Back to Iowa

HF756 • 2026

A bill for an act relating to matters under the purview of the department of management, making appropriations, and including applicability provisions.(Formerly HSB 72 ; See HF 1028 .)

A bill for an act relating to matters under the purview of the department of management, making appropriations, and including applicability provisions.(Formerly HSB 72 ; See HF 1028 .)

Budget
Passed Legislature

This bill passed both chambers and reached final enrollment, even if later executive action is not shown here.

Sponsor
COMMITTEE ON STATE GOVERNMENT
Last action
2025-04-28
Official status
Withdrawn. H.J. 1073 .
Effective date
Not listed

Plain English Breakdown

Using official source text because the generated explanation was unavailable or could not be confirmed against the official bill text.

A bill for an act relating to matters under the purview of the department of management, making appropriations, and including applicability provisions.(Formerly HSB 72 ; See HF 1028 .)

A bill for an act relating to matters under the purview of the department of management, making appropriations, and including applicability provisions.(Formerly HSB 72 ; See HF 1028 .)

What This Bill Does

  • A bill for an act relating to matters under the purview of the department of management, making appropriations, and including applicability provisions.(Formerly HSB 72 ; See HF 1028 .)

Limits and Unknowns

  • This entry is temporarily using official source text because the generated explanation could not be confirmed against the official bill text during the last sync.

Bill History

  1. 2025-04-28 Iowa Legislature

    Withdrawn. H.J. 1073 .

  2. 2025-04-17 Iowa Legislature

    Committee report approving bill, renumbered as HF 1028 .

  3. 2025-04-16 Iowa Legislature

    Committee vote: Yeas 24. Nays, 0. Excused, 1. H.J. 949 .

  4. 2025-04-16 Iowa Legislature

    Committee report, recommending amendment and passage. H.J. 949 .

  5. 2025-03-26 Iowa Legislature

    Subcommittee recommends amendment and passage.

  6. 2025-03-24 Iowa Legislature

    Subcommittee Meeting: 03/26/2025 8:30AM House Lounge.

  7. 2025-03-24 Iowa Legislature

    Subcommittee: Bergan, Mohr, G. and Nielsen. H.J. 790 .

  8. 2025-03-05 Iowa Legislature

    Introduced, referred to Appropriations. H.J. 514 .

Official Summary Text

A bill for an act relating to matters under the purview of the department of management, making appropriations, and including applicability provisions.(Formerly HSB 72 ; See HF 1028 .)

Current Bill Text

Read the full stored bill text
House

File

756

-

Introduced

HOUSE

FILE

756

BY

COMMITTEE

ON

STATE

GOVERNMENT

(SUCCESSOR

TO

HSB

72)

A

BILL

FOR

An

Act

relating

to

matters

under

the

purview

of

the

department

1

of

management,

making

appropriations,

and

including

2

applicability

provisions.

3

BE

IT

ENACTED

BY

THE

GENERAL

ASSEMBLY

OF

THE

STATE

OF

IOWA:

4

TLSB

1362HV

(2)

91

sc/ns

H.F.

756

Section

1.

Section

8.23,

Code

2025,

is

amended

by

adding

the

1

following

new

subsection:

2

NEW

SUBSECTION

.

3.

A

transmittal

to

the

department

of

3

management

pursuant

to

this

section,

and

any

document

created

4

based

on

such

transmittal,

shall

be

considered

confidential

5

until

the

governor

transmits

the

budget

in

accordance

with

6

section

8.21.

7

Sec.

2.

Section

8.57C,

subsections

2,

3,

and

4,

Code

2025,

8

are

amended

to

read

as

follows:

9

2.

Moneys

in

the

fund

in

a

fiscal

year

shall

be

used

as

10

appropriated

by

the

general

assembly

for

the

acquisition

11

of

computer

hardware

and

software,

software

development,

12

telecommunications

equipment,

and

maintenance

and

lease

13

agreements

associated

with

technology

components

and

for

the

14

purchase

of

equipment

intended

to

provide

an

uninterruptible

15

power

supply

are

appropriated

to

the

department

of

management

16

to

provide

a

stable

funding

source

for

implementation

costs

17

of

state

information

technology

projects

that

enhance

the

18

state’s

technology

infrastructure,

improve

government

services,

19

and

promote

innovation

and

economic

development,

including

20

but

not

limited

to

new

information

technology

projects

21

and

infrastructure

replacement

efforts

of

a

department

or

22

establishment

.

23

a.

