OK
Oklahoma House Bill HB2350

Oklahoma 2022 Regular Session

Oklahoma House Bill HB2350 Compare Versions

OldNewDifferences
11
22
3-ENGR. H. B. NO. 2350 Page 1 1
3+HB2350 HFLR Page 1
4+BOLD FACE denotes Committee Amendments. 1
45 2
56 3
67 4
78 5
89 6
910 7
1011 8
1112 9
1213 10
1314 11
1415 12
1516 13
1617 14
1718 15
1819 16
1920 17
2021 18
2122 19
2223 20
2324 21
2425 22
2526 23
2627 24
2728
28-ENGROSSED HOUSE
29-BILL NO. 2350 By: Boatman of the House
29+HOUSE OF REPRESENTATIVES - FLOOR VERSION
3030
31- and
31+STATE OF OKLAHOMA
3232
33- Leewright of the Senate
33+1st Session of the 58th Legislature (2021)
34+
35+COMMITTEE SUBSTITUTE
36+FOR
37+HOUSE BILL NO. 2350 By: Boatman
3438
3539
3640
3741
3842
43+COMMITTEE SUBSTITUTE
3944
4045 An Act relating to state government data systems;
4146 creating the Task Force on State Data Storage and
4247 Retrieval Systems; providing for membership;
4348 requiring organizational meeting; providing for
44-selection of chair and vice -chair; prescribing
45-qualifications for chair and vice -chair; requiring
46-notice of meetings; authorizing meetings; providing
47-for quorum; providing for staff assistance; defining
48-term; imposing duties on Task Force; requiring
49-reports; specifying content of reports; providing for
50-codification; providing an effective date ; and
51-declaring an emergency .
49+selection of chair and vice -chair; requiring notice
50+of meetings; authorizing meetings; providing for
51+quorum; providing fo r staff assistance; imposing
52+duties on Task Force; requiring reports; specifying
53+content of reports; providing for codification;
54+providing an effective date; and declaring an
55+emergency.
56+
5257
5358
5459
5560
5661 BE IT ENACTED BY THE PEOPLE OF THE STATE OF OKLAHOMA:
5762 SECTION 1. NEW LAW A new section of law to be codified
5863 in the Oklahoma Statutes as Section 25001 of Title 74, unless there
5964 is created a duplication in numbering, reads as follows:
6065 A. There is hereby created the Task Force on State Data Storage
6166 and Retrieval Systems.
6267 B. The Task Force shall be composed of the following persons
6368 appointed or selected as follows:
64-1. One person appointed by the Governor who shall be the Chief
65-Information Officer or a designee of the Chief Information Officer ;
6669
67-ENGR. H. B. NO. 2350 Page 2 1
70+HB2350 HFLR Page 2
71+BOLD FACE denotes Committee Amendments. 1
6872 2
6973 3
7074 4
7175 5
7276 6
7377 7
7478 8
7579 9
7680 10
7781 11
7882 12
7983 13
8084 14
8185 15
8286 16
8387 17
8488 18
8589 19
8690 20
8791 21
8892 22
8993 23
9094 24
9195
96+1. One person appointed by the Governor who shall be the Chief
97+Information Officer or a designee of the Chief Information Offic er;
9298 2. Three persons selected by the Speaker of the Oklahoma House
9399 of Representatives;
94100 3. Three persons selected by the President Pro Tempore of the
95101 Oklahoma State Senate;
96102 4. Two persons selected by the Director of the Office of
97103 Management and Enterpris e Services;
98104 5. One person selected by the following state governmental
99105 entities:
100106 a. the Oklahoma Tax Commission,
101107 b. the Department of Human Services,
102108 c. the State Department of Health,
103109 d. the Oklahoma Department of Mental Health and Substance
104110 Abuse Services,
105-e. the Office of the State Treasurer,
106-f. the Oklahoma Banking Commissioner,
107-g. the Oklahoma Employment Security Commission,
108-h. the Oklahoma Department of Public Safety,
109-i. the Department of Corrections,
110-j. the Office of Juvenile Affairs,
111-k. the State Election Board,
112-l. the Oklahoma Departm ent of Veterans Affairs ,
113-m. the Oklahoma Health Care Authority ,
114-n. the Office of the State Auditor and Inspector, and
115-o. the State Department of Education.
