Bill Text: CT HB05373 | 2016 | General Assembly | Comm Sub


Bill Title: An Act Requiring The Maintenance Of A Confidential State Agency Personal Data Systems Inventory Based On A Program Review And Investigations Committee Study.

Spectrum: Committee Bill

Status: (Introduced - Dead) 2016-04-21 - File Number 687 [HB05373 Detail]

Download: Connecticut-2016-HB05373-Comm_Sub.html

General Assembly

 

Substitute Bill No. 5373

    February Session, 2016

 

*_____HB05373APP___041516____*

AN ACT REQUIRING THE MAINTENANCE OF A CONFIDENTIAL STATE AGENCY PERSONAL DATA SYSTEMS INVENTORY BASED ON A PROGRAM REVIEW AND INVESTIGATIONS COMMITTEE STUDY.

Be it enacted by the Senate and House of Representatives in General Assembly convened:

Section 1. (NEW) (Effective from passage) (a) For the purposes of this section, "state agency" means any agency with a department head, as defined in section 4-5 of the general statutes, and "automated personal data system" and "personal data" have the same meanings as provided in section 4-190 of the general statutes, as amended by this act.

(b) Not later than December 31, 2016, and annually thereafter, each state agency shall, within available appropriations, submit a list of all automated personal data systems maintained by such agency that contain personal data as of December first of the year of such submission. Such list shall be submitted in a form and manner prescribed by the Secretary of the Office of Policy and Management and shall include: (1) The general nature and purpose of each automated personal data system maintained by such agency, (2) the categories of personal data and other data in such systems, (3) how the personal data is used, and (4) the categories of authorized users of such personal data.

(c) Not later than January 31, 2017, and annually thereafter, the Secretary of the Office of Policy and Management shall create and post on the office's Internet web site an inventory of all of the state agency lists of automated personal data systems submitted under this section, including the information submitted under subdivisions (1) to (4), inclusive, of subsection (b) of this section.

Sec. 2. Subdivision (5) of section 4-190 of the general statutes is repealed and the following is substituted in lieu thereof (Effective from passage):

(5) "Computer accessible files" means any personal data which is stored on-line or off-line, which can be identified by use of electronic means, including, but not limited to, (A) microfilm and microfilm devices, which includes, but is not limited to, magnetic tape, magnetic film, magnetic disks, magnetic drums, internal memory utilized by any processing device, including computers or telecommunications control units, punched cards, optically [scanable] scannable paper or film, or (B) external or removable hard drives, flash cards, flash drives, compact disks or digital video disks.

This act shall take effect as follows and shall amend the following sections:

Section 1

from passage

New section

Sec. 2

from passage

4-190(5)

APP

Joint Favorable Subst.

 
feedback