Z-0510.1

HOUSE BILL 1947

ByRepresentatives Street, Couture, Ryu, Gregerson, Reed, Ormsby, and Reeves; by request of Consolidated Technology Services

AN ACT Relating to governance of technology services in state government; amending RCW 43.105.006, 43.105.007, 43.105.020, 43.105.025, 43.105.052, 43.105.054, 43.105.220, 43.105.240, 43.105.245, 43.105.255, 43.105.265, 43.105.285, 43.105.287, 43.105.342, 43.105.359, 43.105.369, 43.105.375, 43.105.385, 43.105.450, 43.105.331, 2.36.054, 2.36.057, 2.36.0571, 2.68.060, 19.27.076, 29A.08.760, 38.52.040, 39.26.090, 39.26.100, 39.26.235, 40.14.020, 40.26.020, 41.05.031, 41.06.070, 41.06.094, 41.06.142, 41.07.020, 42.17A.060, 42.17A.705, 43.41.391, 43.41.440, 43.41.442, 43.41.444, 43.63A.550, 43.70.054, 43.88.090, 43.88.092, 43.371.090, 43.42A.030, 43.41.430, 43.330.534, 43.371.020, 44.68.065, 46.20.037, 46.20.157, 70A.02.110, and 71.24.898; reenacting and amending RCW 39.94.040, 43.88.160, and 50A.25.070; adding a new section to chapter 38.52 RCW; recodifying RCW 43.105.331; and repealing RCW 41.06.101 and 43.105.205.

BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF WASHINGTON:

Sec. 1. RCW 43.105.006 and 2011 1st sp.s. c 43 s 801 are each amended to read as follows:

To achieve maximum benefit from advances in information technology the state establishes a centralized provider and procurer of certain information technology services as an agency to support the needs of state agencies. This agency shall be known as ((the consolidated technology services agency))Washington technology solutions. To ensure maximum benefit to the state, state agencies shall rely on ((the consolidated technology services agency))Washington technology solutions for those services with a business case of broad use, uniformity, scalability, and price sensitivity to aggregation and volume. The agency shall also establish clear policies and standards for efficient and acceptable use of technology in state government, providing guidance and leadership to state agencies in deploying technology to meet their business objectives.

To successfully meet agency needs and meet its obligation as the primary service provider for these services, ((the consolidated technology services agency))Washington technology solutions must offer high quality services at the lowest possible price. It must be able to attract an adaptable and competitive workforce, be authorized to procure services where the business case justifies it, create policy and standards to address changes in the technology industry, and be accountable to its customers for the efficient and effective delivery of critical business services.

((The consolidated technology services agency))Washington technology solutions is established as an agency in state government. The agency is established with clear accountability to the agencies it serves and to the public. This accountability will come through enhanced transparency in the agency's operation and performance. The agency is also established with broad flexibility to adapt its operations, policies and standards, and service catalog to address the needs of customer agencies, and to do so in the most cost-effective ways.

Sec. 2. RCW 43.105.007 and 2015 3rd sp.s. c 1 s 101 are each amended to read as follows:

Information technology is a tool used by state agencies to improve their ability to deliver public services efficiently and effectively. Advances in information technology, including advances in hardware, software, and business processes for implementing and managing these resources, offer new opportunities to improve the level of support provided to citizens and state agencies and to reduce the per-transaction cost of these services. These advances are one component in the process of reengineering how government delivers services to citizens.

To fully realize the service improvements and cost efficiency from the effective application of information technology to its business processes, state government must establish decision-making structures that connect business processes and information technology in an operating model. Many of these business practices transcend individual agency processes and should be worked at the enterprise level. To do this requires an effective partnership of executive management, business processes owners, and providers of support functions necessary to efficiently and effectively deliver services to citizens.

To maximize the potential for information technology to contribute to government business process reengineering, the state must establish clear central authority to plan, set enterprise policies and standards, and provide project oversight and management analysis of the various aspects of a business process.

Establishing ((a state chief information officer as the director of the consolidated technology services agency))Washington technology solutions will provide state government with the cohesive structure necessary to develop improved operating models with agency directors and reengineer business process to enhance service delivery while capturing savings.

To achieve maximum benefit from advances in information technology, the state establishes a centralized provider and procurer of certain information technology services as an agency to support the needs of public agencies. This agency shall be known as ((the consolidated technology services agency))Washington technology solutions. To ensure maximum benefit to the state, state agencies shall rely on ((the consolidated technology services agency))Washington technology solutions for those services with a business case of broad use, uniformity, scalability, and price sensitivity to aggregation and volume.

To successfully meet public agency needs and meet its obligation as the primary service provider for these services, ((the consolidated technology services agency))Washington technology solutions must offer high quality services at the best value. It must be able to attract an adaptable and competitive workforce, be authorized to procure services where the business case justifies it, and be accountable to its customers for the efficient and effective delivery of critical business services.

((The consolidated technology services agency))Washington technology solutions is established with clear accountability to the agencies it serves and to the public. This accountability will come through enhanced transparency in the agency's operation and performance. The agency is also established with broad flexibility to adapt its operations and service catalog to address the needs of customer agencies, and to do so in the most cost-effective ways.

Sec. 3. RCW 43.105.020 and 2023 c 124 s 1 are each amended to read as follows:

The definitions in this section apply throughout this chapter unless the context clearly requires otherwise.

(1) "Agency" means ((the consolidated technology services agency))Washington technology solutions.

(2) "Board" means the technology services board.

(3) "Cloud computing" has the same meaning as provided by the special publication 800-145 issued by the national institute of standards and technology of the United States department of commerce as of September 2011 or its successor publications.

(4) "Customer agencies" means all entities that purchase or use information technology resources, telecommunications, or services from ((the consolidated technology services agency))Washington technology solutions.

(5) "Director" means the state chief information officer, who is the director of ((the consolidated technology services agency))Washington technology solutions.

(6) "Enterprise architecture" means an ongoing activity for translating business vision and strategy into effective enterprise change. It is a continuous activity. Enterprise architecture creates, communicates, and improves the key principles and models that describe the enterprise's future state and enable its evolution.

(7) "Equipment" means the machines, devices, and transmission facilities used in information processing, including but not limited to computers, terminals, telephones, wireless communications system facilities, cables, and any physical facility necessary for the operation of such equipment.

(8) "Information" includes, but is not limited to, data, text, voice, and video.

(9) "Information security" means the protection of communication and information resources from unauthorized access, use, disclosure, disruption, modification, or destruction in order to:

(a) Prevent improper information modification or destruction;

(b) Preserve authorized restrictions on information access and disclosure;

(c) Ensure timely and reliable access to and use of information; and

(d) Maintain the confidentiality, integrity, and availability of information.

(10) "Information technology" includes, but is not limited to, all electronic technology systems and services, automated information handling, system design and analysis, conversion of data, computer programming, information storage and retrieval, telecommunications, requisite system controls, simulation, electronic commerce, radio technologies, and all related interactions between people and machines.

(11) "Information technology portfolio" or "portfolio" means a strategic management process documenting relationships between agency missions and information technology and telecommunications investments.

(12) "K-20 network" means the network established in RCW 43.41.391.

(13) "Local governments" includes all municipal and quasi-municipal corporations and political subdivisions, and all agencies of such corporations and subdivisions authorized to contract separately.

(14) (("Office" means the office of the state chief information officer within the consolidated technology services agency.

(15))) "Oversight" means a process of comprehensive risk analysis and management designed to ensure optimum use of information technology resources and telecommunications.

(((16)))(15) "Proprietary software" means that software offered for sale or license.

(((17)))(16) "Public agency" means any agency of this state or another state; any political subdivision or unit of local government of this state or another state including, but not limited to, municipal corporations, quasi-municipal corporations, special purpose districts, and local service districts; any public benefit nonprofit corporation; any agency of the United States; and any Indian tribe recognized as such by the federal government.

(((18)))(17) "Public benefit nonprofit corporation" means a public benefit nonprofit corporation as defined in RCW 24.03A.245 that is receiving local, state, or federal funds either directly or through a public agency other than an Indian tribe or political subdivision of another state.

(((19)))(18) "Public record" has the definitions in RCW 42.56.010 and chapter 40.14 RCW and includes legislative records and court records that are available for public inspection.

(((20)))(19) "Public safety" refers to any entity or services that ensure the welfare and protection of the public.

(((21)))(20) "Ransomware" means a type of malware that attempts to deny a user or organization access to data or systems, usually through encryption, until a sum of money or other currency is paid or the user or organization is forced to take a specific action.

(((22)))(21) "Security incident" means an accidental or deliberative event that results in or constitutes an imminent threat of the unauthorized access, loss, disclosure, modification, disruption, or destruction of communication and information resources.

(((23)))(22) "State agency" means every state office, department, division, bureau, board, commission, or other state agency, including offices headed by a statewide elected official.

(((24)))(23) "Telecommunications" includes, but is not limited to, wireless or wired systems for transport of voice, video, and data communications, network systems, requisite facilities, equipment, system controls, simulation, electronic commerce, and all related interactions between people and machines.

(((25)))(24) "Utility-based infrastructure services" includes personal computer and portable device support, servers and server administration, security administration, network administration, telephony, email, and other information technology services commonly used by state agencies.

Sec. 4. RCW 43.105.025 and 2015 3rd sp.s. c 1 s 103 are each amended to read as follows:

(1) There is created ((the consolidated technology services agency))Washington technology solutions, an agency of state government. The agency shall be headed by a director, who is the state chief information officer. The director shall be appointed by the governor with the consent of the senate. The director shall serve at the governor's pleasure and shall receive such salary as determined by the governor. If a vacancy occurs in the position while the senate is not in session, the governor shall make a temporary appointment until the next meeting of the senate at which time he or she shall present to that body his or her nomination for the position.

(2) The director shall:

(a) Appoint a confidential secretary and such deputy and assistant directors as needed to administer the agency; ((and))

(b) Appoint such professional, technical, and clerical assistants and employees as may be necessary to perform the duties imposed by this chapter in accordance with chapter 41.06 RCW, except as otherwise provided by law; and

(c) Establish standards and policies to govern information technology in the state of Washington.

(3) The director may create such administrative structures as he or she deems appropriate and may delegate any power or duty vested in him or her by this chapter or other law.

(4) The director shall exercise all the powers and perform all the duties prescribed by law with respect to the administration of this chapter including:

(a) Reporting to the governor any matters relating to abuses and evasions of this chapter;

(b) Accepting and expending gifts and grants that are related to the purposes of this chapter;

(c) Applying for grants from public and private entities, and receiving and administering any grant funding received for the purpose and intent of this chapter; and

(d) Performing other duties as are necessary and consistent with law.

Sec. 5. RCW 43.105.052 and 2015 3rd sp.s. c 1 s 104 are each amended to read as follows:

(1) The agency shall:

(((1)))(a) Make available information services to public agencies and public benefit nonprofit corporations;

(((2)))(b) Establish rates and fees for services provided by the agency;

(((3)))(c) Develop a billing rate plan for a two-year period to coincide with the budgeting process. The rate plan must be subject to review at least annually by the office of financial management. The rate plan must show the proposed rates by each cost center and show the components of the rate structure as mutually determined by the agency and the office of financial management. The rate plan and any adjustments to rates must be approved by the office of financial management;

(((4)))(d) Develop a detailed business plan for any service or activity to be contracted under RCW 41.06.142(((7)))(11)(b);

(((5)))(e) Develop plans for the agency's achievement of statewide goals and objectives set forth in the state strategic information technology plan required under RCW 43.105.220;

(((6)))(f) Enable the standardization and consolidation of information technology infrastructure across all state agencies to support enterprise-based system development and improve and maintain service delivery; ((and

(7)))(g) Prepare and lead the implementation of a strategic direction and enterprise architecture for information technology for state government;

(k) Perform all other matters and things necessary to carry out the purposes and provisions of this chapter.

Sec. 6. RCW 43.105.054 and 2021 c 291 s 9 are each amended to read as follows:

(1) ((The director shall establish standards and policies to govern information technology in the state of Washington.

(2))) The ((office))agency shall have the following powers and duties related to the governance of information services:

(a) To develop statewide standards and policies governing the:

(i) Acquisition of equipment, software, and technology-related services;

(ii) Disposition of equipment;

(iii) Licensing of the radio spectrum by or on behalf of state agencies; and

(iv) Confidentiality of computerized data;

(b) To develop statewide and interagency technical policies, standards, and procedures;

(c) To review and approve standards and common specifications for new or expanded telecommunications networks proposed by agencies, public postsecondary education institutions, educational service districts, or statewide or regional providers of K-12 information technology services;

(d) With input from the legislature and the judiciary, to provide direction concerning strategic planning goals and objectives for the state;

(e) To establish policies for the periodic review by the director of state agency performance which may include but are not limited to analysis of:

(i) Planning, management, control, and use of information services;

(ii) Training and education;

(iii) Project management; and

(iv) Cybersecurity, in coordination with the office of cybersecurity;

(f) To coordinate with state agencies with an annual information technology expenditure that exceeds ten million dollars to implement a technology business management program to identify opportunities for savings and efficiencies in information technology expenditures and to monitor ongoing financial performance of technology investments;

(g) ((In conjunction with the consolidated technology services agency, to))To develop statewide standards for agency purchases of technology networking equipment and services;

(h) To implement a process for detecting, reporting, and responding to security incidents consistent with the information security standards, policies, and guidelines adopted by the director;

(i) To develop plans and procedures to ensure the continuity of commerce for information resources that support the operations and assets of state agencies in the event of a security incident; and

(j) To work with the office of cybersecurity, department of commerce, and other economic development stakeholders to facilitate the development of a strategy that includes key local, state, and federal assets that will create Washington as a national leader in cybersecurity. The ((office))agency shall collaborate with, including but not limited to, community colleges, universities, the national guard, the department of defense, the department of energy, and national laboratories to develop the strategy.

(((3)))(2) Statewide technical standards to promote and facilitate electronic information sharing and access are an essential component of acceptable and reliable public access service and complement content-related standards designed to meet those goals. The ((office))agency shall:

(a) Establish technical standards to facilitate electronic access to government information and interoperability of information systems, including wireless communications systems; and

(b) Require agencies to include an evaluation of electronic public access needs when planning new information systems or major upgrades of systems.

In developing these standards, the ((office))agency is encouraged to include the state library, state archives, and appropriate representatives of state and local government.

Sec. 7. RCW 43.105.220 and 2015 3rd sp.s. c 1 s 203 are each amended to read as follows:

(1) The ((office))agency shall prepare a state strategic information technology plan which shall establish a statewide mission, goals, and objectives for the use of information technology, including goals for electronic access to government records, information, and services. The plan shall be developed in accordance with the standards and policies established by the ((office))agency. The ((office))agency shall seek the advice of the board in the development of this plan.

The plan shall be updated as necessary and submitted to the governor and the legislature.

