Texas 2021 - 87th Regular

Texas Senate Bill SB475 Compare Versions

Version 1 (Old)

Version 2 (New)

Old	New		Differences
1		-	S.B. No. 475
	1	+	87R23600 YDB-D
	2	+	By: Nelson, et al. S.B. No. 475
	3	+	(Capriglione)
	4	+	Substitute the following for S.B. No. 475: No.
2	5
3	6
	7	+	A BILL TO BE ENTITLED
4	8		AN ACT
5	9		relating to state agency and local government information
6	10		management and security, including establishment of the state risk
7	11		and authorization management program and the Texas volunteer
8	12		incident response team; authorizing fees.
9	13		BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS:
10	14		SECTION 1. Subchapter B, Chapter 2054, Government Code, is
11	15		amended by adding Section 2054.0332 to read as follows:
12	16		Sec. 2054.0332. DATA MANAGEMENT ADVISORY COMMITTEE. (a)
13	17		The board shall appoint a data management advisory committee.
14	18		(b) The advisory committee is composed of each data
15	19		management officer designated by a state agency under Section
16	20		2054.137 and the department's chief data officer.
17	21		(c) The advisory committee shall:
18	22		(1) advise the board and department on establishing
19	23		statewide data ethics, principles, goals, strategies, standards,
20	24		and architecture;
21	25		(2) provide guidance and recommendations on governing
22	26		and managing state agency data and data management systems,
23	27		including recommendations to assist data management officers in
24	28		fulfilling the duties assigned under Section 2054.137; and
25	29		(3) establish performance objectives for state
26	30		agencies from this state's data-driven policy goals.
27	31		(d) Sections 2110.002 and 2110.008 do not apply to the
28	32		advisory committee.
29	33		SECTION 2. Subchapter C, Chapter 2054, Government Code, is
30	34		amended by adding Section 2054.0593 to read as follows:
31	35		Sec. 2054.0593. CLOUD COMPUTING STATE RISK AND
32	36		AUTHORIZATION MANAGEMENT PROGRAM. (a) In this section, "cloud
33	37		computing service" has the meaning assigned by Section 2157.007.
34	38		(b) The department shall establish a state risk and
35	39		authorization management program to provide a standardized
36	40		approach for security assessment, authorization, and continuous
37	41		monitoring of cloud computing services that process the data of a
38	42		state agency. The program must allow a vendor to demonstrate
39	43		compliance by submitting documentation that shows the vendor's
40	44		compliance with a risk and authorization management program of:
41	45		(1) the federal government; or
42	46		(2) another state that the department approves.
43	47		(c) The department by rule shall prescribe:
44	48		(1) the categories and characteristics of cloud
45	49		computing services subject to the state risk and authorization
46	50		management program; and
47	51		(2) the requirements for certification through the
48	52		program of vendors that provide cloud computing services.
49	53		(d) A state agency shall require each vendor contracting
50	54		with the agency to provide cloud computing services for the agency
51	55		to comply with the requirements of the state risk and authorization
52	56		management program. The department shall evaluate vendors to
53	57		determine whether a vendor qualifies for a certification issued by
54	58		the department reflecting compliance with program requirements.
55	59		(e) A state agency may not enter or renew a contract with a
56	60		vendor to purchase cloud computing services for the agency that are
57	61		subject to the state risk and authorization management program
58	62		unless the vendor demonstrates compliance with program
59	63		requirements.
60	64		(f) A state agency shall require a vendor contracting with
61	65		the agency to provide cloud computing services for the agency that
62	66		are subject to the state risk and authorization management program
63	67		to maintain program compliance and certification throughout the
64	68		term of the contract.
65	69		SECTION 3. Section 2054.0594, Government Code, is amended
66	70		by adding Subsection (d) to read as follows:
67	71		(d) The department shall establish a framework for regional
68	72		cybersecurity working groups to execute mutual aid agreements that
69	73		allow state agencies, local governments, regional planning
70	74		commissions, public and private institutions of higher education,
71	75		the private sector, and the incident response team established
72	76		under Subchapter N-2 to assist with responding to a cybersecurity
73	77		event in this state. A working group may be established within the
74	78		geographic area of a regional planning commission established under
75		-	Chapter 391, Local Government Code. The working group may
76		-	~~establish~~ a list of available cybersecurity experts and share
77		-	~~resources to~~ assist in responding to the cybersecurity event and
78		-	~~recovery from~~ the event.