The

department

shall

prioritize

proposed

projects

based

24

on

all

of

the

following

considerations:

25

(1)

Whether

the

project

aligns

with

the

state’s

strategic

26

priorities.

27

(2)

Whether

the

project

promotes

or

introduces

new

28

technology

or

significantly

improves

an

existing

system.

29

(3)

Whether

the

project

is

feasible

and

whether

the

30

department

or

establishment

has

established

readiness

for

the

31

project

to

proceed,

including

a

clear

assessment

of

timelines,

32

budgets,

and

measurable

outcomes.

33

(4)

Whether

the

project

includes

a

clear

change

management

34

strategy

to

support

user

adoption

and

aligns

with

lean

35

-1-

LSB

1362HV

(2)

91

sc/ns

1/

15

H.F.

756

enterprise

principles

to

maximize

value,

minimize

waste,

and

1

ensure

continuous

improvement.

2

(5)

Whether

the

project

provides

a

positive

return

on

3

investment,

considering

both

financial

returns

and

nonfinancial

4

benefits

such

as

improved

public

safety,

education,

or

health

5

care.

6

(6)

Whether

the

project

results

in

infrastructure

that

is

7

scalable

across

the

state

enterprise.

8

(7)

Whether

the

department

or

establishment

has

identified

9

how

the

completed

project

will

be

sustained

beyond

the

initial

10

funding

period.

11

(8)

Whether

the

project

improves

access

to

governmental

12

services,

particularly

in

rural

communities.

13

(9)

Whether

the

project

involves

an

infrastructure

project

14

as

opposed

to

maintenance

or

standard

upgrades

of

existing

15

technology.

16

b.

The

department

shall

provide

a

prioritized

list

of

17

proposed

projects

for

funding

to

the

governor,

who

shall

use

18

the

list

in

developing

a

budgetary

recommendation

for

the

19

general

assembly

pursuant

to

section

8.21.

20

3.

a.

There

is

appropriated

from

the

general

fund

of

the

21

state

to

the

technology

reinvestment

fund

for

the

fiscal

year

22

beginning

July

1,

2025,

and

for

each

subsequent

fiscal

year

23

thereafter,

the

sum

of

seventeen

million

five

hundred

thousand

24

dollars.

25

b.

There

is

appropriated

from

the

rebuild

Iowa

26

infrastructure

fund

for

the

fiscal

year

beginning

July

1,

2023,

27

and

ending

June

30,

2024,

the

sum

of

eighteen

million

three

28

hundred

ninety

thousand

two

hundred

ninety

dollars

to

the

29

technology

reinvestment

fund,

notwithstanding

section

8.57,

30

subsection

3

,

paragraph

“c”

.

31

c.

There

is

appropriated

from

the

rebuild

Iowa

32

infrastructure

fund

for

the

fiscal

year

beginning

July

1,

2024,

33

and

ending

June

30,

2025,

the

sum

of

twenty-one

million

one

34

hundred

thirty-one

thousand

eight

hundred

seventy-three

dollars

35

-2-

LSB

1362HV

(2)

91

sc/ns

2/

15

H.F.

756

to

the

technology

reinvestment

fund,

notwithstanding

section

1

8.57,

subsection

3

,

paragraph

“c”

.

2

b.

Notwithstanding

section

8.33,

moneys

in

the

fund

3

that

remain

unencumbered

or

unobligated

at

the

close

of

a

4

fiscal

year

shall

not

revert

but

shall

remain

available

for

5

expenditure

for

the

purposes

designated.

Notwithstanding

6

section

12C.7,

subsection

2,

interest

or

earnings

on

moneys

in

7

the

fund

shall

be

credited

to

the

fund.

8

4.

Annually,

on

On

or

before

January

15

of

each

year,

a

9

state

agency

that

received

an

appropriation

from

this

fund

10

the

department

of

management

shall

report

to

the

legislative

11

services

agency

and

the

department

of

management

general

12

assembly

the

status

of

all

projects

funded

under

this

section

13

that

have

been

completed

since

the

previous

report

was

14

submitted

or

that

are

in

progress.

The

report

shall

must

15

include

a

description

of

the

project,

the

progress

of

work

16

completed,

the

total

estimated

cost

of

the

project,

a

list

of

17

all

revenue

sources

being

used

to

fund

the

project,

the

amount

18

of

funds

moneys

expended,

the

amount

of

funds

moneys

obligated,

19

and

the

date

the

project

was

completed

or

an

estimated

20

completion

date

of

the

project,

where

applicable.

21

Sec.

3.