(2) The ((office))agency shall prepare a biennial state performance report on information technology based on state agency performance reports required under RCW 43.105.235 and other information deemed appropriate by the ((office))agency. The report shall include, but not be limited to:

(a) An analysis, based upon agency portfolios, of the state's information technology infrastructure, including its value, condition, and capacity;

(b) An evaluation of performance relating to information technology;

(c) An assessment of progress made toward implementing the state strategic information technology plan, including progress toward electronic access to public information and enabling citizens to have two-way access to public records, information, and services; and

(d) An analysis of the success or failure, feasibility, progress, costs, and timeliness of implementation of major information technology projects under RCW 43.105.245. At a minimum, the portion of the report regarding major technology projects must include:

(i) The total cost data for the entire life-cycle of the project, including capital and operational costs, broken down by staffing costs, contracted service, hardware purchase or lease, software purchase or lease, travel, and training. The original budget must also be shown for comparison;

(ii) The original proposed project schedule and the final actual project schedule;

(iii) Data regarding progress towards meeting the original goals and performance measures of the project;

(iv) Discussion of lessons learned on the project, performance of any contractors used, and reasons for project delays or cost increases; and

(v) Identification of benefits generated by major information technology projects developed under RCW 43.105.245.

(3) Copies of the report shall be distributed biennially to the governor and the legislature. The major technology section of the report must examine major information technology projects completed in the previous biennium.

Sec. 8. RCW 43.105.240 and 2015 3rd sp.s. c 1 s 207 are each amended to read as follows:

(1) Pursuant to RCW 43.88.092(3), at the request of the director of financial management, the ((office))agency shall evaluate both state agency information technology current spending and technology budget requests, including those proposed by the superintendent of public instruction, in conjunction with educational service districts, or statewide or regional providers of K-12 education information technology services. The ((office))agency shall submit recommendations for funding all or part of such requests to the director of financial management. The ((office))agency shall also submit recommendations regarding consolidation and coordination of similar proposals or other efficiencies it finds in reviewing proposals.

(2) The ((office))agency shall establish criteria, consistent with portfolio-based information technology management, for the evaluation of agency budget requests under this section. Technology budget requests shall be evaluated in the context of the state's information technology portfolio; technology initiatives underlying budget requests are subject to review by the ((office))agency. Criteria shall include, but not be limited to: Feasibility of the proposed projects, consistency with the state strategic information technology plan and the state enterprise architecture, consistency with information technology portfolios, appropriate provision for public electronic access to information, evidence of business process streamlining and gathering of business and technical requirements, services, duration of investment, costs, and benefits.

Sec. 9. RCW 43.105.245 and 2015 3rd sp.s. c 1 s 208 are each amended to read as follows:

(1)(a) The ((office))agency shall establish standards and policies governing the planning, implementation, and evaluation of major information technology projects, including those proposed by the superintendent of public instruction, in conjunction with educational service districts, or statewide or regional providers of K-12 education information technology services. The standards and policies shall:

(((a)))(i) Establish criteria to identify projects which are subject to this section. Such criteria shall include, but not be limited to, significant anticipated cost, complexity, or statewide significance of the project; and

(((b)))(ii) Establish a model process and procedures which state agencies shall follow in developing and implementing projects within their information technology portfolios. This process may include project oversight experts or panels, as appropriate. State agencies may propose, for approval by the ((office))agency, a process and procedures unique to the agency. The ((office))agency may accept or require modification of such agency proposals or the ((office))agency may reject those proposals and require use of the model process and procedures established under this subsection. Any process and procedures developed under this subsection shall require (((i)))(A) distinct and identifiable phases upon which funding may be based, (((ii)))(B) user validation of products through system demonstrations and testing of prototypes and deliverables, and (((iii)))(C) other elements identified by the ((office))agency.

(b) The director may suspend or terminate a major project((, and direct that the project funds be placed into unallotted reserve status,)) if the director determines that the project is not meeting or is not expected to meet the project's anticipated performance standards. Upon suspension or termination of a major project, the director of the office of financial management shall direct that the project funds be placed into unallotted reserved status.

(2) The ((office of financial management))agency shall establish policies and standards consistent with portfolio-based information technology management to govern the funding of projects developed under this section. The policies and standards shall provide for:

(a) Funding of a project under terms and conditions mutually agreed to by the director, the director of financial management, and the head of the agency proposing the project. However, the ((office of financial management))agency, in consultation with the office of financial management, may require incremental funding of a project on a phase-by-phase basis whereby funds for a given phase of a project may be released only when the ((office of financial management))agency determines, with the advice of the director, that the previous phase is satisfactorily completed; and

(b) Other elements deemed necessary by the ((office of financial management))agency.

Sec. 10. RCW 43.105.255 and 2015 3rd sp.s. c 1 s 209 are each amended to read as follows:

(1) Prior to making a commitment to purchase, acquire, or develop a major information technology project or service, state agencies must provide a proposal to the ((office))agency outlining the business case of the proposed product or service, including the up-front and ongoing cost of the proposal.

(2) Within thirty days of receipt of a proposal, the ((office))agency shall approve the proposal, reject it, or propose modifications.

(3) In reviewing a proposal, the ((office))agency must determine whether the product or service is consistent with:

(a) The standards and policies developed by the director pursuant to RCW 43.105.054 and 43.105.025; and

(b) The state's enterprise-based strategy.

(4) If a substantially similar product or service is offered by the agency, the director may require the state agency to procure the product or service through the agency, if doing so would benefit the state as an enterprise.

(5) The ((office))agency shall provide guidance to state agencies as to what threshold of information technology spending constitutes a major information technology product or service under this section.

Sec. 11. RCW 43.105.265 and 2015 3rd sp.s. c 1 s 210 are each amended to read as follows:

(1) The ((office))agency shall develop an enterprise-based strategy for information technology in state government informed by portfolio management planning and information technology expenditure information collected from state agencies pursuant to RCW 43.88.092.

(2)(a) The ((office))agency shall develop an ongoing enterprise architecture program for translating business vision and strategy into effective enterprise change. This program will create, communicate, and improve the key principles and models that describe the enterprise's future state and enable its evolution, in keeping with the priorities of government and the information technology strategic plan.

(b) The enterprise architecture program will facilitate business process collaboration among agencies statewide; improving the reliability, interoperability, and sustainability of the business processes that state agencies use.

(c) In developing an enterprise-based strategy for the state, the ((office))agency is encouraged to consider the following strategies as possible opportunities for achieving greater efficiency:

(i) Developing evaluation criteria for deciding which common enterprise-wide business processes should become managed as enterprise services;

(ii) Developing a road map of priorities for creating enterprise services;

(iii) Developing decision criteria for determining implementation criteria for centralized or decentralized enterprise services;

(iv) Developing evaluation criteria for deciding which technology investments to continue, hold, or drop; and

(v) Performing such other duties as may be needed to promote effective enterprise change.

(((c)))(d) The ((office))agency will establish performance measurement criteria for each of its initiatives; will measure the success of those initiatives; and will assess its quarterly results with the director to determine whether to continue, revise, or disband the initiative.

Sec. 12. RCW 43.105.285 and 2015 3rd sp.s. c 1 s 211 are each amended to read as follows:

(1) The technology services board is created within the agency.

(2)(a) The board shall be composed of thirteen members. Six members shall be appointed by the governor, three of whom shall be representatives of state agencies or institutions, and three of whom shall be representatives of the private sector. Of the state agency representatives, at least one of the representatives must have direct experience using the software projects overseen by the board or reasonably expect to use the new software developed under the oversight of the board. Two members shall represent the house of representatives and shall be selected by the speaker of the house of representatives with one representative chosen from each major caucus of the house of representatives; two members shall represent the senate and shall be appointed by the president of the senate with one representative chosen from each major caucus of the senate. One member shall be the director who shall be a voting member of the board and serve as chair. Two nonvoting members with information technology expertise must be appointed by the governor as follows:

(((a)))(i) One member representing state agency bargaining units shall be selected from a list of three names submitted by each of the general government exclusive bargaining representatives; and

(((b)))(ii) One member representing local governments shall be selected from a list of three names submitted by commonly recognized local government organizations.

(b) The governor may reject all recommendations and request new recommendations.

(3) Of the initial members, three must be appointed for a one-year term, three must be appointed for a two-year term, and four must be appointed for a three-year term. Thereafter, members must be appointed for three-year terms.

(4) Vacancies shall be filled in the same manner that the original appointments were made for the remainder of the member's term.

(5) Members of the board shall be reimbursed for travel expenses as provided in RCW 43.03.050 and 43.03.060.

(6) The ((office))agency shall provide staff support to the board.

Sec. 13. RCW 43.105.287 and 2015 3rd sp.s. c 1 s 212 are each amended to read as follows:

The board shall have the following powers and duties related to information services:

(1) To review and approve standards and policies, developed by the ((office))agency, governing the acquisition and disposition of equipment, proprietary software, and purchased services, licensing of the radio spectrum by or on behalf of state agencies, and confidentiality of computerized data;

(2) To review and approve statewide or interagency technical policies and standards developed by the ((office))agency;

(3) To review, approve, and provide oversight of major information technology projects to ensure that no major information technology project proposed by a state agency is approved or authorized funding by the board without consideration of the technical and financial business case for the project, including a review of:

(a) The total cost of ownership across the life of the project;

(b) All major technical options and alternatives analyzed, and reviewed, if necessary, by independent technical sources; and

(c) Whether the project is technically and financially justifiable when compared against the state's enterprise-based strategy, long-term technology trends, and existing or potential partnerships with private providers or vendors;

(4) To review and approve standards and common specifications for new or expanded telecommunications networks proposed by state agencies, public postsecondary education institutions, educational service districts, or statewide or regional providers of K-12 information technology services, and to assure the cost-effective development and incremental implementation of a statewide video telecommunications system to serve: Public schools; educational service districts; vocational-technical institutes; community colleges; colleges and universities; state and local government; and the general public through public affairs programming;

(5) To develop a policy to determine whether a proposed project, product, or service should undergo an independent technical and financial analysis prior to submitting a request to the office of financial management for the inclusion in any proposed operating, capital, or transportation budget;

(6) To approve contracting for services and activities under RCW 41.06.142(((7)))(11) for the agency. To approve any service or activity to be contracted under RCW 41.06.142(((7)))(11)(b), the board must also review the proposed business plan and recommendation submitted by the ((office))agency;

(7) To consider, on an ongoing basis, ways to promote strategic investments in enterprise-level information technology projects that will result in service improvements and cost efficiency;

(8) To provide a forum to solicit external expertise and perspective on developments in information technology, enterprise architecture, standards, and policy development; and

(9) To provide a forum where ideas and issues related to information technology plans, policies, and standards can be reviewed.

Sec. 14. RCW 43.105.342 and 2015 3rd sp.s. c 1 s 501 are each amended to read as follows:

(1) The ((consolidated technology services))Washington technology solutions revolving account is created in the custody of the state treasurer. All receipts from agency fees and charges for services collected from public agencies must be deposited into the account. The account must be used for the:

(a) Acquisition of equipment, software, supplies, and services; and

(b) Payment of salaries, wages, and other costs incidental to the acquisition, development, maintenance, operation, and administration of: (i) Information services; (ii) telecommunications; (iii) systems; (iv) software; (v) supplies; and (vi) equipment, including the payment of principal and interest on debt by the agency and other users as determined by the office of financial management.

(2) The director or the director's designee, with the approval of the technology services board, is authorized to expend up to one million dollars per fiscal biennium for the technology services board to conduct independent technical and financial analysis of proposed information technology projects.

(3) Only the director or the director's designee may authorize expenditures from the account. The account is subject to allotment procedures under chapter 43.88 RCW, but no appropriation is required for expenditures except as provided in subsection (4) of this section.

(4) Expenditures for the strategic planning and policy component of the agency are subject to appropriation.

Sec. 15. RCW 43.105.359 and 2011 1st sp.s. c 43 s 724 are each amended to read as follows:

The state library, with the assistance of the ((office))agency and the state archives, shall establish a pilot project to design and test an electronic information locator system, allowing members of the public to locate and access electronic public records. In designing the system, the following factors shall be considered: (1) Ease of operation by citizens; (2) access through multiple technologies, such as direct dial and toll-free numbers, kiosks, and the internet; (3) compatibility with private online services; and (4) capability of expanding the electronic public records included in the system. The pilot project may restrict the type and quality of electronic public records that are included in the system to test the feasibility of making electronic public records and information widely available to the public.

Sec. 16. RCW 43.105.369 and 2016 c 195 s 2 are each amended to read as follows:

(1) The office of privacy and data protection is created within the ((office of the state chief information officer))agency. The purpose of the office of privacy and data protection is to serve as a central point of contact for state agencies on policy matters involving data privacy and data protection.

(2) The director shall appoint the chief privacy officer, who is the director of the office of privacy and data protection.

(3) The primary duties of the office of privacy and data protection with respect to state agencies are:

(a) To conduct an annual privacy review;

(b) To conduct an annual privacy training for state agencies and employees;

(c) To articulate privacy principles and best practices;

(d) To coordinate data protection in cooperation with the agency; and

(e) To participate with the ((office of the state chief information officer))agency in the review of major state agency projects involving personally identifiable information.

(4) The office of privacy and data protection must serve as a resource to local governments and the public on data privacy and protection concerns by:

(a) Developing and promoting the dissemination of best practices for the collection and storage of personally identifiable information, including establishing and conducting a training program or programs for local governments; and

(b) Educating consumers about the use of personally identifiable information on mobile and digital networks and measures that can help protect this information.

(5) By December 1, 2016, and every four years thereafter, the office of privacy and data protection must prepare and submit to the legislature a report evaluating its performance. The office of privacy and data protection must establish performance measures in its 2016 report to the legislature and, in each report thereafter, demonstrate the extent to which performance results have been achieved. These performance measures must include, but are not limited to, the following:

(a) The number of state agencies and employees who have participated in the annual privacy training;

(b) A report on the extent of the office of privacy and data protection's coordination with international and national experts in the fields of data privacy, data protection, and access equity;

(c) A report on the implementation of data protection measures by state agencies attributable in whole or in part to the office of privacy and data protection's coordination of efforts; and

(d) A report on consumer education efforts, including but not limited to the number of consumers educated through public outreach efforts, as indicated by how frequently educational documents were accessed, the office of privacy and data protection's participation in outreach events, and inquiries received back from consumers via telephone or other media.

(6) Within one year of June 9, 2016, the office of privacy and data protection must submit to the joint legislative audit and review committee for review and comment the performance measures developed under subsection (5) of this section and a data collection plan.

(7) The office of privacy and data protection shall submit a report to the legislature on the: (a) Extent to which telecommunications providers in the state are deploying advanced telecommunications capability; and (b) existence of any inequality in access to advanced telecommunications infrastructure experienced by residents of tribal lands, rural areas, and economically distressed communities. The report may be submitted at a time within the discretion of the office of privacy and data protection, at least once every four years, and only to the extent the office of privacy and data protection is able to gather and present the information within existing resources.

Sec. 17. RCW 43.105.375 and 2021 c 40 s 3 are each amended to read as follows:

(1) Except as provided by subsection (2) of this section, state agencies shall locate all existing and new information or telecommunications investments in the state data center or within third-party, commercial cloud computing services.