	79	+	Chapter 391, Local Government Code. The working group may establish
	80	+	a list of available cybersecurity experts and share resources to
	81	+	assist in responding to the cybersecurity event and recovery from
	82	+	the event.
79	83		SECTION 4. Subchapter F, Chapter 2054, Government Code, is
80	84		amended by adding Sections 2054.137 and 2054.138 to read as
81	85		follows:
82	86		Sec. 2054.137. DESIGNATED DATA MANAGEMENT OFFICER. (a)
83	87		Each state agency with more than 150 full-time employees shall
84	88		designate a full-time employee of the agency to serve as a data
85	89		management officer.
86	90		(b) The data management officer for a state agency shall:
87	91		(1) coordinate with the chief data officer to ensure
88	92		the agency performs the duties assigned under Section 2054.0286;
89	93		(2) in accordance with department guidelines,
90	94		establish an agency data governance program to identify the
91	95		agency's data assets, exercise authority and management over the
92	96		agency's data assets, and establish related processes and
93	97		procedures to oversee the agency's data assets; and
94	98		(3) coordinate with the agency's information security
95	99		officer, the agency's records management officer, and the Texas
96	100		State Library and Archives Commission to:
97	101		(A) implement best practices for managing and
98	102		securing data in accordance with state privacy laws and data
99	103		privacy classifications;
100	104		(B) ensure the agency's records management
101	105		programs apply to all types of data storage media;
102	106		(C) increase awareness of and outreach for the
103	107		agency's records management programs within the agency; and
104	108		(D) conduct a data maturity assessment of the
105	109		agency's data governance program in accordance with the
106	110		requirements established by department rule.
107	111		(c) In accordance with department guidelines, the data
108	112		management officer for a state agency shall post on the Texas Open
109	113		Data Portal established by the department under Section 2054.070 at
110	114		least three high-value data sets as defined by Section 2054.1265.
111	115		The high-value data sets may not include information that is
112	116		confidential or protected from disclosure under state or federal
113	117		law.
114	118		(d) The data management officer for a state agency may
115	119		delegate in writing to another agency employee the duty to:
116	120		(1) implement a specific requirement of Subsection (b)
117	121		or (c); or
118	122		(2) participate in the advisory committee established
119	123		under Section 2054.0332.
120	124		Sec. 2054.138. SECURITY CONTROLS FOR STATE AGENCY DATA.
121	125		Each state agency entering into or renewing a contract with a vendor
122	126		authorized to access, transmit, use, or store data for the agency
123	127		shall include a provision in the contract requiring the vendor to
124	128		meet the security controls the agency determines are proportionate
125	129		with the agency's risk under the contract based on the sensitivity
126	130		of the agency's data. The vendor must periodically provide to the
127	131		agency evidence that the vendor meets the security controls
128	132		required under the contract.
129	133		SECTION 5. Subchapter G, Chapter 2054, Government Code, is
130	134		amended by adding Section 2054.161 to read as follows:
131	135		Sec. 2054.161. DATA CLASSIFICATION, SECURITY, AND
132	136		RETENTION REQUIREMENTS. On initiation of an information resources
133	137		technology project, including an application development project
134	138		and any information resources projects described in this
135	139		subchapter, a state agency shall classify the data produced from or
136	140		used in the project and determine appropriate data security and
137	141		applicable retention requirements under Section 441.185 for each
138	142		classification.
139	143		SECTION 6. Chapter 2054, Government Code, is amended by
140	144		adding Subchapter N-2 to read as follows:
141	145		SUBCHAPTER N-2. TEXAS VOLUNTEER INCIDENT RESPONSE TEAM
142	146		Sec. 2054.52001. DEFINITIONS. In this subchapter:
143	147		(1) "Incident response team" means the Texas volunteer
144	148		incident response team established under Section 2054.52002.
145	149		(2) "Participating entity" means a state agency,
146	150		including an institution of higher education, or a local government
147	151		that receives assistance under this subchapter during a
148	152		cybersecurity event.
149	153		(3) "Volunteer" means an individual who provides rapid
150	154		response assistance during a cybersecurity event under this
151	155		subchapter.
