SF0038 • 2016

Data management policies.

AN ACT relating to administration of government; requiring agencies to adopt policies for data collection, access, security and use as specified; directing the state chief information officer to develop guidelines for local governments for data collection, access, security and use; providing a definition; requiring a report; and providing for an effective date.

Education Elections

Enacted

This bill passed the Legislature and reached final enactment based on the latest official action.

Sponsor: Corporations
Last action: 2016-03-07
Official status: enrolled
Effective date: 7/1/2016

Plain English Breakdown

The plain English breakdown is still being put together. The official documents below are already here.

Amendments

These notes stay tied to the official amendment files and metadata from the legislature.

SF0038HW001

Committee of the Whole • Throne

Adopted

Plain English: Adopted Committee of the Whole by Throne

This amendment summary is using official source text because generated interpretation was skipped for this run.
The official amendment text was available, but an easy plain-English summary could not be produced automatically during the last sync.

SF0038S2001

2nd reading • Hicks

Failed

Plain English: Failed 2nd reading by Hicks

This amendment summary is using official source text because generated interpretation was skipped for this run.
The official amendment text was available, but an easy plain-English summary could not be produced automatically during the last sync.

SF0038SS001

Standing Committee • SCorporations

Adopted

Plain English: Adopted Standing Committee by SCorporations

This amendment summary is using official source text because generated interpretation was skipped for this run.
The official amendment text was available, but an easy plain-English summary could not be produced automatically during the last sync.

Bill History

2016-03-07 LSO
Assigned Chapter Number
2016-03-04 Governor
Governor Signed SEA No. 0018
2016-02-29 House
H Speaker Signed SEA No. 0018
2016-02-29 Senate
S President Signed SEA No. 0018
2016-02-26 LSO
Assigned Number SEA No. 0018
2016-02-26 Senate
S Concur:Passed 29-1-0-0-0
2016-02-26 Senate
S Received for Concurrence
2016-02-26 House
H 3rd Reading:Passed 59-1-0-0-0
2016-02-25 House
H 2nd Reading:Passed
2016-02-24 House
H COW:Passed
2016-02-24 House
Amendment Adopted
2016-02-23 House
H Placed on General File
2016-02-23 House
H07 - Corporations:Recommend Do Pass 8-1-0-0-0
2016-02-17 House
H Introduced and Referred to H07 - Corporations
2016-02-16 House
H Received for Introduction
2016-02-15 Senate
S 3rd Reading:Passed 28-2-0-0-0
2016-02-12 Senate
S 2nd Reading:Passed
2016-02-12 Senate
Amendment failed
2016-02-11 Senate
S COW:Passed
2016-02-11 Senate
Amendment Adopted
2016-02-11 Senate
S Placed on General File
2016-02-11 Senate
S07 - Corporations:Recommend Amend and Do Pass 3-2-0-0-0
2016-02-08 Senate
S Introduced and Referred to S07 - Corporations 27-2-1-0-0
2016-02-05 Senate
S Received for Introduction
2016-01-20 LSO
Bill Number Assigned

Official Summary Text

Summary for LSO115

Bill No.:
SF0038
Effective
:

7/1/2016

LSO No.:
16LSO-0078

Enrolled Act No.:
SEA No. 0018

Chapter No.:
35

Prime Sponsor:
Joint Corporations, Elections & Political Subdivisions Interim Committee

Catch Title:
Data management policies.

Subject:
Policies
on the collection, a
ccess, security and use of data

Summary/Major Elements:

This bill requires state agencies to adopt, enforce and maintain
a
polic
y
regarding the collection, access, security and use of data. This bill specifies
that State agencies’

policies shall a
dhere to standards set by the State Chief Information Officer
and
shall
include specified information.

This bill defines “
agency
”
as any office, department, board, commission, council, institution, separate operating agency or any other operating unit of the
E
xecutive
Branch of S
tate government but not the Legislature, judiciary, University of Wyoming or community colleges.

This bill requires the State Chief Information Officer to:
Develop guidelines for the collection, access, security and use of data by counties, cities, towns and other political subdivisions, other than any community college district or school district within the State; and
Report the recommended guidelines to the Task Force on Digital Information Privacy by September 1, 2016.

Comments:
Requires a report
to the Task Force on Digital Information Privacy.
The above summary is not an official publication of the Wyoming Legislature and is not an official statement of legislative intent. While the Legislative Service Office endeavored to provide accurate information in this summary, it should not be relied upon as a comprehensive abstract of the bill
.

Current Bill Text

Read the full stored bill text

ORIGINAL
Senate
ENGROSSED
File No
.
SF0038

ENROLLED ACT NO. 18,

SENATE

SIXTY-THIRD LEGISLATURE OF THE STATE OF WYOMING
2016 Budget Session

Be It Enacted by the Legislature of the State of Wyoming:

Section 1
.

W.S.
9
‑
21
‑
101 is created to read:

CHAPTER
21
DATA POLICIES

9
‑
2
1
‑
101
.

D
ata policies.

(a)

E
very agency shall adopt
,
enforce
and maintain
a policy regarding the collection, access, security and use of data. The policy shall, at a minimum,
comply with applicable federal and state law,
a
dhere to standards set by the state chief information officer and
include the following:

(i)

An inventory and description of all data required of, collected or stored by an agency
;

(i
i
)

Authorization and authentication mechanisms for accessing the data;

(ii
i
)

Administrative, physical and logical security safeguards, including employee training and data encryption;

(iv
)

Privacy
and security compliance standards;

(
v
)

Processes for identification of and response to data security incidents, including breach notification and mitigation procedures
;

(vi)

In accordance with
existing law, processes for the destruction and communication of data.

(
b
)

As used in this section, "
agency" means any office, department, board, commission, council, institution, separate operating agency or any other operating unit of the executive branch of state government. "Agency" shall not include the
state legislature, judiciary,
University of Wyoming
or any
community college
in the state
.

(c)

The governor, after consultation with the chief information officer, may set a date for specific agencies to comply with subsection (a) of this section and may revise that date as necessary.

Section
2
.

The state chief information officer, in consultation with counties, cities, towns and other political subdivisions of the state, shall
develop
guidelines for the collection, access, security and use of data
by counties, cities, towns and other political subdivisions of the state
.
In developing the guidelines, the state chief information officer shall consider the mechanisms, safeguards, processes and standards specified in section 1 of this act and shall
analyze
the impact to the county, city, town or other political subdivision in adopting and enforcing guidelines.
The state chief information officer shall report
his
recommended guidelines
to the task force on digital information privacy no later
than September 1, 201
6
.

For purposes of this section, "political subdivisions" does not include any community college district or school district within the state.

Section
3
.

This
act is effective July 1,
201
6
.

(END)

Speaker of the House

President of the Senate

Governor

TIME APPROVED: _________

DATE APPROVED: _________

I hereby certify that this act originated in the
Senate
.

Chief Clerk