(2) State agencies with a service requirement that precludes them from complying with subsection (1) of this section must receive a waiver from the ((office))agency. Waivers must be based upon written justification from the requesting state agency citing specific service or performance requirements for locating servers outside the state's common platform.

(3) The legislature and the judiciary, which are constitutionally recognized as separate branches of government, may enter into an interagency agreement with the ((office))agency to migrate its servers into the state data center or third-party, commercial cloud computing services.

(((5) [(4)]))(4) This section does not apply to institutions of higher education.

Sec. 18. RCW 43.105.385 and 2015 3rd sp.s. c 1 s 220 are each amended to read as follows:

(1) The ((office))agency shall conduct a needs assessment and develop a migration strategy to ensure that, over time, all state agencies are moving towards using the agency as their central service provider for all utility-based infrastructure services, including centralized PC and infrastructure support. State agency-specific application services shall remain managed within individual agencies.

(2) The ((office))agency shall develop short-term and long-term objectives as part of the migration strategy.

(3) This section does not apply to institutions of higher education.

Sec. 19. RCW 43.105.450 and 2021 c 291 s 1 are each amended to read as follows:

(1) The office of cybersecurity is created within the ((office of the chief information officer))agency.

(2) The director shall appoint a state chief information security officer, who is the director of the office of cybersecurity.

(3) The primary duties of the office of cybersecurity are:

(a) To establish security standards and policies to protect the state's information technology systems and infrastructure, to provide appropriate governance and application of the standards and policies across information technology resources used by the state, and to ensure the confidentiality, availability, and integrity of the information transacted, stored, or processed in the state's information technology systems and infrastructure;

(b) To develop a centralized cybersecurity protocol for protecting and managing state information technology assets and infrastructure;

(c) To detect and respond to security incidents consistent with information security standards and policies;

(d) To create a model incident response plan for agency adoption, with the office of cybersecurity as the incident response coordinator for incidents that: (i) Impact multiple agencies; (ii) impact more than 10,000 citizens; (iii) involve a nation state actor; or (iv) are likely to be in the public domain;

(e) To ensure the continuity of state business and information resources that support the operations and assets of state agencies in the event of a security incident;

(f) To provide formal guidance to agencies on leading practices and applicable standards to ensure a whole government approach to cybersecurity, which shall include, but not be limited to, guidance regarding: (i) The configuration and architecture of agencies' information technology systems, infrastructure, and assets; (ii) governance, compliance, and oversight; and (iii) incident investigation and response;

(g) To serve as a resource for local and municipal governments in Washington in the area of cybersecurity;

(h) To develop a service catalog of cybersecurity services to be offered to state and local governments;

(i) To collaborate with state agencies in developing standards, functions, and services in order to ensure state agency regulatory environments are understood and considered as part of an enterprise cybersecurity response;

(j) To define core services that must be managed by agency information technology security programs; and

(k) To perform all other matters and things necessary to carry out the purposes of this chapter.

(4) In performing its duties, the office of cybersecurity must address the highest levels of security required to protect confidential information transacted, stored, or processed in the state's information technology systems and infrastructure that is specifically protected from disclosure by state or federal law and for which strict handling requirements are required.

(5) In executing its duties under subsection (3) of this section, the office of cybersecurity shall use or rely upon existing, industry standard, widely adopted cybersecurity standards, with a preference for United States federal standards.

(6) Each state agency, institution of higher education, the legislature, and the judiciary must develop an information technology security program consistent with the office of cybersecurity's standards and policies.

(7)(a) Each state agency information technology security program must adhere to the office of cybersecurity's security standards and policies. Each state agency must review and update its program annually, certify to the office of cybersecurity that its program is in compliance with the office of cybersecurity's security standards and policies, and provide the office of cybersecurity with a list of the agency's cybersecurity business needs and agency program metrics.

(b) The office of cybersecurity shall require a state agency to obtain an independent compliance audit of its information technology security program and controls at least once every three years to determine whether the state agency's information technology security program is in compliance with the standards and policies established by the agency and that security controls identified by the state agency in its security program are operating efficiently.

(c) If a review or an audit conducted under (a) or (b) of this subsection identifies any failure to comply with the standards and policies of the office of cybersecurity or any other material cybersecurity risk, the office of cybersecurity must require the state agency to formulate and implement a plan to resolve the failure or risk. On an annual basis, the office of cybersecurity must provide a confidential report to the governor and appropriate committees of the legislature identifying and describing the cybersecurity risk or failure to comply with the office of cybersecurity's security policy or implementing cybersecurity standards and policies, as well as the agency's plan to resolve such failure or risk. Risks that are not mitigated are to be tracked by the office of cybersecurity and reviewed with the governor and the chair and ranking member of the appropriate committees of the legislature on a quarterly basis.

(d) The reports produced, and information compiled, pursuant to this subsection (7) are confidential and may not be disclosed under chapter 42.56 RCW.

(8) In the case of institutions of higher education, the judiciary, and the legislature, each information technology security program must be comparable to the intended outcomes of the office of cybersecurity's security standards and policies.

Sec. 20. RCW 43.105.331 and 2017 c 92 s 1 are each amended to read as follows:

(1) The director shall appoint a state interoperability executive committee, the membership of which must include, but not be limited to, representatives of the military department, the Washington state patrol, the department of transportation, ((the office of the state chief information officer))Washington technology solutions, the department of natural resources, the department of fish and wildlife, the department of health, the department of corrections, city and county governments, state and local fire chiefs, police chiefs, and sheriffs, state and local emergency management directors, tribal nations, and public safety answering points, commonly known as 911 call centers. The chair and legislative members of the board will serve as nonvoting ex officio members of the committee. Voting membership may not exceed twenty-two members.

(2) The director shall appoint the chair of the committee from among the voting members of the committee.

(3) The state interoperability executive committee has the following responsibilities:

(a) Develop policies and make recommendations ((to the office)) for technical standards for state wireless radio communications systems, including emergency communications systems. The standards must address, among other things, the interoperability of systems, taking into account both existing and future systems and technologies;

(b) Coordinate and manage on behalf of the ((office))department the licensing and use of state-designated and state-licensed radio frequencies, including the spectrum used for public safety and emergency communications, and serve as the point of contact with the federal communications commission and the first responders network authority on matters relating to allocation, use, and licensing of radio spectrum;

(c) Coordinate the purchasing of all state wireless radio communications system equipment to ensure that:

(i) Any new trunked radio system shall be, at a minimum, project-25; and

(ii) Any new land-mobile radio system that requires advanced digital features shall be, at a minimum, project-25;

(d) Seek support, including possible federal or other funding, for state-sponsored wireless communications systems;

(e) Develop recommendations for legislation that may be required to promote interoperability of state wireless communications systems;

(f) Foster cooperation and coordination among public safety and emergency response organizations;

(g) Work with wireless communications groups and associations to ensure interoperability among all public safety and emergency response wireless communications systems; and

(h) Perform such other duties as may be assigned by the director to promote interoperability of wireless communications systems.

(4) The ((office))department shall provide administrative support to the committee.

Sec. 21. RCW 2.36.054 and 2023 c 316 s 4 are each amended to read as follows:

Unless otherwise specified by rule of the supreme court, the jury source list and master jury list for each county shall be created as provided by this section.

(1) The superior court of each county, after consultation with the county clerk and county auditor of that jurisdiction, shall annually notify ((the consolidated technology services agency))Washington technology solutions not later than March 1st of each year of its election to use either a jury source list that is merged by the county or a jury source list that is merged by ((the consolidated technology services agency))Washington technology solutions. ((The consolidated technology services agency))Washington technology solutions shall annually furnish at no charge to the superior court of each county a separate list of the registered voters residing in that county as supplied annually by the secretary of state and a separate list of driver's license and identicard holders residing in that county as supplied annually by the department of licensing, or a merged list of all such persons residing in that county, in accordance with the annual notification required by this subsection. The lists provided by ((the consolidated technology services agency))Washington technology solutions shall be in an electronic format mutually agreed upon by the superior court requesting it and ((the consolidated technology services agency))Washington technology solutions. The annual merger of the list of registered voters residing in each county with the list of licensed drivers and identicard holders residing in each county to form a jury source list for each county shall be in accordance with the standards and methodology established in this chapter or by superseding court rule whether the merger is accomplished by ((the consolidated technology services agency))Washington technology solutions or by a county.

(2)(a) Persons on the lists of registered voters and driver's license and identicard holders shall be identified by a minimum of last name, first name, middle initial where available, date of birth, gender, and county of residence. Identifying information shall be used when merging the lists to ensure to the extent reasonably possible that persons are only listed once on the merged list. Conflicts in addresses are to be resolved by using the most recent record by date of last vote in a general election, date of driver's license or identicard address change or date of voter registration.

(b) After July 1, 2024, persons who:

(i) Apply for a driver's license or identicard in this state shall have the ability to opt in to allow the department of licensing to share the person's email address with ((the consolidated technology services agency))Washington technology solutions for the purpose of electronically receiving jury summons and other communications related to jury service; and

(ii) Apply online to ((the)) register to vote shall, immediately after completing the voter registration transaction, be directed by the secretary of state to a website where the person shall have the ability to opt in to share the person's email address with ((the consolidated technology services agency))Washington technology solutions for the purpose of electronically receiving jury summons and other communications related to jury service. The provisions of ((the [this]))this subsection (2)(b)(ii) are subject to appropriation.

(3) ((The consolidated technology services agency))Washington technology solutions shall provide counties that elect to receive a jury source list merged by ((the consolidated technology services agency))Washington technology solutions with a list of names which are possible duplicates that cannot be resolved based on the identifying information required under subsection (2) of this section. If a possible duplication cannot subsequently be resolved satisfactorily through reasonable efforts by the county receiving the merged list, the possible duplicate name shall be stricken from the jury source list until the next annual jury source list is prepared.

Sec. 22. RCW 2.36.057 and 2015 3rd sp.s. c 1 s 401 are each amended to read as follows:

The supreme court is requested to adopt court rules regarding methodology and standards for merging the list of registered voters in Washington state with the list of licensed drivers and identicard holders in Washington state for purposes of creating an expanded jury source list. The rules should specify the standard electronic format or formats in which the lists will be provided to requesting superior courts by ((the consolidated technology services agency))Washington technology solutions. In the interim, and until such court rules become effective, the methodology and standards provided in RCW 2.36.054 shall apply. An expanded jury source list shall be available to the courts for use by September 1, 1994.

Sec. 23. RCW 2.36.0571 and 2015 3rd sp.s. c 1 s 402 are each amended to read as follows:

The secretary of state, the department of licensing, and ((the consolidated technology services agency))Washington technology solutions shall adopt administrative rules as necessary to provide for the implementation of the methodology and standards established pursuant to RCW 2.36.057 and 2.36.054 or by supreme court rule.

Sec. 24. RCW 2.68.060 and 2015 3rd sp.s. c 1 s 403 are each amended to read as follows:

The administrative office of the courts, under the direction of the judicial information system committee, shall:

(1) Develop a judicial information system information technology portfolio consistent with the provisions of RCW 43.105.341;

(2) Participate in the development of an enterprise-based statewide information technology strategy;

(3) Ensure the judicial information system information technology portfolio is organized and structured to clearly indicate participation in and use of enterprise-wide information technology strategies;

(4) As part of the biennial budget process, submit the judicial information system information technology portfolio to the chair and ranking member of the ways and means committees of the house of representatives and the senate, the office of financial management, and ((the consolidated technology services agency))Washington technology solutions.

Sec. 25. RCW 19.27.076 and 2018 c 207 s 6 are each amended to read as follows:

The building code council, in consultation with ((the office of the chief information officer))Washington technology solutions, shall assess the costs and benefits of the potential acquisition and implementation of open public access information technologies to enhance the council's code adoption process and report back to the appropriate committees of the legislature by November 15, 2018.

Sec. 26. RCW 29A.08.760 and 2023 c 361 s 9 are each amended to read as follows:

The secretary of state shall provide a duplicate copy of the master statewide computer file or electronic data file of registered voters to ((the consolidated technology services agency))Washington technology solutions for purposes of creating the jury source list without cost. The information contained in a voter registration application is exempt from inclusion until the applicant reaches age eighteen. Disclosure of information on individuals under the age of 18 is subject to RCW 29A.08.725. Restrictions as to the commercial use of the information on the statewide computer data file of registered voters, and penalties for its misuse, shall be the same as provided in RCW 29A.08.720 and 29A.08.740.

Sec. 27. RCW 38.52.040 and 2023 c 124 s 2 are each amended to read as follows:

(1) There is hereby created the emergency management council (hereinafter called the council), to consist of not more than 21 members who shall be appointed by the adjutant general. The membership of the council shall include, but not be limited to, representatives of city and county governments, two representatives of federally recognized tribes, sheriffs and police chiefs, county coroners and medical examiners, the Washington state patrol, the military department, the department of ecology, state and local fire chiefs, seismic safety experts, state and local emergency management directors, search and rescue volunteers, medical professions who have expertise in emergency medical care, building officials, private industry, and the office of the superintendent of public instruction. The representatives of private industry shall include persons knowledgeable in emergency and hazardous materials management. The councilmembers shall elect a chair from within the council membership. The members of the council shall serve without compensation, but may be reimbursed for their travel expenses incurred in the performance of their duties in accordance with RCW 43.03.050 and 43.03.060 as now existing or hereafter amended.

(2) The emergency management council shall advise the governor and the director on all matters pertaining to state and local emergency management. The council may appoint such ad hoc committees, subcommittees, and working groups as are required to develop specific recommendations for the improvement of emergency management practices, standards, policies, or procedures. The council shall ensure that the governor receives an annual assessment of statewide emergency preparedness including, but not limited to, specific progress on hazard mitigation and reduction efforts, implementation of seismic safety improvements, reduction of flood hazards, mitigation of cybersecurity risks to critical infrastructure, and coordination of hazardous materials planning and response activities. The council shall review administrative rules governing state and local emergency management practices and recommend necessary revisions to the director.

(3) The council or a council subcommittee shall serve and periodically convene in special session as the state emergency response commission required by the emergency planning and community right-to-know act (42 U.S.C. Sec. 11001 et seq.). The state emergency response commission shall conduct those activities specified in federal statutes and regulations and state administrative rules governing the coordination of hazardous materials policy including, but not limited to, review of local emergency planning committee emergency response plans for compliance with the planning requirements in the emergency planning and community right-to-know act (42 U.S.C. Sec. 11001 et seq.). Committees shall annually review their plans to address changed conditions, and submit their plans to the state emergency response commission for review when updated, but not less than at least once every five years. The department may employ staff to assist local emergency planning committees in the development and annual review of these emergency response plans, with an initial focus on the highest risk communities through which trains that transport oil in bulk travel. By March 1, 2018, the department shall report to the governor and legislature on progress towards compliance with planning requirements. The report must also provide budget and policy recommendations for continued support of local emergency planning.

(4)(a) The cybersecurity advisory committee is created and is a subcommittee of the emergency management council. The purpose of the cybersecurity advisory committee is to provide advice and recommendations that strengthen cybersecurity in both industry and public sectors across all critical infrastructure sectors.