152	156		Sec. 2054.52002. ESTABLISHMENT OF TEXAS VOLUNTEER INCIDENT
153	157		RESPONSE TEAM. (a) The department shall establish the Texas
154	158		volunteer incident response team to provide rapid response
155	159		assistance to a participating entity under the department's
156	160		direction during a cybersecurity event.
157	161		(b) The department shall prescribe eligibility criteria for
158	162		participation as a volunteer member of the incident response team,
159	163		including a requirement that each volunteer have expertise in
160	164		addressing cybersecurity events.
161	165		Sec. 2054.52003. CONTRACT WITH VOLUNTEERS. The department
162	166		shall enter into a contract with each volunteer the department
163	167		approves to provide rapid response assistance under this
164	168		subchapter. The contract must require the volunteer to:
165	169		(1) acknowledge the confidentiality of information
166	170		required by Section 2054.52010;
167	171		(2) protect all confidential information from
168	172		disclosure;
169	173		(3) avoid conflicts of interest that might arise in a
170	174		deployment under this subchapter;
171	175		(4) comply with department security policies and
172	176		procedures regarding information resources technologies;
173	177		(5) consent to background screening required by the
174	178		department; and
175	179		(6) attest to the volunteer's satisfaction of any
176	180		eligibility criteria established by the department.
177	181		Sec. 2054.52004. VOLUNTEER QUALIFICATION. (a) The
178	182		department shall require criminal history record information for
179	183		each individual who accepts an invitation to become a volunteer.
180	184		(b) The department may request other information relevant
181	185		to the individual's qualification and fitness to serve as a
182	186		volunteer.
183	187		(c) The department has sole discretion to determine whether
184	188		an individual is qualified to serve as a volunteer.
185	189		Sec. 2054.52005. DEPLOYMENT. (a) In response to a
186	190		cybersecurity event that affects multiple participating entities
187	191		or a declaration by the governor of a state of disaster caused by a
188	192		cybersecurity event, the department on request of a participating
189	193		entity may deploy volunteers and provide rapid response assistance
190	194		under the department's direction and the managed security services
191	195		framework established under Section 2054.0594(d) to assist with the
192	196		event.
193	197		(b) A volunteer may only accept a deployment under this
194	198		subchapter in writing. A volunteer may decline to accept a
195	199		deployment for any reason.
196	200		Sec. 2054.52006. CYBERSECURITY COUNCIL DUTIES. The
197	201		cybersecurity council established under Section 2054.512 shall
198	202		review and make recommendations to the department regarding the
199	203		policies and procedures used by the department to implement this
200	204		subchapter. The department may consult with the council to
201	205		implement and administer this subchapter.
202	206		Sec. 2054.52007. DEPARTMENT POWERS AND DUTIES. (a) The
203	207		department shall:
204	208		(1) approve the incident response tools the incident
205	209		response team may use in responding to a cybersecurity event;
206	210		(2) establish the eligibility criteria an individual
207	211		must meet to become a volunteer;
208	212		(3) develop and publish guidelines for operation of
209	213		the incident response team, including the:
210	214		(A) standards and procedures the department uses
211	215		to determine whether an individual is eligible to serve as a
212	216		volunteer;
213	217		(B) process for an individual to apply for and
214	218		accept incident response team membership;
215	219		(C) requirements for a participating entity to
216	220		receive assistance from the incident response team; and
217	221		(D) process for a participating entity to request
218	222		and obtain the assistance of the incident response team; and
219	223		(4) adopt rules necessary to implement this
220	224		subchapter.
221	225		(b) The department may require a participating entity to
222	226		enter into a contract as a condition for obtaining assistance from
223	227		the incident response team. The contract must comply with the
224	228		requirements of Chapters 771 and 791.
225	229		(c) The department may provide appropriate training to
226	230		prospective and approved volunteers.
227	231		(d) In accordance with state law, the department may provide
228	232		compensation for actual and necessary travel and living expenses
229	233		incurred by a volunteer on a deployment using money available for
230	234		that purpose.
231	235		(e) The department may establish a fee schedule for
232	236		participating entities receiving incident response team
233	237		assistance. The amount of fees collected may not exceed the
234	238		department's costs to operate the incident response team.
235	239		Sec. 2054.52008. STATUS OF VOLUNTEER; LIABILITY. (a) A
236	240		volunteer is not an agent, employee, or independent contractor of
237	241		this state for any purpose and has no authority to obligate this
238	242		state to a third party.
