Senate Study Bill 3068 - Introduced SENATE FILE _____ BY (PROPOSED COMMITTEE ON COMMERCE BILL BY CHAIRPERSON SCHULTZ) A BILL FOR An Act modifying the definitions of essential county purpose 1 and essential corporate purpose to include cybersecurity 2 purposes. 3 BE IT ENACTED BY THE GENERAL ASSEMBLY OF THE STATE OF IOWA: 4 TLSB 5428XC (1) 89 md/ns
S.F. _____ Section 1. Section 331.441, subsection 2, paragraph b, Code 1 2022, is amended by adding the following new subparagraph: 2 NEW SUBPARAGRAPH . (21) The acquisition, development, and 3 improvement of county information systems to protect against 4 a cybersecurity event. For purposes of this subparagraph, 5 “cybersecurity event” means an event resulting in unauthorized 6 access to, or the disruption or misuse of, an information 7 system or of nonpublic information stored on an information 8 system. For purposes of this subparagraph, “information system” 9 means a discrete set of electronic information resources 10 organized for the collection, processing, maintenance, use, 11 sharing, dissemination, or disposition of electronic nonpublic 12 information, and any specialized system including but not 13 limited to a process controls system, a telephone switching 14 system, or an environmental control system. 15 Sec. 2. Section 384.24, subsection 3, Code 2022, is amended 16 by adding the following new paragraph: 17 NEW PARAGRAPH . y. The acquisition, development, and 18 improvement of city information systems to protect against 19 a cybersecurity event. For purposes of this paragraph, 20 “cybersecurity event” means an event resulting in unauthorized 21 access to, or the disruption or misuse of, an information 22 system or of nonpublic information stored on an information 23 system. For purposes of this paragraph, “information system” 24 means a discrete set of electronic information resources 25 organized for the collection, processing, maintenance, use, 26 sharing, dissemination, or disposition of electronic nonpublic 27 information, and any specialized system including but not 28 limited to a process controls system, a telephone switching 29 system, or an environmental control system. 30 EXPLANATION 31 The inclusion of this explanation does not constitute agreement with 32 the explanation’s substance by the members of the general assembly. 33 This bill amends the definitions of “essential county 34 purpose” and “essential corporate purpose” to include the 35 -1- LSB 5428XC (1) 89 md/ns 1/ 2
S.F. _____ acquisition, development, and improvement of information 1 systems to protect against a cybersecurity event. The bill 2 defines “cybersecurity event” as an event resulting in 3 unauthorized access to, or the disruption or misuse of, an 4 information system or of nonpublic information stored on an 5 information system, as defined in the bill. 6 Under Code chapters 331 and 384, the applicable county 7 or city may generally contract indebtedness and approve the 8 issuance of general obligation bonds to carry out an essential 9 county purpose or essential corporate purpose without approval 10 by voters at an election, while the issuance of general 11 obligation bonds to carry out a general county purpose or 12 general corporate purpose generally requires approval by voters 13 at an election. 14 -2- LSB 5428XC (1) 89 md/ns 2/ 2