CO HB1208

Creates a Subcommittee on Data Privacy and Cyber-Security within the Joint Technology Committee to address information security threats to state data and information resources.

Subcommittee membership consists of 4 legislators (1 majority/1 minority from each chamber), 4 governor-appointed members (from higher education, private cyber-security sector, nonprofit privacy organizations, and state Office of Information Technology), and the Chief Information Security Officer.

Subcommittee shall examine whether state agencies collect/retain excessive data, assess data access controls and protection mechanisms, and develop measures to prevent unauthorized access, disclosure, use, modification, or destruction of state data.

Requires all state and local agencies to cooperate with and provide requested data and information to the subcommittee; subcommittee must meet at least three times annually and submit findings to the Joint Technology Committee and General Assembly by January 1, 2018.

Subcommittee automatically repeals on July 1, 2018, unless extended by the General Assembly; nonlegislative members serve without compensation but may receive reimbursement for travel expenses.