(b) The cybersecurity advisory committee shall bring together organizations with expertise and responsibility for cybersecurity and incident response among local government, tribes, state agencies, institutions of higher education, the technology sector, and first responders with the goal of providing recommendations on building and sustaining the state's capability to identify and mitigate cybersecurity risk and to respond to and recover from cybersecurity-related incidents, including but not limited to ransomware incidents. With respect to critical infrastructure, the cybersecurity advisory committee shall work with relevant federal agencies, state agencies, institutions of higher education as defined in chapter 28B.92 RCW, industry experts, and technical specialists to:

(i) Identify which local, tribal, and industry infrastructure sectors are at the greatest risk of cyberattacks and need the most enhanced cybersecurity measures;

(ii) Use federal guidance to analyze categories of critical infrastructure in the state that could reasonably result in catastrophic consequences if unauthorized cyber access to the infrastructure occurred;

(iii) Recommend cyber incident response exercises that relate to risk and risk mitigation in the water, transportation, communications, health care, elections, agriculture, energy, and higher education sectors, or other sectors as the cybersecurity advisory committee deems appropriate, in consultation with appropriate state agencies including, but not limited to, the energy resilience and emergency management office at the department of commerce and the secretary of state's office; and

(iv) Examine the inconsistencies between state and federal law regarding cybersecurity.

(c) In fulfilling its duties under this section, the military department and the cybersecurity advisory committee shall collaborate with ((the consolidated technology services agency))Washington technology solutions and the technology services board security subcommittee created in RCW 43.105.291.

(d) In order to protect sensitive security topics and information, the cybersecurity advisory committee must follow 6 C.F.R. Part 29, as it existed on July 23, 2023, procedures for handling critical infrastructure information. The reports produced, and information compiled, pursuant to this subsection are confidential and may not be disclosed under chapter 42.56 RCW.

(e) The cybersecurity advisory committee must contribute, as appropriate, to the emergency management council annual report and must meet quarterly. The cybersecurity advisory committee shall hold a joint meeting once a year with the technology services board security subcommittee created in RCW 43.105.291.

(f) For the purpose of this subsection, "ransomware" has the same meaning as in RCW 43.105.020.

(5)(a) The intrastate mutual aid committee is created and is a subcommittee of the emergency management council. The intrastate mutual aid committee consists of not more than five members who must be appointed by the council chair from council membership. The chair of the intrastate mutual aid committee is the military department representative appointed as a member of the council. Meetings of the intrastate mutual aid committee must be held at least annually.

(b) In support of the intrastate mutual aid system established in chapter 38.56 RCW, the intrastate mutual aid committee shall develop and update guidelines and procedures to facilitate implementation of the intrastate mutual aid system by member jurisdictions, including but not limited to the following: Projected or anticipated costs; checklists and forms for requesting and providing assistance; recordkeeping; reimbursement procedures; and other implementation issues. These guidelines and procedures are not subject to the rule-making requirements of chapter 34.05 RCW.

(6) On emergency management issues that involve early learning, kindergarten through twelfth grade, or higher education, the emergency management council must consult with representatives from the following organizations: The department of children, youth, and families; the office of the superintendent of public instruction; the state board for community and technical colleges; and an association of public baccalaureate degree-granting institutions.

Sec. 28. RCW 39.26.090 and 2012 c 224 s 10 are each amended to read as follows:

The director shall:

(1) Establish overall state policies, standards, and procedures regarding the procurement of goods and services by all state agencies;

(2) Develop policies and standards for the use of credit cards or similar methods to make purchases;

(3) Establish procurement processes for information technology goods and services, using technology standards and policies established by ((the office of the chief information officer))Washington technology solutions under chapter ((43.41A))43.105 RCW;

(4) Enter into contracts or delegate the authority to enter into contracts on behalf of the state to facilitate the purchase, lease, rent, or otherwise acquire all goods and services and equipment needed for the support, maintenance, and use of all state agencies, except as provided in RCW 39.26.100;

(5) Have authority to delegate to agencies authorization to purchase goods and services. The authorization must specify restrictions as to dollar amount or to specific types of goods and services, based on a risk assessment process developed by the department. Acceptance of the purchasing authorization by an agency does not relieve the agency from conformance with this chapter or from policies established by the director. Also, the director may not delegate to a state agency the authorization to purchase goods and services if the agency is not in substantial compliance with overall procurement policies as established by the director;

(6) Develop procurement policies and procedures, such as unbundled contracting and subcontracting, that encourage and facilitate the purchase of goods and services from Washington small businesses, microbusinesses, and minibusinesses, and minority and women-owned businesses to the maximum extent practicable and consistent with international trade agreement commitments;

(7) Develop and implement an enterprise system for electronic procurement;

(8) Provide for a commodity classification system and provide for the adoption of goods and services commodity standards;

(9) Establish overall state policy for compliance by all agencies regarding:

(a) Food procurement procedures and materials that encourage and facilitate the purchase of Washington grown food by state agencies and institutions to the maximum extent practicable and consistent with international trade agreement commitments; and

(b) Policies requiring all food contracts to include a plan to maximize to the extent practicable and consistent with international trade agreement commitments the availability of Washington grown food purchased through the contract;

(10) Develop guidelines and criteria for the purchase of vehicles, high gas mileage vehicles, and alternate vehicle fuels and systems, equipment, and materials, that reduce overall energy-related costs and energy use by the state, including investigations into all opportunities to aggregate the purchasing of clean technologies by state and local governments, and including the requirement that new passenger vehicles purchased by the state meet the minimum standards for passenger automobile fuel economy established by the United States secretary of transportation pursuant to the energy policy and conservation act (15 U.S.C. Sec. 2002); and

(11) Develop and enact rules to implement the provisions of this chapter.

Sec. 29. RCW 39.26.100 and 2019 c 152 s 2 are each amended to read as follows:

(1) The provisions of this chapter do not apply in any manner to the operation of the state legislature except as requested by the legislature.

(2) The provisions of this chapter do not apply to the contracting for services, equipment, and activities that are necessary to establish, operate, or manage the state data center, including architecture, design, engineering, installation, and operation of the facility, that are approved by the technology services board or the acquisition of proprietary software, equipment, and information technology services necessary for or part of the provision of services offered by ((the consolidated technology services agency))Washington technology solutions.

(3) Primary authority for the purchase of specialized equipment, and instructional and research material, for their own use rests with the institutions of higher education as defined in RCW 28B.10.016.

(4) Universities operating hospitals with approval from the director, as the agent for state hospitals as defined in RCW 72.23.010, and for health care programs provided in state correctional institutions as defined in RCW 72.65.010(3) and veterans' institutions as defined in RCW 72.36.010 and 72.36.070, may make purchases for hospital operation by participating in contracts for materials, supplies, and equipment entered into by nonprofit cooperative hospital group purchasing organizations if documented to be more cost-effective.

(5) Primary authority for the purchase of materials, supplies, and equipment, for resale to other than public agencies, rests with the state agency concerned.

(6) The authority for the purchase of insurance and bonds rests with the risk manager under RCW 43.19.769, except for institutions of higher education that choose to exercise independent purchasing authority under RCW 28B.10.029.

(7) The provisions of this chapter do not apply to information technology purchases by state agencies, other than institutions of higher education and agencies of the judicial branch, if (a) the purchase is less than one hundred thousand dollars, (b) the initial purchase is approved by the chief information officer of the state, and (c) the agency director and the chief information officer of the state jointly prepare a public document providing a detailed justification for the expenditure.

(8) The authority to purchase interpreter services on behalf of applicants and recipients of public assistance who are sensory-impaired rests with the department of social and health services and the health care authority.

Sec. 30. RCW 39.26.235 and 2012 c 229 s 584 are each amended to read as follows:

(1) State agencies that are purchasing wireless devices or services must make such purchases through the state master contract, unless the state agency provides to ((the office of the chief information officer))Washington technology solutions evidence that the state agency is securing its wireless devices or services from another source for a lower cost than through participation in the state master contract.

(2) For the purposes of this section, "state agency" means any office, department, board, commission, or other unit of state government, but does not include a unit of state government headed by a statewide elected official, an institution of higher education as defined in RCW 28B.10.016, the student achievement council, the state board for community and technical colleges, or agencies of the legislative or judicial branches of state government.

Sec. 31. RCW 39.94.040 and 2011 1st sp.s. c 43 s 726 and 2011 c 151 s 7 are each reenacted and amended to read as follows:

(1) Except as provided in RCW 28B.10.022, the state may not enter into any financing contract for itself if the aggregate principal amount payable thereunder is greater than an amount to be established from time to time by the state finance committee or participate in a program providing for the issuance of certificates of participation, including any contract for credit enhancement, without the prior approval of the state finance committee. Except as provided in RCW 28B.10.022, the state finance committee shall approve the form of all financing contracts or a standard format for all financing contracts. The state finance committee also may:

(a) Consolidate existing or potential financing contracts into master financing contracts with respect to property acquired by one or more agencies, departments, instrumentalities of the state, the state board for community and technical colleges, or a state institution of higher learning; or to be acquired by another agency;

(b) Approve programs providing for the issuance of certificates of participation in master financing contracts for the state or for other agencies;

(c) Enter into agreements with trustees relating to master financing contracts; and

(d) Make appropriate rules for the performance of its duties under this chapter.

(2) In the performance of its duties under this chapter, the state finance committee may consult with representatives from the department of general administration, the office of financial management, and ((the office of the chief information officer))Washington technology solutions.

(3) With the approval of the state finance committee, the state also may enter into agreements with trustees relating to financing contracts and the issuance of certificates of participation.

(4) Except for financing contracts for real property used for the purposes described under chapter 28B.140 RCW, the state may not enter into any financing contract for real property of the state without prior approval of the legislature. For the purposes of this requirement, a financing contract must be treated as used for real property if it is being entered into by the state for the acquisition of land; the acquisition of an existing building; the construction of a new building; or a major remodeling, renovation, rehabilitation, or rebuilding of an existing building. Prior approval of the legislature is not required under this chapter for a financing contract entered into by the state under this chapter for energy conservation improvements to existing buildings where such improvements include: (a) Fixtures and equipment that are not part of a major remodeling, renovation, rehabilitation, or rebuilding of the building, or (b) other improvements to the building that are being performed for the primary purpose of energy conservation. Such energy conservation improvements must be determined eligible for financing under this chapter by the office of financial management in accordance with financing guidelines established by the state treasurer, and are to be treated as personal property for the purposes of this chapter.

(5) The state may not enter into any financing contract on behalf of another agency without the approval of such a financing contract by the governing body of the other agency.

Sec. 32. RCW 40.14.020 and 2011 1st sp.s. c 43 s 727 are each amended to read as follows:

All public records shall be and remain the property of the state of Washington. They shall be delivered by outgoing officials and employees to their successors and shall be preserved, stored, transferred, destroyed or disposed of, and otherwise managed, only in accordance with the provisions of this chapter. In order to insure the proper management and safeguarding of public records, the division of archives and records management is established in the office of the secretary of state. The state archivist, who shall administer the division and have reasonable access to all public records, wherever kept, for purposes of information, surveying, or cataloguing, shall undertake the following functions, duties, and responsibilities:

(1) To manage the archives of the state of Washington;

(2) To centralize the archives of the state of Washington, to make them available for reference and scholarship, and to insure their proper preservation;

(3) To inspect, inventory, catalog, and arrange retention and transfer schedules on all record files of all state departments and other agencies of state government;

(4) To insure the maintenance and security of all state public records and to establish safeguards against unauthorized removal or destruction;

(5) To establish and operate such state record centers as may from time to time be authorized by appropriation, for the purpose of preserving, servicing, screening and protecting all state public records which must be preserved temporarily or permanently, but which need not be retained in office space and equipment;

(6) To adopt rules under chapter 34.05 RCW:

(a) Setting standards for the durability and permanence of public records maintained by state and local agencies;

(b) Governing procedures for the creation, maintenance, transmission, cataloging, indexing, storage, or reproduction of photographic, optical, electronic, or other images of public documents or records in a manner consistent with current standards, policies, and procedures of ((the office of the chief information officer))Washington technology solutions for the acquisition of information technology;

(c) Governing the accuracy and durability of, and facilitating access to, photographic, optical, electronic, or other images used as public records; or

(d) To carry out any other provision of this chapter;

(7) To gather and disseminate to interested agencies information on all phases of records management and current practices, methods, procedures, techniques, and devices for efficient and economical management and preservation of records;

(8) To operate a central microfilming bureau which will microfilm, at cost, records approved for filming by the head of the office of origin and the archivist; to approve microfilming projects undertaken by state departments and all other agencies of state government; and to maintain proper standards for this work;

(9) To maintain necessary facilities for the review of records approved for destruction and for their economical disposition by sale or burning; directly to supervise such destruction of public records as shall be authorized by the terms of this chapter;

(10) To assist and train state and local agencies in the proper methods of creating, maintaining, cataloging, indexing, transmitting, storing, and reproducing photographic, optical, electronic, or other images used as public records;

(11) To solicit, accept, and expend donations as provided in RCW 43.07.037 for the purpose of the archive program. These purposes include, but are not limited to, acquisition, accession, interpretation, and display of archival materials. Donations that do not meet the criteria of the archive program may not be accepted.

Sec. 33. RCW 40.26.020 and 2017 2nd sp.s. c 1 s 1 are each amended to read as follows:

(1) Unless authorized by law, an agency may not collect, capture, purchase, or otherwise obtain a biometric identifier without first providing notice and obtaining the individual's consent, as follows:

(a) The notice provided must clearly specify the purpose and use of the biometric identifier; and

(b) The consent obtained must be specific to the terms of the notice, and must be recorded and maintained by the agency for the duration of the retention of the biometric identifier.

(2) Any biometric identifier obtained by an agency:

(a) May not be sold;

(b) May only be used consistent with the terms of the notice and consent obtained under subsection (1) of this section, or as authorized by law; and

(c) May be shared, including with other state agencies or local governments, only:

(i) As needed to execute the purposes of the collection, consistent with the notice and consent obtained under subsection (1) of this section, or as authorized by law; or

(ii) If such sharing is specified within the original consent.

(3) An agency that collects, purchases, or otherwise obtains biometric identifiers must:

(a) Establish security policies that ensure the integrity and appropriate confidentiality of the biometric identifiers;

(b) Address biometric identifiers in the agency's privacy policies;

(c) Only retain biometric identifiers necessary to fulfill the original purpose and use, as specified in the notice and consent obtained under subsection (1) of this section, or as authorized by law;

(d) Set record retention schedules tailored to the original purpose of the collection of biometric identifiers;

(e) Otherwise minimize the review and retention of the biometric identifiers, consistent with state record retention requirements; and

(f) Design a biometric policy to ensure that the agency is minimizing the collection of biometric identifiers to the fewest number necessary to accomplish the agency mission.

(4) The use and storage of biometric identifiers obtained by an agency must comply with all other applicable state and federal laws and regulations, including the health insurance portability and accountability act (HIPAA), the family educational rights and privacy act (FERPA), regulations regarding data breach notifications and individual privacy protections, and any policies or standards published by ((the office of the chief information officer))Washington technology solutions.