Section

8.78,

Code

2025,

is

amended

to

read

as

22

follows:

23

8.78

Background

checks.

24

An

applicant

for

employment

with

the

department,

or

25

an

applicant

for

employment

with

a

supported

entity

for

a

26

position

as

information

technology

staff,

may

be

subject

to

a

27

background

investigation

by

the

department.

The

background

28

investigation

may

include,

without

limitation,

a

work

history,

29

financial

review,

request

for

criminal

history

data,

and

30

national

criminal

history

check

through

the

federal

bureau

of

31

investigation.

In

addition,

a

contractor,

vendor,

employee,

or

32

any

other

individual

performing

work

for

the

department,

or

an

33

individual

on

the

information

technology

staff

of

a

supported

34

entity,

may

be

subject

to

a

national

criminal

history

check

35

-3-

LSB

1362HV

(2)

91

sc/ns

3/

15

H.F.

756

through

the

federal

bureau

of

investigation

at

least

once

1

every

ten

five

years,

including,

without

limitation,

any

time

2

the

department

or

supported

entity

has

reason

to

believe

an

3

individual

has

been

convicted

of

a

crime.

The

department

may

4

request

the

national

criminal

history

check

and,

if

requested,

5

shall

provide

the

individual’s

fingerprints

to

the

department

6

of

public

safety

for

submission

through

the

state

criminal

7

history

repository

to

the

federal

bureau

of

investigation.

8

The

individual

shall

authorize

release

of

the

results

of

the

9

national

criminal

history

check

to

the

department

and

the

10

applicable

supported

entity.

The

department

shall

pay

the

11

actual

cost

of

the

fingerprinting

and

national

criminal

history

12

check,

if

any,

unless

otherwise

agreed

as

part

of

a

contract

13

between

the

department

or

supported

entity

and

a

vendor

or

14

contractor

performing

work

for

the

department

or

supported

15

entity.

The

results

of

a

criminal

history

check

conducted

16

pursuant

to

this

section

shall

not

be

considered

a

public

17

record

under

chapter

22

.

18

Sec.

4.

NEW

SECTION

.

8.94

Contracts

——

prohibited

terms.

19

Provisions

included

in

a

contract

entered

into

pursuant

to

20

this

subchapter

that

impose

terms

or

conditions

prohibited

by

21

this

section

are

void

as

contrary

to

public

policy.

Such

a

22

contract

shall

be

interpreted

and

enforced

as

if

the

contract

23

did

not

include

the

prohibited

terms

or

conditions.

Prohibited

24

terms

and

conditions

include

all

of

the

following:

25

1.

A

provision

requiring

the

department

or

a

supported

26

entity

to

defend,

indemnify,

hold

harmless

another

person,

or

27

otherwise

assume

the

debt

or

liability

of

another

person

in

28

violation

of

Article

VII,

section

1,

of

the

Constitution

of

the

29

State

of

Iowa.

30

2.

A

provision

that

seeks

to

impose

a

term

that

is

unknown

31

to

the

department

or

supported

entity

at

the

time

of

signing

32

the

contract

or

that

can

be

unilaterally

changed

by

an

entity

33

other

than

the

department

or

a

supported

entity.

34

3.

A

provision

that

violates

chapter

13

by

not

allowing

35

-4-

LSB

1362HV

(2)

91

sc/ns

4/

15

H.F.

756

the

department

or

a

supported

entity

to

participate

in

its

own

1

defense

through

representation

by

the

attorney

general.

2

4.

A

provision

that

grants

to

a

person

other

than

the

3

attorney

general

the

authority

to

convey

to

a

court

or

litigant

4

the

state’s

consent

to

any

settlement

of

a

suit

involving

the

5

contract

when

such

settlement

could

impose

liability

on

the

6

state.

7

5.

A

provision

that

specifies

that

the

contract

is

governed

8

by

the

laws

of

a

foreign

state

or

nation.

9

6.

A

provision

that

claims

blanket

confidentiality

of

the

10

contract’s

terms.

11

7.

A

provision

that

claims

that

payment

terms,

including

but

12

not

limited

to

cost

proposals

or

other

pricing

information,

of

13

the

contract

are

confidential.

14

8.

A

provision

that

authorizes

or

requires

a

venue

for

15

litigation

other

than

an

appropriate

state

or

federal

court

16

sitting

in

Iowa.

17

9.

A

provision

that

requires

the

department

or

a

supported

18

entity

to

pay

attorney

fees,

court

costs,

or

other

litigation

19

expenses

in

the

event

of

a

contractual

dispute.

