Authorizes the department to create and maintain a registry describing the information systems or data bases maintained by state agencies that contain personally identifiable information. The registry need not include systems or data bases that contain personally identifiable information pertaining solely to public officials acting in their official capacity. The department may require state agencies to provide information necessary to create and maintain the registry.