SB 272 Requirements Go Into Effect on Friday – Are You Ready?
June 30, 2016
Public agencies must begin posting catalogs of their enterprise systems on their websites by Friday, July 1 to comply with the requirements of Senate Bill 272 (Chapter No. 795, Statutes of 2015).
SB 272 defined “enterprise system” as a software application or computer system that collects, stores, exchanges and analyzes information that the agency uses that is both:
- A multi-departmental system or a system that contains information collected about the public; and
- A system that serves as an original source of data within an agency.
An enterprise system does not include IT security systems (including firewalls and cybersecurity), employee identification management systems, video monitoring, physical access control systems, infrastructure and mechanical control systems (including those which control or manage street lights, natural gas, electrical, water and sewer functions), 911 dispatch or emergency services and systems that would be restricted from disclosure by Government Code section 6254.19.
The catalog must contain the following:
- Current system vendor;
- Current system product;
- System’s purpose;
- A description of categories or types of data;
- The department that is the prime custodian of the data;
- The frequency that system data is collected; and
- The frequency that system data is updated.
CSAC hosted a webinar on June 8 that outlined these requirements in an effort to assist counties in implementing the requirements of this bill. You can watch that webinar and access our slide presentations here.