20

10.

A

provision

that

imposes

on

the

department

or

a

21

supported

entity

binding

arbitration

or

any

other

binding

22

extrajudicial

dispute

resolution

process

in

which

the

final

23

resolution

is

not

determined

by

the

state.

24

11.

A

provision

that

waives

the

department’s

or

a

supported

25

entity’s

right

to

a

jury

trial.

26

12.

A

provision

that

obligates

the

department

or

a

supported

27

entity

to

pay

late

payment

charges

not

consistent

with

section

28

8A.514,

interest

greater

than

allowed

under

section

8A.514

or

29

other

applicable

law,

or

any

cancellation

charges,

as

such

30

charges

constitute

pledges

of

the

state’s

credit.

31

13.

A

provision

that

obligates

the

department

or

a

supported

32

entity

to

pay

a

tax.

33

14.

A

provision

that

imposes

a

prior

notice

obligation

34

on

the

department

or

a

supported

entity

as

a

condition

for

35

-5-

LSB

1362HV

(2)

91

sc/ns

5/

15

H.F.

756

the

automatic

renewal

of

a

software

license.

The

department

1

or

a

supported

entity

may

provide

notice

of

its

intent

to

2

terminate

a

software

license

at

any

time

before

the

renewal

3

date

established

in

the

contract.

4

15.

A

provision

that

obligates

the

department

or

a

supported

5

entity

to

accept

risk

of

loss

before

the

receipt

of

items

or

6

goods.

7

16.

A

provision

that

obligates

the

department

or

a

supported

8

entity

to

have

commercial

insurance.

9

17.

A

provision

that

obligates

the

department

or

a

supported

10

entity

to

grant

to

a

nongovernmental

entity

full

or

partial

11

ownership

of

intellectual

property

developed

pursuant

to

the

12

contract

when

the

intellectual

property

is

developed

in

whole

13

or

in

part

using

federal

funding.

14

18.

A

provision

that

limits

the

time

in

which

the

department

15

or

a

supported

entity

may

bring

a

legal

claim

under

the

16

contract

to

a

period

shorter

than

that

provided

in

Iowa

law.

17

19.

A

boilerplate

provision

included

in

transactional

18

documents

received

by

the

department

or

a

supported

entity

that

19

seeks

to

alter

the

terms

of

the

contract

or

to

impose

new

terms

20

in

the

contract.

21

Sec.

5.

NEW

SECTION

.

8.95

Contracts

——

required

terms.

22

All

of

the

following

provisions

shall

be

deemed

to

be

23

included

in

a

contract

entered

into

by

the

department

or

a

24

supported

entity

under

this

subchapter:

25

1.

Governing

law.

The

contract

shall

be

governed

by

26

the

laws

of

the

state

of

Iowa,

without

giving

effect

to

any

27

conflicts

of

law

principles

of

Iowa

law

that

may

require

the

28

application

of

another

jurisdiction’s

law.

29

2.

Venue.

Any

litigation

commenced

in

connection

with

the

30

contract

shall

be

brought

and

maintained

in

an

appropriate

31

state

or

federal

court

sitting

in

Iowa.

32

Sec.

6.

NEW

SECTION

.

8.96

Contracts

——

limitation

of

33

liability

——

prohibited

terms.

34

Notwithstanding

section

8A.311,

subsection

22,

and

rules

35

-6-

LSB

1362HV

(2)

91

sc/ns

6/

15

H.F.

756

adopted

pursuant

to

that

subsection,

the

director

may

include

1

a

contractual

limitation

of

vendor

liability

in

information

2

technology

goods

and

services

contracts.

A

contractual

3

limitation

of

vendor

liability

must

take

into

consideration

the

4

public

interest

and

the

mitigation

of

risks

associated

with

the

5

use

of

information

technology

goods

or

services.

Any

portion

6

of

a

contractual

limitation

of

vendor

liability

that

includes

7

a

repudiation

of

all

liability

for

cybersecurity

incidents

or

8

a

limitation

on

the

vendor’s

liability

for

intentional

torts,

9

criminal

acts,

fraudulent

conduct,

intentional

or

willful

10

misconduct,

gross

negligence,

death,

bodily

injury,

damage

to

11

real

or

personal

property,

intellectual

property

violations,

12

liquidated

damages,

compliance

with

applicable

laws,

violations

13

of

confidential

information

obligations,

or

contractual

14

obligations

of

the

vendor

pertaining

to

indemnification

shall

15

be

void

as

a

matter

of

law

as

contrary

to

public

policy.

