AB 2720 — State government: Office of Information Security: cybersecurity vulnerability reporting.
Last action — In committee: Held under submission.
-
✓Introduced
-
2In Committee
-
3Passed Assembly
-
4Passed Senate
-
5To Executive
-
6Enacted
This bill died with 2015-2016 Regular Session. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.
This bill is no longer active — its legislative session has ended, so there is no live prognosis. It would have to be reintroduced in the current session to move again.
Summary
Existing law establishes the Office of Information Security in the Department of Technology, the purpose of which is to ensure the confidentiality, integrity, and availability of state systems and applications. This bill would authorize the office to establish a Cybersecurity Vulnerability Reporting Reward Program for the purpose of soliciting eligible individuals to identify and report previously unknown vulnerabilities in state computer networks and making a monetary award for an eligible report, subject to appropriation of sufficient funds by the Legislature. The bill would require the office to develop policies, standards, and procedures for the administration of the program, including eligibility and award criteria. The bill would specify that the minimum award shall be $100, and the maximum award shall be $5,000. The bill would prohibit an individual from receiving an award unless he or she, among other things, has not attempted to access another person's data, or otherwise has not engaged in any unlawful, disruptive, or damaging activity in the course of investigating the existence of the suspected vulnerability and is not a state employee or contractor, or the spouse or immediate family member of a state employee or contractor.
Bill Text
- Amended 03/17/16 - Amended Assembly Current pdf March 17, 2016
- Introduced 02/19/16 - Introduced pdf February 19, 2016
- AB2720 View text html
Action History
-
In committee: Held under submission.
-
In committee: Set, first hearing. Referred to APPR. suspense file.
-
From committee: Do pass and re-refer to Com. on APPR. (Ayes 11. Noes 0.) (April 5). Re-referred to Com. on APPR.
-
Re-referred to Com. on P. & C.P.
-
From committee chair, with author's amendments: Amend, and re-refer to Com. on P. & C.P. Read second time and amended.
-
Referred to Com. on P. & C.P.
-
Read first time.
-
From printer. May be heard in committee March 22.
-
Introduced. To print.
Sponsors
- Chau · Primary
Sponsorship breakdown
Export CSV (upgrade) →1 sponsors · 0 co-sponsors · 121 not signed on
Sponsors (1)
- Chau
Co-sponsors (0)
None.
Not signed on (121)
121 members have not signed on to this bill.
Show all 121 →"Not signed on" means a member has not sponsored or co-sponsored this bill — it does not imply opposition. Members flagged Voted No have a recorded No vote on this bill.
Votes
| Party | Yea | Nay | Present | Not Voting |
|---|---|---|---|---|
| Unaffiliated | 10 | 0 | 0 | 0 |
| Democratic | 1 | 0 | 0 | 0 |
| Total | 11 | 0 | 0 | 0 |
| % of votes cast | 100% | 0% | 0% | 0% |
How each member voted (11)
| Member | Party | Vote |
|---|---|---|
| Baker | — | Yea |
| Olsen | — | Yea |
| Wilk | — | Yea |
| Chang | — | Yea |
| Gatto | — | Yea |
| Low | — | Yea |
| Chau | — | Yea |
| Cooper | — | Yea |
| Dababneh | — | Yea |
| Gordon | — | Yea |
| Calderon, Lisa | Democratic | Yea |
Subjects
Frequently asked questions
- What does AB 2720 do?
- Existing law establishes the Office of Information Security in the Department of Technology, the purpose of which is to ensure the confidentiality, integrity, and availability of state systems and applications. This bill would authorize the office to establish a Cybersecurity Vulnerability Reporting Reward Program for the purpose of soliciting eligible individuals to identify and report previously unknown vulnerabilities in state computer networks and making a monetary award for an eligible report, subject to appropriation of sufficient funds by the Legislature. The bill would require the office to develop policies, standards, and procedures for the administration of the program, including eligibility and award criteria. The bill would specify that the minimum award shall be $100, and the maximum award shall be $5,000. The bill would prohibit an individual from receiving an award unless he or she, among other things, has not attempted to access another person's data, or otherwise has not engaged in any unlawful, disruptive, or damaging activity in the course of investigating the existence of the suspected vulnerability and is not a state employee or contractor, or the spouse or immediate family member of a state employee or contractor.
- Who sponsors AB 2720?
- AB 2720 is sponsored by Chau.
- What is the current status of AB 2720?
- This bill died with 2015-2016 Regular Session. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.
- Where can I track AB 2720?
- Track AB 2720 free on One Click Politics — get push/email alerts when it moves.
Make your voice heard on AB 2720
Find the representatives who decide this bill and tell them where you stand — for yourself, or mobilize your whole list in one click with One Click Politics advocacy software.
Stay ahead of AB 2720
Last checked for changes 2 months ago · updated continuously
One Click Politics tracks every bill in Congress and all 50 states.
Track this bill →