239	243		(b) This state is not liable to a volunteer for personal
240	244		injury or property damage sustained by the volunteer that arises
241	245		from participation in the incident response team.
242	246		Sec. 2054.52009. CIVIL LIABILITY. A volunteer who in good
243	247		faith provides professional services in response to a cybersecurity
244	248		event is not liable for civil damages as a result of the volunteer's
245	249		acts or omissions in providing the services, except for wilful and
246	250		wanton misconduct. This immunity is limited to services provided
247	251		during the time of deployment for a cybersecurity event.
248	252		Sec. 2054.52010. CONFIDENTIAL INFORMATION. Information
249	253		written, produced, collected, assembled, or maintained by the
250	254		department, a participating entity, the cybersecurity council, or a
251	255		volunteer in the implementation of this subchapter is confidential
252	256		and not subject to disclosure under Chapter 552 if the information:
253	257		(1) contains the contact information for a volunteer;
254	258		(2) identifies or provides a means of identifying a
255	259		person who may, as a result of disclosure of the information, become
256	260		a victim of a cybersecurity event;
257	261		(3) consists of a participating entity's cybersecurity
258	262		plans or cybersecurity-related practices; or
259	263		(4) is obtained from a participating entity or from a
260	264		participating entity's computer system in the course of providing
261	265		assistance under this subchapter.
262	266		SECTION 7. Section 2054.515, Government Code, is amended to
263	267		read as follows:
264	268		Sec. 2054.515. AGENCY INFORMATION SECURITY ASSESSMENT AND
265	269		REPORT. (a) At least once every two years, each state agency shall
266	270		conduct an information security assessment of the agency's:
267	271		(1) information resources systems, network systems,
268	272		digital data storage systems, digital data security measures, and
269	273		information resources vulnerabilities; and
270	274		(2) data governance program with participation from
271	275		the agency's data management officer, if applicable, and in
272	276		accordance with requirements established by department rule.
273	277		(b) Not later than November 15 of each even-numbered year
274	278		[December 1 of the year in which a state agency conducts the
275	279		assessment under Subsection (a)], the agency shall report the
276	280		results of the assessment to:
277	281		(1) the department; and
278	282		(2) on request, the governor, the lieutenant governor,
279	283		and the speaker of the house of representatives.
280	284		(c) The department by rule shall [may] establish the
281	285		requirements for the information security assessment and report
282	286		required by this section.
283	287		(d) The report and all documentation related to the
284	288		information security assessment and report are confidential and not
285	289		subject to disclosure under Chapter 552. The state agency or
286	290		department may redact or withhold the information as confidential
287	291		under Chapter 552 without requesting a decision from the attorney
288	292		general under Subchapter G, Chapter 552.
289	293		SECTION 8. Section 2054.601, Government Code, is amended to
290	294		read as follows:
291	295		Sec. 2054.601. USE OF NEXT GENERATION TECHNOLOGY. Each
292	296		state agency and local government shall, in the administration of
293	297		the agency or local government, consider using next generation
294	298		technologies, including cryptocurrency, blockchain technology,
295	299		robotic process automation, and artificial intelligence.
296	300		SECTION 9. Chapter 2059, Government Code, is amended by
297	301		adding Subchapter E to read as follows:
298	302		SUBCHAPTER E. REGIONAL NETWORK SECURITY CENTERS
299	303		Sec. 2059.201. ELIGIBLE PARTICIPATING ENTITIES. A state
300	304		agency or an entity listed in Sections 2059.058(b)(3)-(5) is
301	305		eligible to participate in cybersecurity support and network
302	306		security provided by a regional network security center under this
303	307		subchapter.
304	308		Sec. 2059.202. ESTABLISHMENT OF REGIONAL NETWORK SECURITY
305	309		CENTERS. (a) Subject to Subsection (b), the department may
306	310		establish regional network security centers, under the
307	311		department's managed security services framework established by
308	312		Section 2054.0594(d), to assist in providing cybersecurity support
309	313		and network security to regional offices or locations for state
310	314		agencies and other eligible entities that elect to participate in
311	315		and receive services through the center.
312	316		(b) The department may establish more than one regional
313	317		network security center only if the department determines the first
314	318		center established by the department successfully provides to state
315	319		agencies and other eligible entities the services the center has
316	320		contracted to provide.