A

16

contractual

limit

of

vendor

liability

that

does

not

apply

17

equally

to

the

contracted

parties

or

that

limits

a

vendor’s

18

liability

to

less

than

the

contract

value

inclusive

of

all

19

possible

extensions

is

void

as

a

matter

of

law

as

contrary

to

20

public

policy.

21

Sec.

7.

NEW

SECTION

.

8.97

Confidentiality

of

communications

22

with

chief

information

security

officer.

23

In

the

interest

of

facilitating

communication

between

24

the

chief

information

security

officer

and

other

entities

25

concerning

security

incidents

and

security

breaches,

all

such

26

communications

and

any

documents

generated

based

in

whole

or

in

27

part

on

such

communications

are

confidential.

Notwithstanding

28

chapter

22

or

any

other

provision

of

law

to

the

contrary,

the

29

department

shall

not

release

such

communications

pursuant

to

30

state

open

records

laws,

and

such

communications

shall

not

be

31

received

into

evidence,

subject

to

discovery,

or

otherwise

32

used

in

a

trial,

hearing,

or

other

proceeding

in

or

before

any

33

court,

regulatory

body,

or

other

authority

of

the

state

or

a

34

political

subdivision

of

the

state,

unless

the

communications

35

-7-

LSB

1362HV

(2)

91

sc/ns

7/

15

H.F.

756

are

subject

to

a

protective

order

that

prohibits

further

1

disclosure

of

such

communications

and

requires

any

court

2

filings

of

such

communications

to

be

made

under

seal.

It

is

3

the

intent

of

the

general

assembly

that

these

prohibitions

and

4

restrictions

also

apply

to

federal

courts,

regulatory

bodies,

5

and

other

authorities

and

for

purposes

of

federal

open

records

6

laws,

to

the

extent

allowed

by

federal

law

and

court

rules.

7

The

chief

information

security

officer

shall

not

release

such

8

communications

other

than

for

any

of

the

following

purposes:

9

1.

Identifying

a

cybersecurity

threat,

including

the

source

10

of

the

cybersecurity

threat,

or

a

security

vulnerability,

and

11

then

only

to

government

officials

for

purposes

of

addressing

12

the

threat.

13

2.

Responding

to,

or

otherwise

preventing

or

mitigating,

14

a

specific

threat

of

death,

serious

bodily

harm,

or

serious

15

economic

harm.

16

3.

Responding

to,

investigating,

prosecuting,

or

otherwise

17

preventing

or

mitigating

a

serious

threat

to

a

minor,

including

18

sexual

exploitation

and

threats

to

physical

safety.

19

4.

Preventing,

investigating,

disrupting,

or

prosecuting

an

20

offense

under

state

or

federal

law.

21

5.

Providing

a

confidential

cybersecurity

briefing

to

the

22

governor

or

a

member

of

the

general

assembly.

23

Sec.

8.

NEW

SECTION

.

8.98

Criminal

justice

information.

24

1.

The

department

is

authorized

to

maintain

an

integrated

25

information

system

that

enables

automated

data

sharing

among

26

the

executive

branch,

judicial

branch,

and

local

agencies.

27

2.

The

department

is

designated

as

the

Iowa

statistical

28

analysis

center

for

the

purpose

of

coordinating

with

data

29

resource

agencies

to

provide

data

and

analytical

information

30

to

federal,

state,

and

local

governments.

Notwithstanding

any

31

other

provision

of

state

law

to

the

contrary,

unless

prohibited

32

by

federal

law

or

regulation,

the

department

shall

be

granted

33

access,

for

purposes

of

research

and

evaluation,

to

all

of

34

the

data

listed

in

this

subsection,

except

that

intelligence

35

-8-

LSB

1362HV

(2)

91

sc/ns

8/

15

H.F.

756

data

and

peace

officer

investigative

reports

maintained

1

by

the

department

of

public

safety

shall

not

be

considered

2

data

for

the

purposes

of

this

section.

The

department

of

3

management

and

any

record,

data,

or

information

obtained

by

the

4

department

under

this

subsection

is

subject

to

the

federal

and

5

state

confidentiality

laws

and

rules,

including

as

described

6

in

chapter

22,

applicable

to

the

original

record,

data,

or

7

information,

and

to

the

original

custodian

of

the

record,

8

data,

or

information.

Authorized

access

under

this

subsection

9

includes

but

is

not

limited

to

all

of

the

following:

10

a.

