HB 17-1069 Summary

• Creates a 10-member Subcommittee on Data Privacy and Cyber-Security within the joint technology committee, with members appointed by legislative leaders, the governor, and the chief information security officer.

• Requires the subcommittee to examine whether state agencies collect excessive data, who has access to sensitive data, and measures to protect data against unauthorized access, disclosure, use, modification, or destruction.

• Mandates the subcommittee to select three state agencies for detailed review, hold public hearings by December 31, 2017, and examine Colorado's information security policies regarding inter-agency data sharing.

• Requires findings and recommendations to be submitted to the joint technology committee and general assembly by January 1, 2018, including whether additional legislation is needed to limit data collection and access.

• Sunsets the subcommittee on July 1, 2018, unless extended by the general assembly; nonlegislative members serve without compensation but may receive travel reimbursement.