Washington State House of Representatives Office of Program Research | BILL ANALYSIS |
State Government & Tribal Relations Committee |
HB 2400
This analysis was prepared by non-partisan legislative staff for the use of legislative members in their deliberations. This analysis is not a part of the legislation nor does it constitute a statement of legislative intent. |
Brief Description: Concerning privacy assessment surveys of state agencies.
Sponsors: Representatives Hudgins, Smith, Van Werven and Wylie.
Brief Summary of Bill |
|
Hearing Date: 1/29/20
Staff: Jason Zolle (786-7124).
Background:
In April 2015 Governor Inslee created the position of Chief Privacy Officer (CPO) within the Office of the Chief Information Officer (CIO). The role of the CPO is to examine privacy practices across state agencies and to advise agencies that have privacy-related questions.
In January 2016 Governor Inslee established the Office of Privacy and Data Protection (OPDP) by executive order, and the Legislature codified the OPDP in statute shortly thereafter. The OPDP was placed within the Office of the CIO, and the CPO was made the director of the OPDP. By statute, the CIO appoints the CPO.
The OPDP's primary duties are:
conducting an annual privacy review of state agencies;
conducting an annual privacy training for state employees;
articulating privacy principles and best practices;
coordinating data protection in cooperation with state agencies;
working with the CIO to review major state agency projects involving personally identifiable information; and
serving as a resource to local governments and the public on data protection concerns.
Every four years the OPDP must submit a report to the Legislature evaluating the office's performance, including discussion of its training activities and consumer education efforts. The OPDP must also submit a report at least every four years detailing certain issues regarding telecommunications.
Summary of Bill:
As part of the OPDP's annual privacy review of state agencies, the OPDP must send state agencies a survey regarding their collection, use, and sharing of data, and their use of security measures to secure data against unauthorized access or disclosure.
State agencies are required to complete the survey within a reasonable time. Agencies may request assistance from the OPDP in completing the survey.
Appropriation: None.
Fiscal Note: Available.
Effective Date: The bill takes effect 90 days after adjournment of the session in which the bill is passed.