Juvenile

court

records

and

all

other

information

11

maintained

under

sections

232.147

through

232.151.

12

b.

Child

abuse

information

under

sections

235A.15

through

13

235A.19.

14

c.

Dependent

adult

abuse

records

maintained

under

chapter

15

235B.

16

d.

Criminal

history

data

maintained

under

chapter

692.

17

e.

Sex

offender

registry

information

maintained

under

18

chapter

692A.

19

f.

Presentence

investigation

reports

maintained

under

20

section

901.4.

21

g.

Corrections

records

maintained

under

sections

904.601

and

22

904.602.

23

h.

Community-based

correctional

program

records

maintained

24

under

chapter

904.

25

i.

Parole

records

maintained

under

chapter

906.

26

j.

Deferred

judgment,

deferred

or

suspended

sentence,

and

27

probation

records

maintained

under

chapter

907.

28

k.

Violation

of

parole

or

probation

records

maintained

under

29

chapter

908.

30

l.

Fine

and

victim

restitution

records

maintained

under

31

chapters

909

and

910.

32

m.

Child

welfare

records

maintained

under

chapter

235.

33

3.

The

department

is

authorized

to

provide

data

analysis

and

34

reporting

on

issues

that

may

affect

the

state’s

correctional

35

-9-

LSB

1362HV

(2)

91

sc/ns

9/

15

H.F.

756

population

and

various

subgroups

of

the

population.

This

1

reporting

may

include

the

review

of

filed,

public

legislative

2

bills,

joint

resolutions,

and

amendments,

and

compiling

3

criminal

justice

data

for

completion

of

correctional

impact

4

statements

under

section

2.56,

racial

impact

statements,

and

an

5

annual

prison

population

forecast.

6

4.

The

department

is

authorized

to

maintain

a

multiagency

7

information

system

to

track

the

progress

of

juveniles

and

8

adults

who

have

been

charged

with

a

criminal

offense

in

9

the

court

system

through

various

state

and

local

agencies

10

and

programs.

This

system

must

utilize

existing

databases,

11

including

the

Iowa

court

information

system,

the

Iowa

12

corrections

offender

network,

the

child

welfare

information

13

system

of

the

department

of

health

and

human

services,

14

the

federally

mandated

national

adoption

and

foster

care

15

information

system,

and

other

state

and

local

databases

16

pertaining

to

juveniles

and

to

adults

who

have

been

charged

17

with

a

criminal

offense

in

the

court

system,

to

the

extent

18

practicable.

19

5.

The

multiagency

information

system

is

authorized

to

20

count

and

track

decision

points

for

juveniles

in

the

juvenile

21

justice

system

and

minors

in

the

child

welfare

system,

evaluate

22

the

experiences

of

the

juveniles

and

minors,

and

evaluate

23

the

success

of

the

services

provided.

The

system

is

also

24

authorized

to

count

and

track

decision

points

for

adults

who

25

have

been

charged

with

a

criminal

offense

in

the

court

system,

26

including

but

not

limited

to

dismissed

charges,

convictions,

27

deferred

judgments,

and

sentence

information.

28

6.

If

the

department

has

insufficient

moneys

or

resources

29

to

implement

this

section,

the

department

is

authorized

to

30

determine

which

portion

of

this

section

may

be

implemented,

if

31

any,

and

the

remainder

of

this

section

shall

not

apply.

32

Sec.

9.

NEW

SECTION

.

8.99

Confidentiality

of

data.

33

1.

For

purposes

of

chapter

22,

the

department

shall

not

be

34

deemed

to

be

the

lawful

custodian

of

records

the

department

35

-10-

LSB

1362HV

(2)

91

sc/ns

10/

15

H.F.

756

maintains

for

another

department

or

establishment

under

this

1

subchapter,

to

the

extent

the

records

in

question

are

held

2

by

the

department

as

an

automated

data

processing

unit

of

3

government

or

held

by

the

department

solely

for

storage

for

4

another

department

or

establishment.

Such

records

include

but

5

are

not

limited

to

all

of

the

following:

6

a.

Electronic

messaging

system

data.

7

b.

Mainframe

data.

8

c.

Storage

solutions

or

other

electronic

information,

such

9

as

on-premises

server

data

storage

and

cloud

data

storage.

10

2.

If

the

department

receives

a

request

pursuant

to

chapter

11

22

for

records

over

which

the

department

has

determined

it

is

12

not

the

lawful

custodian,

the

department

shall

deny

the

request

13

and

inform

the

requester

to

seek

the

information

from

the

14

lawful

custodian

as

provided

in

chapter

22.