(5) Biometric identifiers may not be disclosed under the public records act, chapter 42.56 RCW.

(6) Agency policies, regulations, guidance, and retention schedules regarding biometric identifiers must be reviewed annually to incorporate any new technology, as appropriate, and respond to citizen complaints.

(7) The definitions in this subsection apply throughout this section unless the context requires otherwise.

(a) "Agency" means every state office, department, division, bureau, board, commission, or other state agency.

(b) "Biometric identifier" means any information, regardless of how it is captured, converted, stored, or shared, based on an individual's retina or iris scan, fingerprint, voiceprint, DNA, or scan of hand or face geometry, except when such information is derived from:

(i) Writing samples, written signatures, photographs, human biological samples used for valid scientific testing or screening, demographic data, tattoo descriptions, or physical descriptions such as height, weight, hair color, or eye color;

(ii) Donated organ tissues or parts, or blood or serum stored on behalf of recipients or potential recipients of living or cadaveric transplants and obtained or stored by a federally designated organ procurement agency;

(iii) Information captured from a patient in a health care setting or information collected, used, or stored for health care treatment, payment, or operations under the federal health insurance portability and accountability act of 1996; or

(iv) X-ray, roentgen process, computed tomography, magnetic resonance imaging (MRI), positron emission tomography (PET) scan, mammography, or other image or film of the human anatomy used to diagnose, develop a prognosis for, or treat an illness or other medical condition or to further validate scientific testing or screening.

(8) Subsection (1) of this section does not apply to general authority Washington law enforcement agencies, as defined under RCW 10.93.020.

(9)(a) For purposes of the restrictions and obligations in subsection (1) of this section, "biometric identifier" does not include fingerprints or DNA for the following:

(i) Limited authority Washington law enforcement agencies, as defined under RCW 10.93.020;

(ii) Agencies authorized by statute to confine a person involuntarily, or to petition for such confinement; and

(iii) The attorney general's office when obtaining or using biometric identifiers is necessary for law enforcement, legal advice, or legal representation.

(b) When an agency listed under (a) of this subsection has a need to collect, capture, purchase, or otherwise obtain a biometric identifier other than a fingerprint or DNA to fulfill a purpose authorized by law, for either an individual circumstance or a categorical circumstance, the requirements of subsection (1) of this section are waived upon such agency providing prompt written notice to the state's chief privacy officer and to the appropriate committees of the legislature, stating the type of biometric identifier at issue and the general circumstances requiring the waiver.

Sec. 34. RCW 41.05.031 and 2023 c 51 s 7 are each amended to read as follows:

The Washington state health information technology office is located within the authority. The following state agencies are directed to cooperate with the authority to establish appropriate health care information systems in their programs: The department of social and health services, the department of health, the department of labor and industries, the basic health plan, the department of veterans affairs, the department of corrections, the department of children, youth, and families, and the superintendent of public instruction.

The authority, in conjunction with these agencies and in collaboration with ((the consolidated technology services agency))Washington technology solutions, shall determine:

(1) Definitions of health care services;

(2) Health care data elements common to all agencies;

(3) Health care data elements unique to each agency; and

(4) A mechanism for program and budget review of health care data.

Sec. 35. RCW 41.06.070 and 2023 c 148 s 3 are each amended to read as follows:

(1) The provisions of this chapter do not apply to:

(a) The members of the legislature or to any employee of, or position in, the legislative branch of the state government including members, officers, and employees of the legislative council, joint legislative audit and review committee, statute law committee, and any interim committee of the legislature;

(b) The justices of the supreme court, judges of the court of appeals, judges of the superior courts or of the inferior courts, or to any employee of, or position in the judicial branch of state government;

(c) Officers, academic personnel, and employees of technical colleges;

(d) The officers of the Washington state patrol;

(e) Elective officers of the state;

(f) The chief executive officer of each agency;

(g) In the departments of employment security and social and health services, the director and the director's confidential secretary; in all other departments, the executive head of which is an individual appointed by the governor, the director, his or her confidential secretary, and his or her statutory assistant directors;

(h) In the case of a multimember board, commission, or committee, whether the members thereof are elected, appointed by the governor or other authority, serve ex officio, or are otherwise chosen:

(i) All members of such boards, commissions, or committees;

(ii) If the members of the board, commission, or committee serve on a part-time basis and there is a statutory executive officer: The secretary of the board, commission, or committee; the chief executive officer of the board, commission, or committee; and the confidential secretary of the chief executive officer of the board, commission, or committee;

(iii) If the members of the board, commission, or committee serve on a full-time basis: The chief executive officer or administrative officer as designated by the board, commission, or committee; and a confidential secretary to the chair of the board, commission, or committee;

(iv) If all members of the board, commission, or committee serve ex officio: The chief executive officer; and the confidential secretary of such chief executive officer;

(i) The confidential secretaries and administrative assistants in the immediate offices of the elective officers of the state;

(j) Assistant attorneys general;

(k) Commissioned and enlisted personnel in the military service of the state;

(l) Inmate, student, and temporary employees, and part-time professional consultants, as defined by the director;

(m) Officers and employees of the Washington state fruit commission;

(n) Officers and employees of the Washington apple commission;

(o) Officers and employees of the Washington state dairy products commission;

(p) Officers and employees of the Washington tree fruit research commission;

(q) Officers and employees of the Washington state beef commission;

(r) Officers and employees of the Washington grain commission;

(s) Officers and employees of any commission formed under chapter 15.66 RCW;

(t) Officers and employees of agricultural commissions formed under chapter 15.65 RCW;

(u) Executive assistants for personnel administration and labor relations in all state agencies employing such executive assistants including but not limited to all departments, offices, commissions, committees, boards, or other bodies subject to the provisions of this chapter and this subsection shall prevail over any provision of law inconsistent herewith unless specific exception is made in such law;

(v) In each agency with fifty or more employees: Deputy agency heads, assistant directors or division directors, and not more than three principal policy assistants who report directly to the agency head or deputy agency heads;

(w) Staff employed by the department of commerce to administer energy policy functions;

(x) The manager of the energy facility site evaluation council;

(y) A maximum of ten staff employed by the department of commerce to administer innovation and policy functions, including the three principal policy assistants exempted under (v) of this subsection;

(z) Staff employed by Washington State University to administer energy education, applied research, and technology transfer programs under RCW 43.21F.045 as provided in RCW 28B.30.900(5);

(aa) Officers and employees of ((the consolidated technology services agency))Washington technology solutions created in RCW 43.105.006 that perform the following functions or duties: Systems integration; data center engineering and management; network systems engineering and management; information technology contracting; information technology customer relations management; and network and systems security;

(bb) The executive director of the Washington statewide reentry council.

(2) The following classifications, positions, and employees of institutions of higher education and related boards are hereby exempted from coverage of this chapter:

(a) Members of the governing board of each institution of higher education and related boards, all presidents, vice presidents, and their confidential secretaries, administrative, and personal assistants; deans, directors, and chairs; academic personnel; and executive heads of major administrative or academic divisions employed by institutions of higher education; principal assistants to executive heads of major administrative or academic divisions; other managerial or professional employees in an institution or related board having substantial responsibility for directing or controlling program operations and accountable for allocation of resources and program results, or for the formulation of institutional policy, or for carrying out personnel administration or labor relations functions, legislative relations, public information, development, senior computer systems and network programming, or internal audits and investigations; and any employee of a community college district whose place of work is one which is physically located outside the state of Washington and who is employed pursuant to RCW 28B.50.092 and assigned to an educational program operating outside of the state of Washington;

(b) The governing board of each institution, and related boards, may also exempt from this chapter classifications involving research activities, counseling of students, extension or continuing education activities, graphic arts or publications activities requiring prescribed academic preparation or special training as determined by the board: PROVIDED, That no nonacademic employee engaged in office, clerical, maintenance, or food and trade services may be exempted by the board under this provision;

(c) Printing craft employees in the department of printing at the University of Washington.

(3) In addition to the exemptions specifically provided by this chapter, the director may provide for further exemptions pursuant to the following procedures. The governor or other appropriate elected official may submit requests for exemption to the office of financial management stating the reasons for requesting such exemptions. The director shall hold a public hearing, after proper notice, on requests submitted pursuant to this subsection. If the director determines that the position for which exemption is requested is one involving substantial responsibility for the formulation of basic agency or executive policy or one involving directing and controlling program operations of an agency or a major administrative division thereof, or is a senior expert in enterprise information technology infrastructure, engineering, or systems, the director shall grant the request. The total number of additional exemptions permitted under this subsection shall not exceed one percent of the number of employees in the classified service not including employees of institutions of higher education and related boards for those agencies not directly under the authority of any elected public official other than the governor, and shall not exceed a total of twenty-five for all agencies under the authority of elected public officials other than the governor.

(4) The salary and fringe benefits of all positions presently or hereafter exempted except for the chief executive officer of each agency, full-time members of boards and commissions, administrative assistants and confidential secretaries in the immediate office of an elected state official, and the personnel listed in subsections (1)(j) through (t) and (2) of this section, shall be determined by the director. Changes to the classification plan affecting exempt salaries must meet the same provisions for classified salary increases resulting from adjustments to the classification plan as outlined in RCW 41.06.152.

(5)(a) Any person holding a classified position subject to the provisions of this chapter shall, when and if such position is subsequently exempted from the application of this chapter, be afforded the following rights: If such person previously held permanent status in another classified position, such person shall have a right of reversion to the highest class of position previously held, or to a position of similar nature and salary.

(b) Any classified employee having civil service status in a classified position who accepts an appointment in an exempt position shall have the right of reversion to the highest class of position previously held, or to a position of similar nature and salary.

(c) A person occupying an exempt position who is terminated from the position for gross misconduct or malfeasance does not have the right of reversion to a classified position as provided for in this section.

(6)(a) Notwithstanding the provisions of subsection (5) of this section, a person cannot exercise the right of reversion to a classified position if the employee has been given written notice that they are the subject of an active workplace investigation in which the allegations being investigated, if founded, could result in a finding of gross misconduct or malfeasance. The right of reversion is suspended during the pendency of the investigation. For the purposes of this subsection, written notice includes notice sent by email to the employee's work email address.

(b) The office of financial management must adopt rules implementing this section.

Sec. 36. RCW 41.06.094 and 2015 c 225 s 54 are each amended to read as follows:

In addition to the exemptions under RCW 41.06.070, the provisions of this chapter shall not apply in ((the consolidated technology services agency))Washington technology solutions to the chief information officer, the chief information officer's confidential secretary, and assistant directors, and up to twelve positions in the planning component involved in policy development and/or senior professionals.

Sec. 37. RCW 41.06.142 and 2020 c 269 s 2 are each amended to read as follows:

(1) If any department, agency, or institution of higher education intends to contract for services that, on or after July 1, 2005, have been customarily and historically provided by, and would displace or relocate, employees in the classified service under this chapter, a department, agency, or institution of higher education may do so by contracting with individuals, nonprofit organizations, businesses, employee business units, or other entities if the following criteria are met:

(a) A comprehensive impact assessment is completed by the agency, department, or institution of higher education to assist it in determining whether the decision to contract out is beneficial.

(i) The comprehensive impact assessment must include at a minimum the following analysis:

(A) An estimate of the cost of performance of the service by employees, including the fully allocated costs of the service, the cost of the employees' salaries and benefits, space, equipment, materials, and other costs necessary to perform the function. The estimate must not include the state's indirect overhead costs unless those costs can be attributed directly to the function in question and would not exist if that function were not performed in state service;

(B) An estimate of the cost of performance of the services if contracted out, including the cost of administration of the program and allocating sufficient employee staff time and resources to monitor the contract and ensure its proper performance by the contractor;

(C) The reason for proposing to contract out, including the objective the agency would like to achieve; and

(D) The reasons for the determination made under (e) of this subsection.

(ii) When the contract will result in termination of state employees or elimination of state positions, the comprehensive impact assessment may also include an assessment of the potential adverse impacts on the public from outsourcing the contract, such as loss of employment, effect on social services and public assistance programs, economic impacts on local businesses and local tax revenues, and environmental impacts;

(b) The invitation for bid or request for proposal contains measurable standards for the performance of the contract;

(c) Employees whose positions or work would be displaced by the contract are provided an opportunity to offer alternatives to purchasing services by contract and, if these alternatives are not accepted, compete for the contract under competitive contracting procedures in subsection (7) of this section;

(d) The department, agency, or institution of higher education has established a contract monitoring process to measure contract performance, costs, service delivery quality, and other contract standards, and to cancel contracts that do not meet those standards; and

(e) The department, agency, or institution of higher education has determined that the contract results in savings or efficiency improvements. The contracting agency, department, or institution of higher education must consider the consequences and potential mitigation of improper or failed performance by the contractor.

(2)(a) The agency, department, or institution of higher education must post on its website the request for proposal, the contract or a statement that the agency, department, or institution of higher education did not move forward with contracting out, and the comprehensive impact assessment pursuant to subsection (1) of this section.

(b) The agency, department, or institution of higher education must maintain the information in (a) of this subsection in its files in accordance with the record retention schedule under RCW 40.14.060.

(3) Every five years or upon completion of the contract, whichever comes first, the agency, department, or institution of higher education must prepare and maintain in the contract file a report, which must include at a minimum the following information:

(a) Documentation of the contractor's performance as measured by the itemized performance standards;

(b) Itemization of any contract extensions or change orders that resulted in a change in the dollar value or cost of the contract; and

(c) A report of any remedial actions that were taken to enforce compliance with the contract, together with an estimate of the cost incurred by the agency, department, or institution of higher education in enforcing such compliance.

(4) In addition to any other terms required by law, the terms of any agreement to contract out a service pursuant to this section must include terms that address the following:

(a) The contract's contract management provision must allow review of the contractor's performance;

(b) The contract's termination clauses must allow termination of the contract if the contractor fails to meet the terms of the contract, including failure to meet performance standards or failure to provide the services at the contracted price;

(c) The contract's damages provision must allow recovery of direct damages and, when applicable, indirect damages that the agency, department, or institution of higher education incurs due to the contractor's breach of the agreement;

(d) If the contractor will be using a subcontractor for performance of services under the contract, the contract must allow the agency, department, or institution of higher education to obtain information about the subcontractor, as applicable to the performance of services under the agreement; and

(e) A provision requiring the contractor to consider employment of employees who may be displaced by the contract, if the contract is with an entity other than an employee business unit.

(5) Any provision contrary to or in conflict with this section in any collective bargaining agreement in effect on July 1, 2005, is not effective beyond the expiration date of the agreement.

(6) When contracting out for services as authorized in this section the agency, department, or institution of higher education must ensure firms adhere to the values of the state of Washington under RCW 49.60.030, which provide its citizens freedom from discrimination. Any relationship with a potential or current industry partner that is found to have violated RCW 49.60.030 by the attorney general shall not be considered and must be immediately terminated unless:

(a) The industry partner has fulfilled the conditions or obligations associated with any court order or settlement resulting from that violation; or

(b) The industry partner has taken significant and meaningful steps to correct the violation, as determined by the Washington state human rights commission.

