Print
Senate File 195 - IntroducedA Bill ForAn Act 1modifying the definitions of essential county purpose
2and essential corporate purpose to include cybersecurity
3purposes.
4BE IT ENACTED BY THE GENERAL ASSEMBLY OF THE STATE OF IOWA:
1 Section 1. Section 331.441, subsection 2, paragraph b, Code
22023, is amended by adding the following new subparagraph:
3 NEW SUBPARAGRAPH. (21) The acquisition, development, and
4improvement of county information systems to protect against
5a cybersecurity event. For purposes of this subparagraph,
6“cybersecurity event” means an event resulting in unauthorized
7access to, or the disruption or misuse of, an information
8system or of nonpublic information stored on an information
9system. For purposes of this subparagraph, “information system”
10means a discrete set of electronic information resources
11organized for the collection, processing, maintenance, use,
12sharing, dissemination, or disposition of electronic nonpublic
13information, and any specialized system including but not
14limited to a process controls system, a telephone switching
15system, or an environmental control system.
16 Sec. 2. Section 384.24, subsection 3, Code 2023, is amended
17by adding the following new paragraph:
18 NEW PARAGRAPH. y. The acquisition, development, and
19improvement of city information systems to protect against
20a cybersecurity event. For purposes of this paragraph,
21“cybersecurity event” means an event resulting in unauthorized
22access to, or the disruption or misuse of, an information
23system or of nonpublic information stored on an information
24system. For purposes of this paragraph, “information system”
25means a discrete set of electronic information resources
26organized for the collection, processing, maintenance, use,
27sharing, dissemination, or disposition of electronic nonpublic
28information, and any specialized system including but not
29limited to a process controls system, a telephone switching
30system, or an environmental control system.
31EXPLANATION
32The inclusion of this explanation does not constitute agreement with
33the explanation’s substance by the members of the general assembly.
34This bill amends the definitions of “essential county
35purpose” and “essential corporate purpose” to include the
-1-1acquisition, development, and improvement of information
2systems to protect against a cybersecurity event. The bill
3defines “cybersecurity event” as an event resulting in
4unauthorized access to, or the disruption or misuse of, an
5information system or of nonpublic information stored on an
6information system, as defined in the bill.
7Under Code chapters 331 and 384, the applicable county
8or city may generally contract indebtedness and approve the
9issuance of general obligation bonds to carry out an essential
10county purpose or essential corporate purpose without approval
11by voters at an election, while the issuance of general
12obligation bonds to carry out a general county purpose or
13general corporate purpose generally requires approval by voters
14at an election.
-2-md/jh
2and essential corporate purpose to include cybersecurity
3purposes.
4BE IT ENACTED BY THE GENERAL ASSEMBLY OF THE STATE OF IOWA:
1 Section 1. Section 331.441, subsection 2, paragraph b, Code
22023, is amended by adding the following new subparagraph:
3 NEW SUBPARAGRAPH. (21) The acquisition, development, and
4improvement of county information systems to protect against
5a cybersecurity event. For purposes of this subparagraph,
6“cybersecurity event” means an event resulting in unauthorized
7access to, or the disruption or misuse of, an information
8system or of nonpublic information stored on an information
9system. For purposes of this subparagraph, “information system”
10means a discrete set of electronic information resources
11organized for the collection, processing, maintenance, use,
12sharing, dissemination, or disposition of electronic nonpublic
13information, and any specialized system including but not
14limited to a process controls system, a telephone switching
15system, or an environmental control system.
16 Sec. 2. Section 384.24, subsection 3, Code 2023, is amended
17by adding the following new paragraph:
18 NEW PARAGRAPH. y. The acquisition, development, and
19improvement of city information systems to protect against
20a cybersecurity event. For purposes of this paragraph,
21“cybersecurity event” means an event resulting in unauthorized
22access to, or the disruption or misuse of, an information
23system or of nonpublic information stored on an information
24system. For purposes of this paragraph, “information system”
25means a discrete set of electronic information resources
26organized for the collection, processing, maintenance, use,
27sharing, dissemination, or disposition of electronic nonpublic
28information, and any specialized system including but not
29limited to a process controls system, a telephone switching
30system, or an environmental control system.
31EXPLANATION
32The inclusion of this explanation does not constitute agreement with
33the explanation’s substance by the members of the general assembly.
34This bill amends the definitions of “essential county
35purpose” and “essential corporate purpose” to include the
-1-1acquisition, development, and improvement of information
2systems to protect against a cybersecurity event. The bill
3defines “cybersecurity event” as an event resulting in
4unauthorized access to, or the disruption or misuse of, an
5information system or of nonpublic information stored on an
6information system, as defined in the bill.
7Under Code chapters 331 and 384, the applicable county
8or city may generally contract indebtedness and approve the
9issuance of general obligation bonds to carry out an essential
10county purpose or essential corporate purpose without approval
11by voters at an election, while the issuance of general
12obligation bonds to carry out a general county purpose or
13general corporate purpose generally requires approval by voters
14at an election.
-2-md/jh