The

department’s

15

determination

that

it

is

not

the

lawful

custodian

of

records

is

16

presumed

valid.

The

presumption

may

be

rebutted

by

clear

and

17

convincing

evidence

to

the

contrary.

18

3.

The

department

shall

provide

assistance

to

the

lawful

19

custodian

of

records

held

by

the

department

so

that

the

lawful

20

custodian

can

comply

with

the

production

obligations

of

chapter

21

22.

22

4.

If

the

department

receives

a

subpoena

in

an

23

administrative,

civil,

or

criminal

case

for

records

for

which

24

the

department

is

not

the

lawful

custodian,

the

department

25

shall

notify

the

lawful

custodian

and

the

attorney

general’s

26

office

and

cooperate

in

any

efforts

to

resist

the

subpoena.

27

Sec.

10.

Section

216A.131A,

Code

2025,

is

amended

to

read

28

as

follows:

29

216A.131A

Criminal

and

juvenile

justice

planning.

30

The

department

shall

fulfill

the

responsibilities

of

31

this

subchapter

,

including

the

duties

specified

in

sections

32

216A.133,

216A.135

,

216A.136

,

216A.137

,

216A.138

,

and

216A.140

.

33

Sec.

11.

Section

216A.133,

subsection

1,

paragraphs

d,

e,

f,

34

l,

and

t,

Code

2025,

are

amended

by

striking

the

paragraphs.

35

-11-

LSB

1362HV

(2)

91

sc/ns

11/

15

H.F.

756

Sec.

12.

Section

216A.133,

subsection

1,

paragraph

q,

1

subparagraphs

(1)

and

(6),

Code

2025,

are

amended

by

striking

2

the

subparagraphs.

3

Sec.

13.

Section

216A.133,

subsection

1,

paragraph

s,

Code

4

2025,

is

amended

to

read

as

follows:

5

s.

Provide

expertise

and

advice

to

the

legislative

6

services

agency,

the

department

of

management,

the

department

7

of

corrections,

the

judicial

branch,

and

others

charged

8

with

formulating

fiscal,

correctional,

or

minority

impact

9

statements.

10

Sec.

14.

Section

216A.135,

subsection

2,

paragraph

e,

Code

11

2025,

is

amended

by

striking

the

paragraph.

12

Sec.

15.

Section

232.147,

subsection

2,

paragraph

i,

Code

13

2025,

is

amended

to

read

as

follows:

14

i.

The

statistical

analysis

center

for

the

purposes

stated

15

in

section

216A.136

8.98

.

16

Sec.

16.

Section

232.147,

subsection

3,

paragraph

n,

Code

17

2025,

is

amended

to

read

as

follows:

18

n.

The

statistical

analysis

center

for

the

purposes

stated

19

in

section

216A.136

8.98

.

20

Sec.

17.

Section

232.147,

subsection

4,

paragraph

i,

Code

21

2025,

is

amended

to

read

as

follows:

22

i.

The

statistical

analysis

center

for

the

purposes

stated

23

in

section

216A.136

8.98

.

24

Sec.

18.

Section

232.149,

subsection

5,

paragraph

f,

Code

25

2025,

is

amended

to

read

as

follows:

26

f.

The

statistical

analysis

center

for

the

purposes

stated

27

in

section

216A.136

8.98

.

28

Sec.

19.

Section

232.149A,

subsection

3,

paragraph

m,

Code

29

2025,

is

amended

to

read

as

follows:

30

m.

The

statistical

analysis

center

for

the

purposes

stated

31

in

section

216A.136

8.98

.

32

Sec.

20.

REPEAL.

Sections

216A.136,

216A.137,

and

33

216A.138,

Code

2025,

are

repealed.

34

Sec.

21.

APPLICABILITY.

The

following

apply

to

contracts

35

-12-

LSB

1362HV

(2)

91

sc/ns

12/

15

H.F.

756

entered

into

or

renewed

on

or

after

the

effective

date

of

this

1

Act:

2

1.

The

section

of

this

Act

enacting

section

8.94.

3

2.

The

section

of

this

Act

enacting

section

8.95.

4

3.

The

section

of

this

Act

enacting

section

8.96.

5

EXPLANATION

6

The

inclusion

of

this

explanation

does

not

constitute

agreement

with

7

the

explanation’s

substance

by

the

members

of

the

general

assembly.

8

This

bill

relates

to

matters

under

the

purview

of

the

9

department

of

management

(DOM).