(7) Competitive contracting shall be implemented as follows:

(a) At least ninety days prior to the date the contracting agency, department, or institution of higher education requests bids from private entities for a contract for services provided by employees, the contracting agency, department, or institution of higher education shall notify the employees whose positions or work would be displaced by the contract. The employees shall have sixty days from the date of notification to offer alternatives to purchasing services by contract, and the agency, department, or institution of higher education shall consider the alternatives before requesting bids.

(b) If the employees decide to compete for the contract, they shall notify the contracting agency, department, or institution of higher education of their decision. Employees must form one or more employee business units for the purpose of submitting a bid or bids to perform the services.

(c) The department of enterprise services, with the advice and assistance of the office of financial management, shall develop and make available to employee business units training in the bidding process and general bid preparation.

(d) The director of enterprise services, with the advice and assistance of the office of financial management, shall, by rule, establish procedures to ensure that bids are submitted and evaluated in a fair and objective manner and that there exists a competitive market for the service. Such rules shall include, but not be limited to: (i) Prohibitions against participation in the bid evaluation process by employees who prepared the business unit's bid or who perform any of the services to be contracted; (ii) provisions to ensure no bidder receives an advantage over other bidders and that bid requirements are applied equitably to all parties; and (iii) procedures that require the contracting agency, department, or institution of higher education to receive complaints regarding the bidding process and to consider them before awarding the contract. Appeal of an agency's, department's, or institution of higher education's actions under this subsection is an adjudicative proceeding and subject to the applicable provisions of chapter 34.05 RCW, the administrative procedure act, with the final decision to be rendered by an administrative law judge assigned under chapter 34.12 RCW.

(e) An employee business unit's bid must include the fully allocated costs of the service, including the cost of the employees' salaries and benefits, space, equipment, materials, and other costs necessary to perform the function. An employee business unit's cost shall not include the state's indirect overhead costs unless those costs can be attributed directly to the function in question and would not exist if that function were not performed in state service.

(f) A department, agency, or institution of higher education may contract with the department of enterprise services to conduct the bidding process.

(8)(a) As used in this section:

(i) "Employee business unit" means a group of employees who perform services to be contracted under this section and who submit a bid for the performance of those services under subsection (7) of this section.

(ii) "Indirect overhead costs" means the pro rata share of existing agency administrative salaries and benefits, and rent, equipment costs, utilities, and materials associated with those administrative functions.

(iii) "Competitive contracting" means the process by which employees of a department, agency, or institution of higher education compete with businesses, individuals, nonprofit organizations, or other entities for contracts authorized by subsection (1) of this section.

(b) Unless otherwise specified, for the purpose of chapter 269, Laws of 2020, "employee" means state employees in the classified service under this chapter except employees in the Washington management service as defined under RCW 41.06.022 and 41.06.500.

(9) The processes set forth in subsections (1)(a), (2), (3), and (4)(a) through (d) of this section do not apply to contracts:

(a) Awarded for the purposes of or by the department of transportation;

(b) With an estimated cost of contract performance of twenty thousand dollars or less;

(c) With an estimated cost of contract performance that exceeds five hundred thousand dollars for public work as defined by RCW 39.04.010; or

(d) Relating to mechanical, plumbing as described in chapter 18.106 RCW, and electrical as described in chapter 19.28 RCW, procured to install systems for new construction or life-cycle replacement with an estimated cost of contract performance of seventy-five thousand dollars or more.

(10) The processes set forth in subsections (1) through (4), (7), and (8) of this section do not apply to:

(a) RCW 74.13.031(6);

(b) The acquisition of printing services by a state agency; and

(c) Contracts for services expressly mandated by the legislature, including contracts for fire suppression awarded by the department of natural resources under RCW 76.04.181, or authorized by law prior to July 1, 2005, including contracts and agreements between public entities.

(11) The processes set forth in subsections (1) through (4), (7), and (8) of this section do not apply to ((the consolidated technology services agency))Washington technology solutions when contracting for services or activities as follows:

(a) Contracting for services and activities that are necessary to establish, operate, or manage the state data center, including architecture, design, engineering, installation, and operation of the facility that are approved by the technology services board created in RCW 43.105.285.

(b) Contracting for services and activities recommended by the chief information officer through a business plan and approved by the technology services board created in RCW 43.105.285.

Sec. 38. RCW 41.07.020 and 2019 c 146 s 1 are each amended to read as follows:

The office of financial management is authorized to administer, maintain, and operate the central personnel-payroll system and to provide its services for any state agency designated by the director of financial management.

State agencies shall convert personnel and payroll processing to the central personnel-payroll system as soon as administratively and technically feasible as determined by the office of financial management and ((the consolidated technology services agency))Washington technology solutions. It is the intent of the legislature to provide, through the central personnel-payroll system, for uniform reporting to the office of financial management and to the legislature regarding salaries and related costs, and to reduce present costs of manual procedures in personnel and payroll recordkeeping and reporting.

Sec. 39. RCW 42.17A.060 and 2011 1st sp.s. c 43 s 732 are each amended to read as follows:

It is the intent of the legislature to ensure that the commission provide the general public timely access to all contribution and expenditure reports submitted by candidates, continuing political committees, bona fide political parties, lobbyists, and lobbyists' employers. The legislature finds that failure to meet goals for full and timely disclosure threatens to undermine our electoral process.

Furthermore, the legislature intends for the commission to consult with ((the office of the chief information officer))Washington technology solutions as it seeks to implement chapter 401, Laws of 1999, and that the commission follow the standards and procedures established by ((the office of the chief information officer))Washington technology solutions in chapter 43.105 RCW as they relate to information technology.

Sec. 40. RCW 42.17A.705 and 2017 3rd sp.s. c 6 s 111 are each amended to read as follows:

For the purposes of RCW 42.17A.700, "executive state officer" includes:

(1) The chief administrative law judge, the director of agriculture, the director of the department of services for the blind, the secretary of children, youth, and families, the director of the state system of community and technical colleges, the director of commerce, the director of ((the consolidated technology services agency))Washington technology solutions, the secretary of corrections, the director of ecology, the commissioner of employment security, the chair of the energy facility site evaluation council, the director of enterprise services, the secretary of the state finance committee, the director of financial management, the director of fish and wildlife, the executive secretary of the forest practices appeals board, the director of the gambling commission, the secretary of health, the administrator of the Washington state health care authority, the executive secretary of the health care facilities authority, the executive secretary of the higher education facilities authority, the executive secretary of the horse racing commission, the executive secretary of the human rights commission, the executive secretary of the indeterminate sentence review board, the executive director of the state investment board, the director of labor and industries, the director of licensing, the director of the lottery commission, the director of the office of minority and women's business enterprises, the director of parks and recreation, the executive director of the public disclosure commission, the executive director of the Puget Sound partnership, the director of the recreation and conservation office, the director of retirement systems, the director of revenue, the secretary of social and health services, the chief of the Washington state patrol, the executive secretary of the board of tax appeals, the secretary of transportation, the secretary of the utilities and transportation commission, the director of veterans affairs, the president of each of the regional and state universities and the president of The Evergreen State College, and each district and each campus president of each state community college;

(2) Each professional staff member of the office of the governor;

(3) Each professional staff member of the legislature; and

(4) Central Washington University board of trustees, the boards of trustees of each community college and each technical college, each member of the state board for community and technical colleges, state convention and trade center board of directors, Eastern Washington University board of trustees, Washington economic development finance authority, Washington energy northwest executive board, The Evergreen State College board of trustees, executive ethics board, fish and wildlife commission, forest practices appeals board, forest practices board, gambling commission, Washington health care facilities authority, student achievement council, higher education facilities authority, horse racing commission, state housing finance commission, human rights commission, indeterminate sentence review board, board of industrial insurance appeals, state investment board, commission on judicial conduct, legislative ethics board, life sciences discovery fund authority board of trustees, state liquor and cannabis board, lottery commission, Pacific Northwest electric power and conservation planning council, parks and recreation commission, Washington personnel resources board, board of pilotage commissioners, pollution control hearings board, public disclosure commission, public employees' benefits board, recreation and conservation funding board, salmon recovery funding board, shorelines hearings board, board of tax appeals, transportation commission, University of Washington board of regents, utilities and transportation commission, Washington State University board of regents, and Western Washington University board of trustees.

Sec. 41. RCW 43.41.391 and 2015 3rd sp.s. c 1 s 214 are each amended to read as follows:

(1) The office has the duty to govern and oversee the technical design, implementation, and operation of the K-20 network including, but not limited to, the following duties: Establishment and implementation of K-20 network technical policy, including technical standards and conditions of use; review and approval of network design; and resolving user/provider disputes.

(2) The office has the following powers and duties:

(a) In cooperation with the educational sectors and other interested parties, to establish goals and measurable objectives for the network;

(b) To ensure that the goals and measurable objectives of the network are the basis for any decisions or recommendations regarding the technical development and operation of the network;

(c) To adopt, modify, and implement policies to facilitate network development, operation, and expansion. Such policies may include but need not be limited to the following issues: Quality of educational services; access to the network by recognized organizations and accredited institutions that deliver educational programming, including public libraries; prioritization of programming within limited resources; prioritization of access to the system and the sharing of technological advances; network security; identification and evaluation of emerging technologies for delivery of educational programs; future expansion or redirection of the system; network fee structures; and costs for the development and operation of the network;

(d) To prepare and submit to the governor and the legislature a coordinated budget for network development, operation, and expansion. The budget shall include the recommendations of the director of ((the consolidated technology services agency's recommendations))Washington technology solutions on (i) any state funding requested for network transport and equipment, distance education facilities and hardware or software specific to the use of the network, and proposed new network end sites, (ii) annual copayments to be charged to public educational sector institutions and other public entities connected to the network, and (iii) charges to nongovernmental entities connected to the network;

(e) To adopt and monitor the implementation of a methodology to evaluate the effectiveness of the network in achieving the educational goals and measurable objectives;

(f) To establish by rule acceptable use policies governing user eligibility for participation in the K-20 network, acceptable uses of network resources, and procedures for enforcement of such policies. The office shall set forth appropriate procedures for enforcement of acceptable use policies, that may include suspension of network connections and removal of shared equipment for violations of network conditions or policies. The office shall have sole responsibility for the implementation of enforcement procedures relating to technical conditions of use.

Sec. 42. RCW 43.41.440 and 2015 3rd sp.s. c 1 s 502 are each amended to read as follows:

(1) The statewide information technology system development revolving account is created in the custody of the state treasurer. All receipts from legislative appropriations and assessments to agencies for the development and acquisition of enterprise information technology systems must be deposited into the account. Moneys in the account may be spent only after appropriation. The account must be used solely for the development and acquisition of enterprise information technology systems that are consistent with the enterprise-based strategy established by ((the consolidated technology services agency))Washington technology solutions in RCW 43.105.025. Expenditures from the account may not be used for maintenance and operations of enterprise information technology systems. The account may be used for the payment of salaries, wages, and other costs directly related to the development and acquisition of enterprise information technology systems.

(2) All payment of principal and interest on debt issued for enterprise information technology systems must be paid from the account.

(3) The office may contract for the development or acquisition of enterprise information technology systems.

(4) For the purposes of this section and RCW 43.41.442, "enterprise information technology system" means an information technology system that serves agencies with a certain business need or process that are required to use the system unless the agency has received a waiver from the state chief information officer. "Enterprise information technology system" also includes projects that are of statewide significance including enterprise-level solutions, enterprise resource planning, and shared services initiatives.

Sec. 43. RCW 43.41.442 and 2015 3rd sp.s. c 1 s 503 are each amended to read as follows:

(1) The statewide information technology system maintenance and operations revolving account is created in the custody of the state treasurer. All receipts from fees, charges for services, and assessments to agencies for the maintenance and operations of enterprise information technology systems must be deposited into the account. The account must be used solely for the maintenance and operations of enterprise information technology systems.

(2) Only the director or the director's designee may authorize expenditures from the account. The account is subject to allotment procedures under chapter 43.88 RCW, but no appropriation is required for expenditure.

(3) The office may contract with ((the consolidated technology services agency))Washington technology solutions for the billing of fees, charges for services, and assessments to agencies, and for the maintenance and operations of enterprise information technology systems.

(4) "Enterprise information technology system" has the definition in RCW 43.41.440.

Sec. 44. RCW 43.41.444 and 2015 3rd sp.s. c 1 s 504 are each amended to read as follows:

(1) The shared information technology system revolving account is created in the custody of the state treasurer. All receipts from fees, charges for services, and assessments to agencies for shared information technology systems must be deposited into the account.

(2) Only the director or the director's designee may authorize expenditures from the account. The account is subject to allotment procedures under chapter 43.88 RCW, but no appropriation is required for expenditure.

(3) The office may contract with ((the consolidated technology services agency))Washington technology solutions for the billing of fees, charges for services, and assessments to agencies, and for the development, maintenance, and operations of shared information technology systems.

(4) For the purposes of this section, "shared information technology system" means an information technology system that is available to, but not required for use by, agencies.

Sec. 45. RCW 43.63A.550 and 2011 1st sp.s. c 43 s 814 are each amended to read as follows:

(1) The department shall assist in the process of inventorying and collecting data on public and private land for the acquisition of data describing land uses, demographics, infrastructure, critical areas, transportation corridors physical features, housing, and other information useful in managing growth throughout the state. For this purpose the department may contract with ((the consolidated technology services agency))Washington technology solutions and shall form an advisory group consisting of representatives from state, local, and federal agencies, colleges and universities, and private firms with expertise in land planning, and geographic information systems.

(2) The department shall establish a sequence for acquiring data, giving priority to rapidly growing areas. The data shall be retained in a manner to facilitate its use in preparing maps, aggregating with data from multiple jurisdictions, and comparing changes over time. Data shall further be retained in a manner which permits its access via computer.

(3) The department shall work with other state agencies, local governments, and private organizations that are inventorying public and private lands to ensure close coordination and to ensure that duplication of efforts does not occur.

Sec. 46. RCW 43.70.054 and 2015 3rd sp.s. c 1 s 408 are each amended to read as follows:

(1) To promote the public interest consistent with chapter 267, Laws of 1995, the department of health, in cooperation with the director of ((the consolidated technology services agency))Washington technology solutions established in RCW 43.105.025, shall develop health care data standards to be used by, and developed in collaboration with, consumers, purchasers, health carriers, providers, and state government as consistent with the intent of chapter 492, Laws of 1993 as amended by chapter 267, Laws of 1995, to promote the delivery of quality health services that improve health outcomes for state residents. The data standards shall include content, coding, confidentiality, and transmission standards for all health care data elements necessary to support the intent of this section, and to improve administrative efficiency and reduce cost. Purchasers, as allowed by federal law, health carriers, health facilities and providers as defined in chapter 48.43 RCW, and state government shall utilize the data standards. The information and data elements shall be reported as the department of health directs by rule in accordance with data standards developed under this section.