111+e. the Oklahoma Corporation Commission,
112+f. the Oklahoma Securities Commission,
113+g. the Oklahoma Banking Commissioner,
114+h. the Oklahoma State Bureau of Investigation,
115+i. the Oklahoma Bureau of Narcotics and Dangerous Drugs
116+Control,
117+j. the Oklahoma Employm ent Security Commission,
118+k. the Oklahoma Department of Public Safety,
119+l. the Oklahoma Department of Corrections,
116120
117-ENGR. H. B. NO. 2350 Page 3 1
121+HB2350 HFLR Page 3
122+BOLD FACE denotes Committee Amendments. 1
118123 2
119124 3
120125 4
121126 5
122127 6
123128 7
124129 8
125130 9
126131 10
127132 11
128133 12
129134 13
130135 14
131136 15
132137 16
133138 17
134139 18
135140 19
136141 20
137142 21
138143 22
139144 23
140145 24
141146
147+m. the Office of Juvenile Affairs,
148+n. the State Election Board,
149+o. the Oklahoma Department of Veterans Affairs, and
150+p. the Oklahoma Health Care Authority.
142151 C. The Task Force shall hold an organizational meeting not
143152 later than sixty (60) days from the effective date of this act.
144153 D. The Task Force shall select from among its membership a
145-chair and vice-chair. The chair shall have a minimum of five (5)
146-years of information t echnology industry experience and the vice -
147-chair shall have a minimum of three (3) y ears of information
148-technology industry experience. The Chief Information Officer shall
149-not be eligible to serve as chair or vice -chair.
154+chair and vice-chair. Neither the Chief Information Officer nor the
155+appointees of the Oklahoma Office of Management and Enterprise
156+Services shall be eligible to serve as chair or vice -chair.
150157 E. The Task Force shall post notices of its meetings on a
151158 website maintained by the Oklahoma House of Representatives and t he
152159 Oklahoma State Senate, but shall not be subject to the requirements
153160 of the Oklahoma Open Meeting Act.
154161 F. The Task Force shall be authorized to meet as often as
155162 required in order to perform the duties imposed upon it, but shall
156-meet no less than four times each calendar year . A majority of the
163+meet no less than two tim es each calendar year. A majority of the
157164 members present at a meeting shall constitute a quorum in order to
158165 take any official action, including the adoption of an annual
159166 report.
160167 G. Staff assistance for the Task Force shall be provided by the
161168 Oklahoma House of Representatives, the Oklahoma State Senate, and
162169 the Chief Information Officer.
163-H. As used in this section "state governmental entity" or
164-"state government" shall exclude the judicial branch and the
165-legislative branch of Oklahoma government.
166170
167-ENGR. H. B. NO. 2350 Page 4 1
171+HB2350 HFLR Page 4
172+BOLD FACE denotes Committee Amendments. 1
168173 2
169174 3
170175 4
171176 5
172177 6
173178 7
174179 8
175180 9
176181 10
177182 11
178183 12
179184 13
180185 14
181186 15
182187 16
183188 17
184189 18
185190 19
186191 20
187192 21
188193 22
189194 23
190195 24
191196
192-I. The Task Force shall submit an annual report regarding the
197+H. The Task Force shall submit an annual report regarding the
193198 storage of personal information related to individual persons,
194199 including personally identifiable informatio n (PII) as well as any
195200 other data stored on persons by any state governmental entity
196201 (hereafter referred to as "Citizen Data"), to the Governor, the
197202 Speaker of the Oklahoma House of Representatives, and the President
198203 Pro Tempore of the Oklahoma State Senat e not later than December 31
199204 of each calendar year. Each annual report shall at a minimum
200205 contain:
201206 1. An overview of the data maintained by all state governmental
202-entities, other than the entities ex cluded by subsection H of this
203-section, including:
207+entities, including:
204208 a. an analysis of duplication of Citizen Data across
205-entities, and
209+entities,
206210 b. an analysis of vulnerabilities and threats to the
207211 safety and security of Citizen Data;
208212 2. An analysis of opportunities to consolidate duplicated
209213 Citizen Data into the central data repository, including:
210214 a. recommendations for data migration to take advantage
211215 of any such opportunities,
212216 b. an estimate of costs related to moving the data from
213217 the source entity, and
218+c. a discussion of any state or federal data privacy laws
219+that may impact access to data in the central data
220+repository;
214221
215-ENGR. H. B. NO. 2350 Page 5 1
222+HB2350 HFLR Page 5
223+BOLD FACE denotes Committee Amendments. 1
216224 2
217225 3
218226 4
219227 5
220228 6
221229 7
222230 8
223231 9
224232 10
225233 11
226234 12
227235 13
228236 14
229237 15
230238 16
231239 17
232240 18
233241 19
234242 20
235243 21
236244 22
237245 23
238246 24
239247
240-c. a discussion of any state or federal data privacy laws
241-that may impact access to data in the central data
242-repository; and
243248 3. Recommendations for the m aintenance, upgrade, security
244249 enhancement, or capacity expansion of the central data repository,
245250 including hardware, software, network, and other infrastructure
246251 upgrades and improvements.