10

Under

current

law,

the

governor’s

budget

recommendation

is

11

considered

confidential

by

the

legislative

services

agency

12

until

it

is

made

public

by

the

governor.

The

bill

states

that

13

information

transmitted

by

state

entities

to

DOM

for

developing

14

the

budget

as

required

by

law,

and

documents

based

on

the

15

transmittals,

are

confidential

until

the

governor

transmits

the

16

budget

to

the

general

assembly.

17

The

bill

strikes

current

law

providing

for

the

use

of

moneys

18

in

the

technology

reinvestment

fund

for

certain

technology

19

projects

and

instead

appropriates

moneys

in

the

fund

to

DOM

for

20

technology

projects

using

factors

set

forth

in

the

bill.

The

21

bill

requires

DOM

to

provide

a

prioritized

list

of

proposed

22

projects

to

the

governor,

who

must

use

the

list

to

develop

23

a

budgetary

recommendation

to

the

general

assembly,

and

to

24

report

completed

and

ongoing

projects

to

the

general

assembly

25

annually.

26

The

bill

increases

the

frequency

at

which

a

person

27

performing

work

for

DOM

or

an

individual

on

the

information

28

technology

staff

of

a

supported

entity

may

be

subject

to

a

29

national

criminal

history

check

through

the

federal

bureau

of

30

investigation

from

at

least

once

every

10

years

to

every

5

31

years.

32

The

bill

prohibits

the

inclusion

of

certain

provisions

in

33

information

technology

contracts

and

declares

those

provisions

34

void

if

present

in

such

contracts.

The

bill

also

provides

that

35

-13-

LSB

1362HV

(2)

91

sc/ns

13/

15

H.F.

756

such

contracts

are

deemed

to

include

provisions

requiring

the

1

contract

to

be

governed

by

Iowa

law

and

litigation

related

to

2

the

contract

to

be

brought

and

maintained

in

an

appropriate

3

state

or

federal

court

sitting

in

Iowa.

The

bill

authorizes

4

the

director

of

DOM

to

include

limitations

of

vendor

liability

5

in

information

technology

goods

and

services

contracts,

but

6

sets

forth

prohibited

terms

in

such

limitations

of

liability.

7

The

bill

makes

all

communication

concerning

cybersecurity

8

between

the

chief

information

security

officer

and

other

9

entities

confidential

and

allows

the

communications

to

be

10

released

only

for

specific

purposes.

11

Under

current

law,

the

department

of

health

and

human

12

services

serves

as

the

Iowa

statistical

analysis

center

and

13

maintains

an

integrated

information

system

for

data

sharing

14

among

federal,

state,

and

local

governments.

The

bill

15

transfers

these

powers

and

duties

to

DOM

and

grants

DOM

access

16

to

criminal

justice

information

other

than

intelligence

data

17

and

peace

officer

investigative

reports

maintained

by

the

18

department

of

public

safety.

DOM

is

authorized

to

provide

19

data

analysis

and

reporting

on

issues

that

may

affect

the

20

state’s

correctional

population

and

various

subgroups

of

the

21

population,

to

maintain

a

multiagency

information

system

to

22

track

the

progress

of

juveniles

and

adults

charged

with

a

23

criminal

offense

through

state

and

local

agencies

and

programs,

24

and

to

count

and

track

decision

points

for

individuals

in

25

the

juvenile

justice

system,

child

welfare

system,

and

26

court

system.

If

DOM

lacks

sufficient

moneys

to

perform

the

27

authorized

tasks

of

the

Iowa

statistical

analysis

center,

the

28

bill

allows

DOM

to

determine

which,

if

any,

to

implement.

29

The

bill

states

that

DOM

is

not

the

lawful

custodian

under

30

Code

chapter

22

(open

records)

for

records

DOM

maintains

in

31

DOM’s

information

technology

capacity

for

other

state

entities

32

as

an

automated

data

processing

unit

of

government

or

when

33

held

by

DOM

solely

for

storage

for

another

department

or

34

establishment.

The

bill

requires

DOM

to

deny

requests

for

35

-14-

LSB

1362HV

(2)

91

sc/ns

14/

15

H.F.

756

information

for

which

DOM

is

not

the

lawful

custodian,

to

1

provide

assistance

to

the

lawful

custodian

to

comply

with

2

production

obligations,

and

to

cooperate

in

any

efforts

to

3

resist

associated

subpoenas.

4

-15-

LSB

1362HV

(2)

91

sc/ns

15/

15