The bill creates within the joint technology committee a subcommittee on data privacy and cyber-security (subcommittee) to consider:
- Whether state governmental agencies are collecting or retaining data that exceeds what is necessary and appropriate for such agencies to perform their functions;
- Who has access to sensitive data, the extent of such access, and appropriate measures to protect sensitive data; and
- Measures to protect sensitive data against unauthorized access, disclosure, use, modification, or destruction.
The subcommittee shall submit its findings to the joint technology committee and to the general assembly by January 1, 2018. The subcommittee is repealed, effective July 1, 2018.
(Note: This summary applies to this bill as introduced.)