(2) The health care data collected, maintained, and studied by the department under this section or any other entity: (a) Shall include a method of associating all information on health care costs and services with discrete cases; (b) shall not contain any means of determining the personal identity of any enrollee, provider, or facility; (c) shall only be available for retrieval in original or processed form to public and private requesters; (d) shall be available within a reasonable period of time after the date of request; and (e) shall give strong consideration to data standards that achieve national uniformity.

(3) The cost of retrieving data for state officials and agencies shall be funded through state general appropriation. The cost of retrieving data for individuals and organizations engaged in research or private use of data or studies shall be funded by a fee schedule developed by the department that reflects the direct cost of retrieving the data or study in the requested form.

(4) All persons subject to this section shall comply with departmental requirements established by rule in the acquisition of data, however, the department shall adopt no rule or effect no policy implementing the provisions of this section without an act of law.

(5) The department shall submit developed health care data standards to the appropriate committees of the legislature by December 31, 1995.

Sec. 47. RCW 43.88.090 and 2015 3rd sp.s. c 1 s 409 are each amended to read as follows:

(1) For purposes of developing budget proposals to the legislature, the governor shall have the power, and it shall be the governor's duty, to require from proper agency officials such detailed estimates and other information in such form and at such times as the governor shall direct. The governor shall communicate statewide priorities to agencies for use in developing biennial budget recommendations for their agency and shall seek public involvement and input on these priorities. The estimates for the legislature and the judiciary shall be transmitted to the governor and shall be included in the budget without revision. The estimates for state pension contributions shall be based on the rates provided in chapter 41.45 RCW. Copies of all such estimates shall be transmitted to the standing committees on ways and means of the house and senate at the same time as they are filed with the governor and the office of financial management.

The estimates shall include statements or tables which indicate, by agency, the state funds which are required for the receipt of federal matching revenues. The estimates shall be revised as necessary to reflect legislative enactments and adopted appropriations and shall be included with the initial biennial allotment submitted under RCW 43.88.110. The estimates must reflect that the agency considered any alternatives to reduce costs or improve service delivery identified in the findings of a performance audit of the agency by the joint legislative audit and review committee. Nothing in this subsection requires performance audit findings to be published as part of the budget.

(2) Each state agency shall define its mission and establish measurable goals for achieving desirable results for those who receive its services and the taxpayers who pay for those services. Each agency shall also develop clear strategies and timelines to achieve its goals. This section does not require an agency to develop a new mission or goals in place of identifiable missions or goals that meet the intent of this section. The mission and goals of each agency must conform to statutory direction and limitations.

(3) For the purpose of assessing activity performance, each state agency shall establish quality and productivity objectives for each major activity in its budget. The objectives must be consistent with the missions and goals developed under this section. The objectives must be expressed to the extent practicable in outcome-based, objective, and measurable form unless an exception to adopt a different standard is granted by the office of financial management and approved by the legislative committee on performance review. Objectives must specifically address the statutory purpose or intent of the program or activity and focus on data that measure whether the agency is achieving or making progress toward the purpose of the activity and toward statewide priorities. The office of financial management shall provide necessary professional and technical assistance to assist state agencies in the development of strategic plans that include the mission of the agency and its programs, measurable goals, strategies, and performance measurement systems.

(4) Each state agency shall adopt procedures for and perform continuous self-assessment of each activity, using the mission, goals, objectives, and measurements required under subsections (2) and (3) of this section. The assessment of the activity must also include an evaluation of major information technology systems or projects that may assist the agency in achieving or making progress toward the activity purpose and statewide priorities. The evaluation of proposed major information technology systems or projects shall be in accordance with the standards and policies established by the technology services board. Agencies' progress toward the mission, goals, objectives, and measurements required by subsections (2) and (3) of this section is subject to review as set forth in this subsection.

(a) The office of financial management shall regularly conduct reviews of selected activities to analyze whether the objectives and measurements submitted by agencies demonstrate progress toward statewide results.

(b) The office of financial management shall consult with: (i) The four-year institutions of higher education in those reviews that involve four-year institutions of higher education; and (ii) the state board for community and technical colleges in those reviews that involve two-year institutions of higher education.

(c) The goal is for all major activities to receive at least one review each year.

(d) ((The consolidated technology services agency))Washington technology solutions shall review major information technology systems in use by state agencies periodically.

(5) It is the policy of the legislature that each agency's budget recommendations must be directly linked to the agency's stated mission and program, quality, and productivity goals and objectives. Consistent with this policy, agency budget proposals must include integration of performance measures that allow objective determination of an activity's success in achieving its goals. When a review under subsection (4) of this section or other analysis determines that the agency's objectives demonstrate that the agency is making insufficient progress toward the goals of any particular program or is otherwise underachieving or inefficient, the agency's budget request shall contain proposals to remedy or improve the selected programs. The office of financial management shall develop a plan to merge the budget development process with agency performance assessment procedures. The plan must include a schedule to integrate agency strategic plans and performance measures into agency budget requests and the governor's budget proposal over three fiscal biennia. The plan must identify those agencies that will implement the revised budget process in the 1997-1999 biennium, the 1999-2001 biennium, and the 2001-2003 biennium. In consultation with the legislative fiscal committees, the office of financial management shall recommend statutory and procedural modifications to the state's budget, accounting, and reporting systems to facilitate the performance assessment procedures and the merger of those procedures with the state budget process. The plan and recommended statutory and procedural modifications must be submitted to the legislative fiscal committees by September 30, 1996.

(6) In reviewing agency budget requests in order to prepare the governor's biennial budget request, the office of financial management shall consider the extent to which the agency's activities demonstrate progress toward the statewide budgeting priorities, along with any specific review conducted under subsection (4) of this section.

(7) In the year of the gubernatorial election, the governor shall invite the governor-elect or the governor-elect's designee to attend all hearings provided in RCW 43.88.100; and the governor shall furnish the governor-elect or the governor-elect's designee with such information as will enable the governor-elect or the governor-elect's designee to gain an understanding of the state's budget requirements. The governor-elect or the governor-elect's designee may ask such questions during the hearings and require such information as the governor-elect or the governor-elect's designee deems necessary and may make recommendations in connection with any item of the budget which, with the governor-elect's reasons therefor, shall be presented to the legislature in writing with the budget document. Copies of all such estimates and other required information shall also be submitted to the standing committees on ways and means of the house and senate.

Sec. 48. RCW 43.88.092 and 2015 3rd sp.s. c 1 s 410 are each amended to read as follows:

(1) As part of the biennial budget process, the office of financial management shall collect from agencies, and agencies shall provide, information to produce reports, summaries, and budget detail sufficient to allow review, analysis, and documentation of all current and proposed expenditures for information technology by state agencies. Information technology budget detail must be included as part of the budget submittal documentation required pursuant to RCW 43.88.030.

(2) The office of financial management must collect, and present as part of the biennial budget documentation, information for all existing information technology projects as defined by technology services board policy. The office of financial management must work with the office of the state chief information officer to maximize the ability to draw this information from the information technology portfolio management data collected by ((the consolidated technology services agency))Washington technology solutions. Connecting project information collected through the portfolio management process with financial data developed under subsection (1) of this section provides transparency regarding expenditure data for existing technology projects.

(3) The director of ((the consolidated technology services agency))Washington technology solutions shall evaluate proposed information technology expenditures and establish priority ranking categories of the proposals. No more than one-third of the proposed expenditures shall be ranked in the highest priority category.

(4) The biennial budget documentation submitted by the office of financial management pursuant to RCW 43.88.030 must include an information technology plan and a technology budget for the state identifying current baseline funding for information technology, proposed and ongoing major information technology projects, and their associated costs. This plan and technology budget must be presented using a method similar to the capital budget, identifying project costs through stages of the project and across fiscal periods and biennia from project initiation to implementation. This information must be submitted electronically, in a format to be determined by the office of financial management and the legislative evaluation and accountability program committee.

(5) The office of financial management shall also institute a method of accounting for information technology-related expenditures, including creating common definitions for what constitutes an information technology investment.

(6) For the purposes of this section, "major information technology projects" includes projects that have a significant anticipated cost, complexity, or are of statewide significance, such as enterprise-level solutions, enterprise resource planning, and shared services initiatives.

Sec. 49. RCW 43.88.160 and 2015 3rd sp.s. c 1 s 303 and 2015 3rd sp.s. c 1 s 109 are each reenacted and amended to read as follows:

This section sets forth the major fiscal duties and responsibilities of officers and agencies of the executive branch. The regulations issued by the governor pursuant to this chapter shall provide for a comprehensive, orderly basis for fiscal management and control, including efficient accounting and reporting therefor, for the executive branch of the state government and may include, in addition, such requirements as will generally promote more efficient public management in the state.

(1) Governor; director of financial management. The governor, through the director of financial management, shall devise and supervise a modern and complete accounting system for each agency to the end that all revenues, expenditures, receipts, disbursements, resources, and obligations of the state shall be properly and systematically accounted for. The accounting system shall include the development of accurate, timely records and reports of all financial affairs of the state. The system shall also provide for central accounts in the office of financial management at the level of detail deemed necessary by the director to perform central financial management. The director of financial management shall adopt and periodically update an accounting procedures manual. Any agency maintaining its own accounting and reporting system shall comply with the updated accounting procedures manual and the rules of the director adopted under this chapter. An agency may receive a waiver from complying with this requirement if the waiver is approved by the director. Waivers expire at the end of the fiscal biennium for which they are granted. The director shall forward notice of waivers granted to the appropriate legislative fiscal committees. The director of financial management may require such financial, statistical, and other reports as the director deems necessary from all agencies covering any period.

(2) Except as provided in chapter 43.88C RCW, the director of financial management is responsible for quarterly reporting of primary operating budget drivers such as applicable workloads, caseload estimates, and appropriate unit cost data. These reports shall be transmitted to the legislative fiscal committees or by electronic means to the legislative evaluation and accountability program committee. Quarterly reports shall include actual monthly data and the variance between actual and estimated data to date. The reports shall also include estimates of these items for the remainder of the budget period.

(3) The director of financial management shall report at least annually to the appropriate legislative committees regarding the status of all appropriated capital projects, including transportation projects, showing significant cost overruns or underruns. If funds are shifted from one project to another, the office of financial management shall also reflect this in the annual variance report. Once a project is complete, the report shall provide a final summary showing estimated start and completion dates of each project phase compared to actual dates, estimated costs of each project phase compared to actual costs, and whether or not there are any outstanding liabilities or unsettled claims at the time of completion.

(4) In addition, the director of financial management, as agent of the governor, shall:

(a) Develop and maintain a system of internal controls and internal audits comprising methods and procedures to be adopted by each agency that will safeguard its assets, check the accuracy and reliability of its accounting data, promote operational efficiency, and encourage adherence to prescribed managerial policies for accounting and financial controls. The system developed by the director shall include criteria for determining the scope and comprehensiveness of internal controls required by classes of agencies, depending on the level of resources at risk.

(i) For those agencies that the director determines internal audit is required, the agency head or authorized designee shall be assigned the responsibility and authority for establishing and maintaining internal audits following professional audit standards including generally accepted government auditing standards or standards adopted by the institute of internal auditors, or both.

(ii) For those agencies that the director determines internal audit is not required, the agency head or authorized designee may establish and maintain internal audits following professional audit standards including generally accepted government auditing standards or standards adopted by the institute of internal auditors, or both, but at a minimum must comply with policies as established by the director to assess the effectiveness of the agency's systems of internal controls and risk management processes;

(b) Make surveys and analyses of agencies with the object of determining better methods and increased effectiveness in the use of manpower and materials; and the director shall authorize expenditures for employee training to the end that the state may benefit from training facilities made available to state employees;

(c) Establish policies for allowing the contracting of child care services;

(d) Report to the governor with regard to duplication of effort or lack of coordination among agencies;

(e) Review any pay and classification plans, and changes thereunder, developed by any agency for their fiscal impact: PROVIDED, That none of the provisions of this subsection shall affect merit systems of personnel management now existing or hereafter established by statute relating to the fixing of qualifications requirements for recruitment, appointment, or promotion of employees of any agency. The director shall advise and confer with agencies including appropriate standing committees of the legislature as may be designated by the speaker of the house and the president of the senate regarding the fiscal impact of such plans and may amend or alter the plans, except that for the following agencies no amendment or alteration of the plans may be made without the approval of the agency concerned: Agencies headed by elective officials;

(f) Fix the number and classes of positions or authorized employee years of employment for each agency and during the fiscal period amend the determinations previously fixed by the director except that the director shall not be empowered to fix the number or the classes for the following: Agencies headed by elective officials;

(g) Adopt rules to effectuate provisions contained in (a) through (f) of this subsection.

(5) The treasurer shall:

(a) Receive, keep, and disburse all public funds of the state not expressly required by law to be received, kept, and disbursed by some other persons: PROVIDED, That this subsection shall not apply to those public funds of the institutions of higher learning which are not subject to appropriation;

(b) Receive, disburse, or transfer public funds under the treasurer's supervision or custody;

(c) Keep a correct and current account of all moneys received and disbursed by the treasurer, classified by fund or account;

(d) Coordinate agencies' acceptance and use of credit cards and other payment methods, if the agencies have received authorization under RCW 43.41.180;

(e) Perform such other duties as may be required by law or by regulations issued pursuant to this law.

It shall be unlawful for the treasurer to disburse public funds in the treasury except upon forms or by alternative means duly prescribed by the director of financial management. These forms or alternative means shall provide for authentication and certification by the agency head or the agency head's designee that the services have been rendered or the materials have been furnished; or, in the case of loans or grants, that the loans or grants are authorized by law; or, in the case of payments for periodic maintenance services to be performed on state owned equipment, that a written contract for such periodic maintenance services is currently in effect; and the treasurer shall not be liable under the treasurer's surety bond for erroneous or improper payments so made. When services are lawfully paid for in advance of full performance by any private individual or business entity other than equipment maintenance providers or as provided for by RCW 42.24.035, such individual or entity other than central stores rendering such services shall make a cash deposit or furnish surety bond coverage to the state as shall be fixed in an amount by law, or if not fixed by law, then in such amounts as shall be fixed by the director of the department of enterprise services but in no case shall such required cash deposit or surety bond be less than an amount which will fully indemnify the state against any and all losses on account of breach of promise to fully perform such services. No payments shall be made in advance for any equipment maintenance services to be performed more than twelve months after such payment except that institutions of higher education as defined in RCW 28B.10.016 and ((the consolidated technology services agency))Washington technology solutions created in RCW 43.105.006 may make payments in advance for equipment maintenance services to be performed up to sixty months after such payment. Any such bond so furnished shall be conditioned that the person, firm or corporation receiving the advance payment will apply it toward performance of the contract. The responsibility for recovery of erroneous or improper payments made under this section shall lie with the agency head or the agency head's designee in accordance with rules issued pursuant to this chapter. Nothing in this section shall be construed to permit a public body to advance funds to a private service provider pursuant to a grant or loan before services have been rendered or material furnished.

(6) The state auditor shall:

(a) Report to the legislature the results of current post audits that have been made of the financial transactions of each agency; to this end the auditor may, in the auditor's discretion, examine the books and accounts of any agency, official, or employee charged with the receipt, custody, or safekeeping of public funds. Where feasible in conducting examinations, the auditor shall utilize data and findings from the internal control system prescribed by the office of financial management. The current post audit of each agency may include a section on recommendations to the legislature as provided in (c) of this subsection.

