CA AB2225

Secretary of State, in consultation with the Department of Technology, shall approve and adopt uniform statewide standards for storing and recording public records in electronic media or cloud computing storage services using standards accredited by the American National Standards Institute or International Organization for Standardization TR 15801:2017.

Cloud computing storage services that comply with ISO/IEC 27001:2013 standards and provide administrative controls to prevent public records from being overwritten, deleted, or altered shall be considered a "trusted system."

All public records stored by state agencies in electronic media or cloud computing services must comply with trusted system standards as defined in uniform statewide standards and applicable requirements in the State Administrative Manual and Statewide Information Management Manual.

State agencies must enter into written agreements with local government entities before establishing information technology system interconnections, data exchanges, or partnerships to develop, use, or maintain information technology systems, establishing mutually agreeable terms to protect relevant public records.

Definitions of "cloud computing" are based on National Institute of Standards and Technology Special Publication 800-145, and "public records" includes both permanent and nonpermanent documents.