House
File
2288
-
Introduced
HOUSE
FILE
2288
BY
COMMITTEE
ON
INFORMATION
TECHNOLOGY
(SUCCESSOR
TO
HSB
534)
A
BILL
FOR
An
Act
modifying
the
definitions
of
essential
county
purpose
1
and
essential
corporate
purpose
to
include
cybersecurity
2
purposes.
3
BE
IT
ENACTED
BY
THE
GENERAL
ASSEMBLY
OF
THE
STATE
OF
IOWA:
4
TLSB
5428HV
(1)
89
md/ns
H.F.
2288
Section
1.
Section
331.441,
subsection
2,
paragraph
b,
Code
1
2022,
is
amended
by
adding
the
following
new
subparagraph:
2
NEW
SUBPARAGRAPH
.
(21)
The
acquisition,
development,
and
3
improvement
of
county
information
systems
to
protect
against
4
a
cybersecurity
event.
For
purposes
of
this
subparagraph,
5
“cybersecurity
event”
means
an
event
resulting
in
unauthorized
6
access
to,
or
the
disruption
or
misuse
of,
an
information
7
system
or
of
nonpublic
information
stored
on
an
information
8
system.
For
purposes
of
this
subparagraph,
“information
system”
9
means
a
discrete
set
of
electronic
information
resources
10
organized
for
the
collection,
processing,
maintenance,
use,
11
sharing,
dissemination,
or
disposition
of
electronic
nonpublic
12
information,
and
any
specialized
system
including
but
not
13
limited
to
a
process
controls
system,
a
telephone
switching
14
system,
or
an
environmental
control
system.
15
Sec.
2.
Section
384.24,
subsection
3,
Code
2022,
is
amended
16
by
adding
the
following
new
paragraph:
17
NEW
PARAGRAPH
.
y.
The
acquisition,
development,
and
18
improvement
of
city
information
systems
to
protect
against
19
a
cybersecurity
event.
For
purposes
of
this
paragraph,
20
“cybersecurity
event”
means
an
event
resulting
in
unauthorized
21
access
to,
or
the
disruption
or
misuse
of,
an
information
22
system
or
of
nonpublic
information
stored
on
an
information
23
system.
For
purposes
of
this
paragraph,
“information
system”
24
means
a
discrete
set
of
electronic
information
resources
25
organized
for
the
collection,
processing,
maintenance,
use,
26
sharing,
dissemination,
or
disposition
of
electronic
nonpublic
27
information,
and
any
specialized
system
including
but
not
28
limited
to
a
process
controls
system,
a
telephone
switching
29
system,
or
an
environmental
control
system.
30
EXPLANATION
31
The
inclusion
of
this
explanation
does
not
constitute
agreement
with
32
the
explanation’s
substance
by
the
members
of
the
general
assembly.
33
This
bill
amends
the
definitions
of
“essential
county
34
purpose”
and
“essential
corporate
purpose”
to
include
the
35
-1-
LSB
5428HV
(1)
89
md/ns
1/
2
H.F.
2288
acquisition,
development,
and
improvement
of
information
1
systems
to
protect
against
a
cybersecurity
event.
The
bill
2
defines
“cybersecurity
event”
as
an
event
resulting
in
3
unauthorized
access
to,
or
the
disruption
or
misuse
of,
an
4
information
system
or
of
nonpublic
information
stored
on
an
5
information
system,
as
defined
in
the
bill.
6
Under
Code
chapters
331
and
384,
the
applicable
county
7
or
city
may
generally
contract
indebtedness
and
approve
the
8
issuance
of
general
obligation
bonds
to
carry
out
an
essential
9
county
purpose
or
essential
corporate
purpose
without
approval
10
by
voters
at
an
election,
while
the
issuance
of
general
11
obligation
bonds
to
carry
out
a
general
county
purpose
or
12
general
corporate
purpose
generally
requires
approval
by
voters
13
at
an
election.
14
-2-
LSB
5428HV
(1)
89
md/ns
2/
2