AB 809 — Information security.

Summary

Existing law establishes the Office of Information Security within the Department of Technology for the purpose of ensuring the confidentiality, integrity, and availability of state systems and applications and to promote and protect privacy as part of the development and operations of state systems and applications to ensure the trust of the residents of this state. The law requires an entity within the executive branch that is under the direct authority of the Governor to implement the policies and procedures issued by the office. The law additionally authorizes the office to conduct, or require to be conducted, an independent security assessment of every state agency, department, or office, as specified. The law authorizes the Military Department to perform an independent security assessment of any state agency, department, or office. This bill would require state agencies not covered by the provisions described above to adopt and implement information security and privacy policies, standards, and procedures based upon standards issued by the National Institute of Standards and Technology and the Federal Information Processing Standards, as specified. This bill would require these state agencies to perform a comprehensive, independent security assessment every 2 years and would authorize them to contract with the Military Department for that purpose. This bill would require these state agencies to certify, by February 1 annually, to the Assembly Committee on Privacy and Consumer Protection that the agency is in compliance with all adopted policies, standards, and procedures and to include a corrective action plan to address any outstanding deficiencies, the estimated dates of compliance, and any additional resources it requires in order to cure each deficiency. The bill would require that the certification be kept confidential and not be disclosed, except that the information and records would be allowed to be shared with the members of the Legislature and legislative employees, at the discretion of the chairperson of the committee. Because the required certification would be made under penalty of perjury, the bill would expand the crime of perjury and would thereby impose a state-mandated local program. Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest. This bill would make legislative findings to that effect. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that no reimbursement is required by this act for a specified reason.

Bill Text

• Amended 05/05/21 - Amended Assembly Current pdf May 05, 2021
• Amended 03/25/21 - Amended Assembly pdf March 25, 2021
• Introduced 02/16/21 - Introduced pdf February 16, 2021
• AB809 View text html

Action History

1. February 01, 2022

   From committee: Filed with the Chief Clerk pursuant to Joint Rule 56.

2. January 31, 2022

   Died pursuant to Art. IV, Sec. 10(c) of the Constitution.

3. May 20, 2021

   In committee: Held under submission.

4. May 12, 2021

   In committee: Set, first hearing. Referred to APPR. suspense file.

5. May 06, 2021

   Re-referred to Com. on APPR.

6. May 05, 2021

   Read second time and amended.

7. May 04, 2021

   From committee: Amend, and do pass as amended and re-refer to Com. on APPR. (Ayes 7. Noes 0.) (April 28).

8. April 08, 2021

   From committee: Do pass and re-refer to Com. on A. & A.R. with recommendation: To Consent Calendar. (Ayes 11. Noes 0.) (April 8). Re-referred to Com. on A. & A.R.

9. March 26, 2021

   Re-referred to Com. on P. & C.P.

10. March 25, 2021

    From committee chair, with author's amendments: Amend, and re-refer to Com. on P. & C.P. Read second time and amended.

11. February 25, 2021

    Referred to Coms. on P. & C.P. and A. & A.R.

12. February 17, 2021

    From printer. May be heard in committee March 19.

13. February 16, 2021

    Read first time. To print.

Sponsors

• Jacqui Irwin · Primary

Votes

Subjects