 32 consistent cybersecurity strategies for counties, municipal corporations, school systems, 33 and all other political subdivisions of the State. 34 4 HOUSE BILL 346 3A–305. 1 (a) Except as provided in subsection (b) of this section, in accordance with 2 guidelines established by the Secretary, each unit of State government shall develop and 3 submit to the Secretary: 4 (1) information technology policies and standards; 5 (2) an information technology plan; and 6 (3) an annual project plan outlining the status of efforts to make 7 information and services available to the public over the Internet. 8 3A–306. 9 Information technology of each unit of State government shall be consistent with the 10 master plan. 11 3A–307. 12 (a) (1) A unit of State government may not purchase, lease, or rent information 13 technology unless consistent with the master plan. 14 SECTION 2. AND BE IT FURTHER ENACTED, That this Act shall take effect 15 October 1, 2022. 16