ENGR. H. B. NO. 2350 Page 1 1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
ENGROSSED HOUSE
BILL NO. 2350 By: Boatman of the House
and
Leewright of the Senate
An Act relating to state government data systems;
creating the Task Force on State Data Storage and
Retrieval Systems; providing for membership;
requiring organizational meeting; providing for
selection of chair and vice -chair; prescribing
qualifications for chair and vice -chair; requiring
notice of meetings; authorizing meetings; providing
for quorum; providing for staff assistance; defining
term; imposing duties on Task Force; requiring
reports; specifying content of reports; providing for
codification; providing an effective date ; and
declaring an emergency .
BE IT ENACTED BY THE PEOPLE OF THE STATE OF OKLAHOMA:
SECTION 1. NEW LAW A new section of law to be codified
in the Oklahoma Statutes as Section 25001 of Title 74, unless there
is created a duplication in numbering, reads as follows:
A. There is hereby created the Task Force on State D ata Storage
and Retrieval Systems.
B. The Task Force shall be composed of the following persons
appointed or selected as follows:
1. One person appointed by the Governor who shall be the Chief
Information Officer or a designee of the Chief Information Officer ;
ENGR. H. B. NO. 2350 Page 2 1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
2. Three persons selected by the Speaker of the Oklahoma House
of Representatives;
3. Three persons selected by the President Pro Tempore of the
Oklahoma State Senate;
4. Two persons selected by the Director of the Office of
Management and Enterprise Services;
5. One person selected by the following state governmental
entities:
a. the Oklahoma Tax Commission,
b. the Department of Human Services,
c. the State Department of Health,
d. the Oklahoma Department of Mental Health and Substance
Abuse Services,
e. the Office of the State Treasurer,
f. the Oklahoma Banking Commissioner,
g. the Oklahoma Employment Security Commission,
h. the Oklahoma Department of Public Safety,
i. the Department of Corrections,
j. the Office of Juvenile Affairs,
k. the State Election Board,
l. the Oklahoma Departm ent of Veterans Affairs ,
m. the Oklahoma Health Care Authority ,
n. the Office of the State Auditor and Inspector, and
o. the State Department of Education.
ENGR. H. B. NO. 2350 Page 3 1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
C. The Task Force shall hold an organizational meeting not
later than sixty (60) days from the effe ctive date of this act.
D. The Task Force shall select from among its membership a
chair and vice-chair. The chair shall have a minimum of five (5)
years of information t echnology industry experience and the vice -
chair shall have a minimum of three (3) y ears of information
technology industry experience. The Chief Information Officer shall
not be eligible to serve as chair or vice -chair.
E. The Task Force shall post notices of its meetings on a
website maintained by the Oklahoma House of Representatives and the
Oklahoma State Senate, but shall not be subject to the requirements
of the Oklahoma Open Meeting Act.
F. The Task Force shall be authorized to meet as often as
required in order to perform the duties imposed upon it , but shall
meet no less than four times each calendar year . A majority of the
members present at a meeting shall constitute a quorum in order to
take any official action , including the adoption of a n annual
report.
G. Staff assistance for the Task Force shall be provided by the
Oklahoma House of Representatives, the Oklahoma State Senate, and
the Chief Information Officer.
H. As used in this section "state governmental entity" or
"state government" shall exclude the judicial branch and the
legislative branch of Oklahoma government.
ENGR. H. B. NO. 2350 Page 4 1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
I. The Task Force shall submit an annual report regarding the
storage of personal information related to individual persons,
including personally identifiable information (PII) as well as any
other data stored on persons by any state governmental entity
(hereafter referred to as "Citizen Data"), to the Governor, the
Speaker of the Oklahoma House of Representatives, and the President
Pro Tempore of the Oklahoma State Senate not later than December 31
of each calendar year. Each annual report shall at a min imum
contain:
1. An overview of the data maintained by all state governmental
entities, other than the entities ex cluded by subsection H of this
section, including:
a. an analysis of duplication of Citizen Data across
entities, and
b. an analysis of vulne rabilities and threats to the
safety and security of Citizen Data;
2. An analysis of opportunities to consolidate duplicated
Citizen Data into the central data repository, including:
a. recommendations for data migration to take advantage
of any such opportunities,
b. an estimate of costs related to moving the data from
the source entity, and
ENGR. H. B. NO. 2350 Page 5 1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
c. a discussion of any state or federal data privacy laws
that may impact access to data in the central data
repository; and
3. Recommendations for the maintenance, upgrade, security
enhancement, or capacity expansion of the central data repository,
including hardware, software, network, and other infrastructure
upgrades and improvements.
J. Additionally, the Task Force shall gather information and
make recommendations in its initial report regarding:
1. The ability of executive agencies, boards, commissions,
departments or other state governmental entities, other than the
entities excluded by subsection H of this section , including
institutions within The Oklahoma State System of Higher Education,
to access information about a person or business entity from other
agencies, boards, commissions, departments or nonexcluded state
governmental entities and whether such access is consistent with
industry data privacy stand ards and any state or federal data
privacy laws;
2. The security features of the hardware and software systems
currently responsible for entry and storage of such information and
whether there are actions that should be taken to improve data entry
and storage, including data privacy ;
3. The feasibility of integrating nonexcluded state government
data storage related to personal information or information
ENGR. H. B. NO. 2350 Page 6 1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
regarding business entities or other lawfully recognized entities;
and
4. Such other aspects of state computer data entry, storage,
access, retrieval and privacy as the Task Force deems to be
relevant.
K. The initial report of the Task Force shall be submitted to
the Governor, the Speaker of the Oklahoma House of Representatives,
and the President Pro Te mpore of the Oklahoma State Senate not later
than April 1, 2023.
L. Each annual report shall contain specific recommendations
related to the functionality of the state data entry, storage and
retrieval systems with particular emphasis on the ability for
different nonexcluded state governmental entities to have access to
relevant information about natural persons in order to deliver a
higher quality service to such persons and business entities or
other lawfully recognized entities consistent with technolog ical
standards governing data storage, retrieval and data privacy
requirements.
SECTION 2. This act shall become effective July 1, 2021.
SECTION 3. It being immediately necessary for the preservation
of the public peace, h ealth or safety, an emergency is hereby
declared to exist, by reason whereof this act shall take effect and
be in full force from and after its passage and approval.
ENGR. H. B. NO. 2350 Page 7 1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
Passed the House of Representatives the 10th day of March, 2021.
Presiding Officer of the House
of Representatives
Passed the Senate the ___ day of __________, 2021.
Presiding Officer of the Senate