HB2350 HFLR Page 1 BOLD FACE denotes Committee Amendments. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 HOUSE OF REPRESENTATIVES - FLOOR VERSION STATE OF OKLAHOMA 1st Session of the 58th Legislature (2021) COMMITTEE SUBSTITUTE FOR HOUSE BILL NO. 2350 By: Boatman COMMITTEE SUBSTITUTE An Act relating to state government data systems; creating the Task Force on State Data Storage and Retrieval Systems; providing for membership; requiring organizational meeting; providing for selection of chair and vice -chair; requiring notice of meetings; authorizing meetings; providing for quorum; providing fo r staff assistance; imposing duties on Task Force; requiring reports; specifying content of reports; providing for codification; providing an effective date; and declaring an emergency. BE IT ENACTED BY THE PEOPLE OF THE STATE OF OKLAHOMA: SECTION 1. NEW LAW A new section of law to be codified in the Oklahoma Statutes as Section 25001 of Title 74, unless there is created a duplication in numbering, reads as follows: A. There is hereby created the Task Force on State Data Storage and Retrieval Systems. B. The Task Force shall be composed of the following persons appointed or selected as follows: HB2350 HFLR Page 2 BOLD FACE denotes Committee Amendments. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 1. One person appointed by the Governor who shall be the Chief Information Officer or a designee of the Chief Information Offic er; 2. Three persons selected by the Speaker of the Oklahoma House of Representatives; 3. Three persons selected by the President Pro Tempore of the Oklahoma State Senate; 4. Two persons selected by the Director of the Office of Management and Enterpris e Services; 5. One person selected by the following state governmental entities: a. the Oklahoma Tax Commission, b. the Department of Human Services, c. the State Department of Health, d. the Oklahoma Department of Mental Health and Substance Abuse Services, e. the Oklahoma Corporation Commission, f. the Oklahoma Securities Commission, g. the Oklahoma Banking Commissioner, h. the Oklahoma State Bureau of Investigation, i. the Oklahoma Bureau of Narcotics and Dangerous Drugs Control, j. the Oklahoma Employm ent Security Commission, k. the Oklahoma Department of Public Safety, l. the Oklahoma Department of Corrections, HB2350 HFLR Page 3 BOLD FACE denotes Committee Amendments. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 m. the Office of Juvenile Affairs, n. the State Election Board, o. the Oklahoma Department of Veterans Affairs, and p. the Oklahoma Health Care Authority. C. The Task Force shall hold an organizational meeting not later than sixty (60) days from the effective date of this act. D. The Task Force shall select from among its membership a chair and vice-chair. Neither the Chief Information Officer nor the appointees of the Oklahoma Office of Management and Enterprise Services shall be eligible to serve as chair or vice -chair. E. The Task Force shall post notices of its meetings on a website maintained by the Oklahoma House of Representatives and t he Oklahoma State Senate, but shall not be subject to the requirements of the Oklahoma Open Meeting Act. F. The Task Force shall be authorized to meet as often as required in order to perform the duties imposed upon it, but shall meet no less than two tim es each calendar year. A majority of the members present at a meeting shall constitute a quorum in order to take any official action, including the adoption of an annual report. G. Staff assistance for the Task Force shall be provided by the Oklahoma House of Representatives, the Oklahoma State Senate, and the Chief Information Officer. HB2350 HFLR Page 4 BOLD FACE denotes Committee Amendments. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 H. The Task Force shall submit an annual report regarding the storage of personal information related to individual persons, including personally identifiable informatio n (PII) as well as any other data stored on persons by any state governmental entity (hereafter referred to as "Citizen Data"), to the Governor, the Speaker of the Oklahoma House of Representatives, and the President Pro Tempore of the Oklahoma State Senat e not later than December 31 of each calendar year. Each annual report shall at a minimum contain: 1. An overview of the data maintained by all state governmental entities, including: a. an analysis of duplication of Citizen Data across entities, b. an analysis of vulnerabilities and threats to the safety and security of Citizen Data; 2. An analysis of opportunities to consolidate duplicated Citizen Data into the central data repository, including: a. recommendations for data migration to take advantage of any such opportunities, b. an estimate of costs related to moving the data from the source entity, and c. a discussion of any state or federal data privacy laws that may impact access to data in the central data repository; HB2350 HFLR Page 5 BOLD FACE denotes Committee Amendments. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 3. Recommendations for the m aintenance, upgrade, security enhancement, or capacity expansion of the central data repository, including hardware, software, network, and other infrastructure upgrades and improvements. I. Additionally, the Task Force shall gather information and make recommendations in its initial report regarding: 1. The ability of executive agencies, boards, commissions, departments or other state governmental entities, including institutions within The Oklahoma State System of Higher Education, to access information about a person or business entity from other agencies, boards, commissions, departments or state governmental entities and whether such access is consistent with industry data privacy standards and any state or federal data privacy laws; 2. The security features the hardware and software systems currently responsible for entry of and storage of such information and whether there are actions that should be taken to improve data entry and storage, including data privacy; 3. The feasibility of integrating s tate government data storage related to personal information or information regarding business entities or other lawfully recognized entities; and 4. Such other aspects of state computer data entry, storage, access, retrieval and privacy as the Task Force deems to be relevant. HB2350 HFLR Page 6 BOLD FACE denotes Committee Amendments. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 J. The initial report of the Task Force shall be submitted to the Governor, the Speaker of the Oklahoma House of Representatives, the President Pro Tempore of the Oklahoma State Senate not later than December 31, 2022. K. Each annual report shall contain specific recommendations related to the functionality of the state data entry, storage and retrieval systems with particular emphasis on the ability for different state governmental entities to have access to relevant information about natural persons in order to deliver a higher quality service to such persons and to business entities or other lawfully recognized entities consistent with technological standards governing data storage, retrieval and data privacy requirements. SECTION 2. This act shall become effective July 1, 2021. SECTION 3. It being immediately necessary for the preservation of the public peace, health or safety, an emergency is hereby declared to exist, by reason whereof this act s hall take effect and be in full force from and after its passage and approval. COMMITTEE REPORT BY: COMMITTEE ON GOVERNMENT MODERNIZATION AND EFFICIENCY, dated 02/23/2021 - DO PASS, As Amended and Coauthored.