317	321		(c) The department shall enter into an interagency contract
318	322		in accordance with Chapter 771 or an interlocal contract in
319	323		accordance with Chapter 791, as appropriate, with an eligible
320	324		participating entity that elects to participate in and receive
321	325		services through a regional network security center.
322	326		Sec. 2059.203. REGIONAL NETWORK SECURITY CENTER LOCATIONS
323	327		AND PHYSICAL SECURITY. (a) In creating and operating a regional
324	328		network security center, the department shall partner with a
325	329		university system or institution of higher education as defined by
326	330		Section 61.003, Education Code, other than a public junior college.
327	331		The system or institution shall:
328	332		(1) serve as an education partner with the department
329	333		for the regional network security center; and
330	334		(2) enter into an interagency contract with the
331	335		department in accordance with Chapter 771.
332	336		(b) In selecting the location for a regional network
333	337		security center, the department shall select a university system or
334	338		institution of higher education that has supportive educational
335	339		capabilities.
336	340		(c) A university system or institution of higher education
337	341		selected to serve as a regional network security center shall
338	342		control and monitor all entrances to and critical areas of the
339	343		center to prevent unauthorized entry. The system or institution
340	344		shall restrict access to the center to only authorized individuals.
341	345		(d) A local law enforcement entity or any entity providing
342	346		security for a regional network security center shall monitor
343	347		security alarms at the regional network security center subject to
344	348		the availability of that service.
345	349		(e) The department and a university system or institution of
346	350		higher education selected to serve as a regional network security
347	351		center shall restrict operational information to only center
348	352		personnel, except as provided by Chapter 321.
349	353		Sec. 2059.204. REGIONAL NETWORK SECURITY CENTERS SERVICES
350	354		AND SUPPORT. The department may offer the following managed
351	355		security services through a regional network security center:
352	356		(1) real-time network security monitoring to detect
353	357		and respond to network security events that may jeopardize this
354	358		state and the residents of this state;
355	359		(2) alerts and guidance for defeating network security
356	360		threats, including firewall configuration, installation,
357	361		management, and monitoring, intelligence gathering, and protocol
358	362		analysis;
359	363		(3) immediate response to counter network security
360	364		activity that exposes this state and the residents of this state to
361	365		risk, including complete intrusion detection system installation,
362	366		management, and monitoring for participating entities;
363	367		(4) development, coordination, and execution of
364	368		statewide cybersecurity operations to isolate, contain, and
365	369		mitigate the impact of network security incidents for participating
366	370		entities; and
367	371		(5) cybersecurity educational services.
368	372		Sec. 2059.205. NETWORK SECURITY GUIDELINES AND STANDARD
369	373		OPERATING PROCEDURES. (a) The department shall adopt and provide
370	374		to each regional network security center appropriate network
371	375		security guidelines and standard operating procedures to ensure
372	376		efficient operation of the center with a maximum return on the
373	377		state's investment.
374	378		(b) The department shall revise the standard operating
375	379		procedures as necessary to confirm network security.
376	380		(c) Each eligible participating entity that elects to
377	381		participate in a regional network security center shall comply with
378	382		the network security guidelines and standard operating procedures.
379	383		SECTION 10. Subtitle B, Title 10, Government Code, is
380	384		amended by adding Chapter 2062 to read as follows:
381	385		CHAPTER 2062. RESTRICTIONS ON STATE AGENCY USE OF CERTAIN
382	386		INDIVIDUAL-IDENTIFYING INFORMATION
383	387		Sec. 2062.001. DEFINITIONS. In this chapter:
384	388		(1) "Biometric identifier" has the meaning assigned by
385	389		Section 560.001.
386	390		(2) "State agency" means a department, commission,
387	391		board, office, council, authority, or other agency in the
388	392		executive, legislative, or judicial branch of state government,
389	393		including a university system or institution of higher education as
390	394		defined by Section 61.003, Education Code, that is created by the
391	395		constitution or a statute of this state.