247-J. Additionally, the Task Force shall gather information and
252+I. Additionally, the Task Force shall gather information and
248253 make recommendations in its initial report regarding:
249254 1. The ability of executive agencies, boards, commissions,
250-departments or other state governmental entities, other than the
251-entities excluded by subsection H of this section , including
255+departments or other state governmental entities, including
252256 institutions within The Oklahoma State System of Higher Education,
253257 to access information about a person or business entity from other
254-agencies, boards, commissions, departments or nonexcluded state
255-governmental entities and whether such access is consistent with
256-industry data privacy stand ards and any state or federal data
257-privacy laws;
258-2. The security features of the hardware and software systems
259-currently responsible for entry and storage of such information and
260-whether there are actions that should be taken to improve data entry
261-and storage, including data privacy ;
262-3. The feasibility of integrating nonexcluded state government
263-data storage related to personal information or information
258+agencies, boards, commissions, departments or state governmental
259+entities and whether such access is consistent with industry data
260+privacy standards and any state or federal data privacy laws;
261+2. The security features the hardware and software systems
262+currently responsible for entry of and storage of such information
263+and whether there are actions that should be taken to improve data
264+entry and storage, including data privacy;
265+3. The feasibility of integrating s tate government data storage
266+related to personal information or information regarding business
267+entities or other lawfully recognized entities; and
268+4. Such other aspects of state computer data entry, storage,
269+access, retrieval and privacy as the Task Force deems to be
270+relevant.
264271
265-ENGR. H. B. NO. 2350 Page 6 1
272+HB2350 HFLR Page 6
273+BOLD FACE denotes Committee Amendments. 1
266274 2
267275 3
268276 4
269277 5
270278 6
271279 7
272280 8
273281 9
274282 10
275283 11
276284 12
277285 13
278286 14
279287 15
280288 16
281289 17
282290 18
283291 19
284292 20
285293 21
286294 22
287295 23
288296 24
289297
290-regarding business entities or other lawfully recognized entities;
291-and
292-4. Such other aspects of state computer data entry, storage,
293-access, retrieval and privacy as the Task Force deems to be
294-relevant.
295-K. The initial report of the Task Force shall be submitted to
298+J. The initial report of the Task Force shall be submitted to
296299 the Governor, the Speaker of the Oklahoma House of Representatives,
297-and the President Pro Te mpore of the Oklahoma State Senate not later
298-than April 1, 2023.
299-L. Each annual report shall contain specific recommendations
300+the President Pro Tempore of the Oklahoma State Senate not later
301+than December 31, 2022.
302+K. Each annual report shall contain specific recommendations
300303 related to the functionality of the state data entry, storage and
301304 retrieval systems with particular emphasis on the ability for
302-different nonexcluded state governmental entities to have access to
303-relevant information about natural persons in order to deliver a
304-higher quality service to such persons and business entities or
305-other lawfully recognized entities consistent with technolog ical
306-standards governing data storage, retrieval and data privacy
307-requirements.
305+different state governmental entities to have access to relevant
306+information about natural persons in order to deliver a higher
307+quality service to such persons and to business entities or other
308+lawfully recognized entities consistent with technological standards
309+governing data storage, retrieval and data privacy requirements.
308310 SECTION 2. This act shall become effective July 1, 2021.
309311 SECTION 3. It being immediately necessary for the preservation
310312 of the public peace, health or safety, an emergency is hereby
311313 declared to exist, by reason whereof this act s hall take effect and
312314 be in full force from and after its passage and approval.
313315
314-
315-ENGR. H. B. NO. 2350 Page 7 1
316-2
317-3
318-4
319-5
320-6
321-7
322-8
323-9
324-10
325-11
326-12
327-13
328-14
329-15
330-16
331-17
332-18
333-19
334-20
335-21
336-22
337-23
338-24
339-
340-Passed the House of Representatives the 10th day of March, 2021.
341-
342-
343-
344-
345- Presiding Officer of the House
346- of Representatives
347-
348-
349-Passed the Senate the ___ day of __________, 2021.
350-
351-
352-
353-
354- Presiding Officer of the Senate
355-
356-
316+COMMITTEE REPORT BY: COMMITTEE ON GOVERNMENT MODERNIZATION AND
317+EFFICIENCY, dated 02/23/2021 - DO PASS, As Amended and Coauthored.