SB 17-304 Summary

• Adds definitions of "cybersecurity" and "data privacy" to Colorado statutes relating to the Joint Technology Committee's authority.

• Expands the Joint Technology Committee's powers to request information and presentations from state agencies regarding data privacy and cybersecurity practices and to coordinate with the Colorado Cybersecurity Council.

• Requires the Committee to review legislative measures dealing with information technology, data privacy, or cybersecurity, and allows it to make advisory recommendations on such measures.

• Changes the definition of "oversee" to apply only to "major" information technology projects as defined in section 24-37.5-102(2.6), rather than "significant" projects.

• Requires the Office of State Planning and Budgeting to design budget request forms for IT projects in coordination with the Joint Technology Committee, including information on market research, vendor involvement, project scope, and cost options.