392	396		Sec. 2062.002. CONSENT REQUIRED BEFORE ACQUIRING,
393	397		RETAINING, OR DISSEMINATING CERTAIN INFORMATION; RECORDS. (a)
394	398		Except as provided by Subsection (b), a state agency may not:
395	399		(1) use global positioning system technology,
396	400		individual contact tracing, or technology designed to obtain
397	401		biometric identifiers to acquire information that alone or in
398	402		conjunction with other information identifies an individual or the
399	403		individual's location without the individual's written or
400	404		electronic consent;
401	405		(2) retain information with respect to an individual
402	406		described by Subdivision (1) without the individual's written or
403	407		electronic consent; or
404	408		(3) disseminate to a person the information described
405	409		by Subdivision (1) with respect to an individual unless the state
406	410		agency first obtains the individual's written or electronic
407	411		consent.
408	412		(b) A state agency may acquire, retain, and disseminate
409	413		information described by Subsection (a) with respect to an
410	414		individual without the individual's written or electronic consent
411	415		if the acquisition, retention, or dissemination is:
412	416		(1) required or permitted by a federal statute or by a
413	417		state statute other than Chapter 552; or
414	418		(2) made by or to a law enforcement agency for a law
415	419		enforcement purpose.
416	420		(c) A state agency shall retain the written or electronic
417	421		consent of an individual obtained as required under this section in
418	422		the agency's records until the contract or agreement under which
419	423		the information is acquired, retained, or disseminated expires.
420	424		SECTION 11. (a) Not later than December 1, 2021, the
421	425		Department of Information Resources shall:
422	426		(1) establish the state risk and authorization
423	427		management program as required by Section 2054.0593, Government
424	428		Code, as added by this Act;
425	429		(2) establish the framework for regional
426	430		cybersecurity working groups to execute mutual aid agreements as
427	431		required under Section 2054.0594(d), Government Code, as added by
428	432		this Act; and
429	433		(3) establish the Texas volunteer incident response
430	434		team as required by Subchapter N-2, Chapter 2054, Government Code,
431	435		as added by this Act.
432	436		(b) Each state agency shall ensure that:
433	437		(1) each contract for cloud computing services the
434	438		agency enters into or renews on or after January 1, 2022, complies
435	439		with Section 2054.0593, Government Code, as added by this Act; and
436	440		(2) each contract subject to Section 2054.138,
437	441		Government Code, as added by this Act, that is executed on or after
438	442		the effective date of this Act complies with that section.
439	443		(c) Each state agency subject to Section 2054.137,
440	444		Government Code, as added by this Act, shall designate a data
441	445		management officer as soon as practicable after the effective date
442	446		of this Act.
443	447		(d) Each state agency subject to Section 2054.161,
444	448		Government Code, as added by this Act, shall ensure each
445	449		information resources technology project initiated on or after the
446	450		effective date of this Act complies with that section.
447	451		SECTION 12. Not later than October 15, 2022, the Department
448	452		of Information Resources shall submit to the standing committees of
449	453		the senate and house of representatives with primary jurisdiction
450	454		over state agency cybersecurity a report on the department's
451	455		activities and recommendations related to the Texas volunteer
452	456		incident response team established as required by Subchapter N-2,
453	457		Chapter 2054, Government Code, as added by this Act.
454	458		SECTION 13. Chapter 2062, Government Code, as added by this
455	459		Act, applies only to information acquired, retained, or
456	460		disseminated by a state agency to another person on or after the
457	461		effective date of this Act.
458	462		SECTION 14. (a) Except as provided by Subsection (b) of
459	463		this section, this Act takes effect immediately if it receives a
460	464		vote of two-thirds of all the members elected to each house, as
461	465		provided by Section 39, Article III, Texas Constitution. If this
462	466		Act does not receive the vote necessary for immediate effect, this
463	467		Act takes effect September 1, 2021.
464	468		(b) Chapter 2062, Government Code, as added by this Act,
465	469		takes effect September 1, 2021.
466		-	______________________________ ______________________________
467		-	President of the Senate Speaker of the House
468		-	I hereby certify that S.B. No. 475 passed the Senate on
469		-	April 19, 2021, by the following vote: Yeas 31, Nays 0; and that
470		-	the Senate concurred in House amendment on May 28, 2021, by the
471		-	following vote: Yeas 31, Nays 0.
472		-	______________________________
473		-	Secretary of the Senate
474		-	I hereby certify that S.B. No. 475 passed the House, with
475		-	amendment, on May 25, 2021, by the following vote: Yeas 147,
476		-	Nays 0, one present not voting.
477		-	______________________________
478		-	Chief Clerk of the House
479		-	Approved:
480		-	______________________________
481		-	Date
482		-	______________________________
483		-	Governor