Title: An act relating to the collection of personally identifiable information by state agencies.

Brief Description: Monitoring personal information collected by state agencies.

Sponsors: Senators Kline, Kohl-Welles, Hargrove, Rockefeller, Shin and Benton.

Brief History:

State Government Operations & Accountability: 2/15/06, 2/23/06 [DP].

HOUSE COMMITTEE ON STATE GOVERNMENT OPERATIONS & ACCOUNTABILITY

Majority Report: Do pass. Signed by 5 members: Representatives Haigh, Chair; Green, Vice Chair; Nixon, Ranking Minority Member; Clements, Assistant Ranking Minority Member and Miloscia.

Minority Report: Do not pass. Signed by 2 members: Representatives Hunt and McDermott.

Staff: Kathryn Leathers (786-7114).

Background:

The Department of Information Services (Department) was created to provide coordinated planning and management of state information services. The Washington State Information Services Board (Board) was created to provide direction to state agencies on strategic planning and technical policies for information services, to develop acquisition standards, and to assist agencies in acquiring and implementing information services.

The Department's duties include reviewing agency information technology portfolios; implementing statewide and interagency policies, standards, and guidelines; making information services available to state agencies, local governments, and public benefit nonprofit corporations on a full cost-recovery basis; establishing rates and fees for services provided by the Department; and performing all duties delegated to it by the Board.

Summary of Bill:

The Department of Information Services (Department) must create and maintain a registry which describes the information systems or databases maintained by state agencies that contain personally identifiable information. The registry must contain the following information for each system or database:

• a description of the purpose;
• a description of the type of information included;
• the number of records involved;
• the statutory authorization;
• the methods by which information is collected or updated;
• the retention schedule; and
• a list of any other databases that are merged or matched with the subject system or database.

The registry is not required to include information systems or databases that contain personally identifiable information relating solely to public officials acting in their official capacities.

"Personally identifiable information" is defined as information that can be associated with a particular individual through one or more identifiers or other information or circumstances.

Appropriation: None.

Fiscal Note: Available.

Effective Date: The bill takes effect 90 days after adjournment of session in which bill is passed.

Testimony For: None.

Testimony Against: None.

Persons Testifying: None.

Persons Signed In To Testify But Not Testifying: None.