(b) Give information to the legislature, whenever required, upon any subject relating to the financial affairs of the state.

(c) Make the auditor's official report on or before the thirty-first of December which precedes the meeting of the legislature. The report shall be for the last complete fiscal period and shall include determinations as to whether agencies, in making expenditures, complied with the laws of this state. The state auditor is authorized to perform or participate in performance verifications and performance audits as expressly authorized by the legislature in the omnibus biennial appropriations acts or in the performance audit work plan approved by the joint legislative audit and review committee. The state auditor, upon completing an audit for legal and financial compliance under chapter 43.09 RCW or a performance verification, may report to the joint legislative audit and review committee or other appropriate committees of the legislature, in a manner prescribed by the joint legislative audit and review committee, on facts relating to the management or performance of governmental programs where such facts are discovered incidental to the legal and financial audit or performance verification. The auditor may make such a report to a legislative committee only if the auditor has determined that the agency has been given an opportunity and has failed to resolve the management or performance issues raised by the auditor. If the auditor makes a report to a legislative committee, the agency may submit to the committee a response to the report. This subsection (6) shall not be construed to authorize the auditor to allocate other than de minimis resources to performance audits except as expressly authorized in the appropriations acts or in the performance audit work plan. The results of a performance audit conducted by the state auditor that has been requested by the joint legislative audit and review committee must only be transmitted to the joint legislative audit and review committee.

(d) Be empowered to take exception to specific expenditures that have been incurred by any agency or to take exception to other practices related in any way to the agency's financial transactions and to cause such exceptions to be made a matter of public record, including disclosure to the agency concerned and to the director of financial management. It shall be the duty of the director of financial management to cause corrective action to be taken within six months, such action to include, as appropriate, the withholding of funds as provided in RCW 43.88.110. The director of financial management shall annually report by December 31st the status of audit resolution to the appropriate committees of the legislature, the state auditor, and the attorney general. The director of financial management shall include in the audit resolution report actions taken as a result of an audit including, but not limited to, types of personnel actions, costs and types of litigation, and value of recouped goods or services.

(e) Promptly report any irregularities to the attorney general.

(f) Investigate improper governmental activity under chapter 42.40 RCW.

In addition to the authority given to the state auditor in this subsection (6), the state auditor is authorized to conduct performance audits identified in RCW 43.09.470. Nothing in this subsection (6) shall limit, impede, or restrict the state auditor from conducting performance audits identified in RCW 43.09.470.

(7) The joint legislative audit and review committee may:

(a) Make post audits of the financial transactions of any agency and management surveys and program reviews as provided for in chapter 44.28 RCW as well as performance audits and program evaluations. To this end the joint committee may in its discretion examine the books, accounts, and other records of any agency, official, or employee.

(b) Give information to the legislature or any legislative committee whenever required upon any subject relating to the performance and management of state agencies.

(c) Make a report to the legislature which shall include at least the following:

(i) Determinations as to the extent to which agencies in making expenditures have complied with the will of the legislature and in this connection, may take exception to specific expenditures or financial practices of any agencies; and

(ii) Such plans as it deems expedient for the support of the state's credit, for lessening expenditures, for promoting frugality and economy in agency affairs, and generally for an improved level of fiscal management.

Sec. 50. RCW 43.371.090 and 2019 c 319 s 9 are each amended to read as follows:

(1) To ensure the database is meeting the needs of state agencies and other data users, the authority shall convene a state agency coordinating structure, consisting of state agencies with related data needs and the Washington health benefit exchange to ensure effectiveness of the database and the agencies' programs. The coordinating structure must collaborate in a private/public manner with the lead organization and other partners key to the broader success of the database. The coordinating structure shall advise the authority and lead organization on the development of any database policies and rules relevant to agency data needs.

(2) The office must participate as a key part of the coordinating structure and evaluate progress towards meeting the goals of the database, and, as necessary, recommend strategies for maintaining and promoting the progress of the database in meeting the intent of this section, and report its findings biennially to the governor and the legislature. The authority shall facilitate the office obtaining the information needed to complete the report in a manner that is efficient and not overly burdensome for the parties. The authority must provide the office with access to database processes, procedures, nonproprietary methodologies, and outcomes to conduct the review and issue the biennial report. The biennial review shall assess, at a minimum the following:

(a) The list of approved agency use case projects and related data requirements under RCW 43.371.050(4);

(b) Successful and unsuccessful data requests and outcomes related to agency and nonagency health researchers pursuant to RCW 43.371.050(4);

(c) Online data portal access and effectiveness related to research requests and data provider review and reconsideration;

(d) Adequacy of data security and policy consistent with the policy of ((the office of the chief information officer))Washington technology solutions; and

(e) Timeliness, adequacy, and responsiveness of the database with regard to requests made under RCW 43.371.050(4) and for potential improvements in data sharing, data processing, and communication.

(3) To promote the goal of improving health outcomes through better cost and quality information, the authority, in consultation with the agency coordinating structure, the office, lead organization, and data vendor shall make recommendations to the Washington state performance measurement coordinating committee as necessary to improve the effectiveness of the state common measure set as adopted under RCW 70.320.030.

Sec. 51. RCW 43.42A.030 and 2014 c 68 s 4 are each amended to read as follows:

(1) To provide meaningful customer service that informs project planning and decision making by the citizens and businesses served, each agency must make available to permit applicants the following information through a link from the agency's website to the office's website, as provided in subsection (4) of this section:

(a) A list of the types of permit assistance available and how such assistance may be accessed;

(b) An estimate of the time required by the agency to process a permit application and issue a decision;

(c) Other tools to help applicants successfully complete a thorough application, such as:

(i) Examples of model completed applications;

(ii) Examples of approved applications, appropriately redacted to remove sensitive information; and

(iii) Checklists for ensuring a complete application.

(2) Each agency shall update at reasonable intervals the information it posts pursuant to this section.

(3)(a) Agencies must post the information required under subsection (1) of this section for all permits as soon as practicable, and no later than the deadlines established in this section.

(b) The agency shall post the permit inventory for that agency and the information required under subsection (1)(a) and (c) of this section no later than June 30, 2014.

(c) The agency shall post the estimates of application completion and permit decision times required under subsection (1)(b) of this section based on actual data for calendar year 2015 by March 1, 2016, and update this information for the previous calendar year, by March 1st of each year thereafter.

(d) Agencies must consider the customer experience in ensuring all permit assistance information is simple to use, easy to access, and designed in a customer-friendly manner.

(4) To ensure agencies can post the required information online with minimal expenditure of agency resources, ((the office of the chief information officer))Washington technology solutions shall, in consultation with the office of regulatory assistance, establish a central repository of this information, hosted on the office of regulatory assistance's website. Each agency shall include at least one link to the central repository from the agency's website. Agencies shall place the link or links in such locations as the agency deems will be most customer-friendly and maximize accessibility of the information to users of the website.

(5) The office shall ensure the searchability of the information posted on the central repository, applying industry best practices such as search engine optimization, to ensure that the permit performance and assistance information is readily findable and accessible by members of the public.

Sec. 52. RCW 43.41.430 and 2013 2nd sp.s. c 33 s 5 are each amended to read as follows:

(1) Subject to funds appropriated for this specific purpose, the office of financial management may establish an information technology investment pool and may enter into financial contracts for the acquisition of information technology projects for state agencies. Information technology projects funded under this section must meet the following requirements:

(a) The project begins or continues replacement of information technology systems with modern and more efficient information technology systems;

(b) The project improves the ability of an agency to recover from major disaster; or

(c) The project provides future savings and efficiencies for an agency through reduced operating costs, improved customer service, or increased revenue collections.

(2) Preference for project approval under this section must be given to an agency that has prior project approval from ((the office of the chief information officer))Washington technology solutions and an approved business plan, and the primary hurdle to project funding is the lack of funding capacity.

(3) The office of financial management with assistance from ((the office of the chief information officer))Washington technology solutions shall report to the governor and the fiscal committees of the legislature by November 1st of each year on the status of distributions and expenditures on information technology projects and improved statewide or agency performance results achieved by project funding.

Sec. 53. RCW 43.330.534 and 2022 c 265 s 303 are each amended to read as follows:

(1) The office has the power and duty to:

(a) Serve as the central broadband planning body for the state of Washington;

(b) Coordinate with local governments, tribes, public and private entities, public housing agencies, nonprofit organizations, and consumer-owned and investor-owned utilities to develop strategies and plans promoting deployment of broadband infrastructure and greater broadband access, while protecting proprietary information;

(c) Review existing broadband initiatives, policies, and public and private investments;

(d) Develop, recommend, and implement a statewide plan to encourage cost-effective broadband access and to make recommendations for increased usage, particularly in rural and other unserved areas;

(e) Update the state's broadband goals and definitions for broadband service in unserved areas as technology advances, except that the state's definition for broadband service may not be actual speeds less than twenty-five megabits per second download and three megabits per second upload; and

(f) Encourage public-private partnerships to increase deployment and adoption of broadband services and applications.

(2) When developing plans or strategies for broadband deployment, the office must consider:

(a) Partnerships between communities, tribes, nonprofit organizations, local governments, consumer-owned and investor-owned utilities, and public and private entities;

(b) Funding opportunities that provide for the coordination of public, private, state, and federal funds for the purposes of making broadband infrastructure or broadband services available to rural and unserved areas of the state;

(c) Barriers to the deployment, adoption, and utilization of broadband service, including affordability of service and project coordination logistics; and

(d) Requiring minimum broadband service of twenty-five megabits per second download and three megabits per second upload speed, that is scalable to faster service.

(3) The office may assist applicants for the grant and loan program created in RCW 43.155.160, the digital equity opportunity program created in RCW 43.330.412, and the digital equity planning grant program created in RCW 43.330.5393 with seeking federal funding or matching grants and other grant opportunities for deploying or increasing adoption of broadband services.

(4) The office may take all appropriate steps to seek and apply for federal funds for which the office is eligible, and other grants, and accept donations, and must deposit these funds in the statewide broadband account created in RCW 43.155.165.

(5) The office shall coordinate an outreach effort to hard-to-reach communities and low-income communities across the state to provide information about broadband programs available to consumers of these communities. The outreach effort must include, but is not limited to, providing information to applicable communities about the federal lifeline program and other low-income broadband benefit programs. The outreach effort must be reviewed by the office of equity annually. The office may contract with other public or private entities to conduct outreach to communities as provided under this subsection.

(6) In carrying out its purpose, the office may collaborate with the utilities and transportation commission, ((the office of the chief information officer))Washington technology solutions, the department of commerce, the community economic revitalization board, the department of transportation, the public works board, the state librarian, and all other relevant state agencies.

Sec. 54. RCW 43.371.020 and 2019 c 319 s 3 are each amended to read as follows:

(1) The office shall establish a statewide all-payer health care claims database. On January 1, 2020, the office must transfer authority and oversight for the database to the authority. The office and authority must develop a transition plan that sustains operations by July 1, 2019. The database shall support transparent public reporting of health care information. The database must improve transparency to: Assist patients, providers, and hospitals to make informed choices about care; enable providers, hospitals, and communities to improve by benchmarking their performance against that of others by focusing on best practices; enable purchasers to identify value, build expectations into their purchasing strategy, and reward improvements over time; and promote competition based on quality and cost. The database must systematically collect all medical claims and pharmacy claims from private and public payers, with data from all settings of care that permit the systematic analysis of health care delivery.

(2) The authority shall use a competitive procurement process, in accordance with chapter 39.26 RCW, to select a lead organization from among the best potential bidders to coordinate and manage the database.

(a)(i) In conducting the competitive procurement, the authority must ensure that no state officer or state employee participating in the procurement process:

(A) Has a current relationship or had a relationship within the last three years with any organization that bids on the procurement that would constitute a conflict with the proper discharge of official duties under chapter 42.52 RCW; or

(B) Is a compensated or uncompensated member of a bidding organization's board of directors, advisory committee, or has held such a position in the past three years.

(ii) If any relationship or interest described in (a)(i) of this subsection is discovered during the procurement process, the officer or employee with the prohibited relationship must withdraw from involvement in the procurement process.

(b) Due to the complexities of the all-payer claims database and the unique privacy, quality, and financial objectives, the authority must give strong consideration to the following elements in determining the appropriate lead organization contractor: (i) The organization's degree of experience in health care data collection, analysis, analytics, and security; (ii) whether the organization has a long-term self-sustainable financial model; (iii) the organization's experience in convening and effectively engaging stakeholders to develop reports, especially among groups of health providers, carriers, and self-insured purchasers; (iv) the organization's experience in meeting budget and timelines for report generations; and (v) the organization's ability to combine cost and quality data to assess total cost of care.

(c) The successful lead organization must apply to be certified as a qualified entity pursuant to 42 C.F.R. Sec. 401.703(a) by the centers for medicare and medicaid services.

(d) The authority may not select a lead organization that:

(i) Is a health plan as defined by and consistent with the definitions in RCW 48.43.005;

(ii) Is a hospital as defined in RCW 70.41.020;

(iii) Is a provider regulated under Title 18 RCW;

(iv) Is a third-party administrator as defined in RCW 70.290.010; or

(v) Is an entity with a controlling interest in any entity covered in (d)(i) through (iv) of this subsection.

(3) As part of the competitive procurement process referenced in subsection (2) of this section, the lead organization shall enter into a contract with a data vendor or multiple data vendors to perform data collection, processing, aggregation, extracts, and analytics. A data vendor must:

(a) Establish a secure data submission process with data suppliers;

(b) Review data submitters' files according to standards established by the authority;

(c) Assess each record's alignment with established format, frequency, and consistency criteria;

(d) Maintain responsibility for quality assurance, including, but not limited to: (i) The accuracy and validity of data suppliers' data; (ii) accuracy of dates of service spans; (iii) maintaining consistency of record layout and counts; and (iv) identifying duplicate records;

(e) Assign unique identifiers, as defined in RCW 43.371.010, to individuals represented in the database;

(f) Ensure that direct patient identifiers, indirect patient identifiers, and proprietary financial information are released only in compliance with the terms of this chapter;

(g) Demonstrate internal controls and affiliations with separate organizations as appropriate to ensure safe data collection, security of the data with state of the art encryption methods, actuarial support, and data review for accuracy and quality assurance;

(h) Store data on secure servers that are compliant with the federal health insurance portability and accountability act and regulations, with access to the data strictly controlled and limited to staff with appropriate training, clearance, and background checks; and

(i) Maintain state of the art security standards for transferring data to approved data requestors.

(4) The lead organization and data vendor must submit detailed descriptions to ((the office of the chief information officer))Washington technology solutions to ensure robust security methods are in place. ((The office of the chief information officer))Washington technology solutions must report its findings to the authority and the appropriate committees of the legislature.

(5) The lead organization is responsible for internal governance, management, funding, and operations of the database. At the direction of the authority, the lead organization shall work with the data vendor to:

(a) Collect claims data from data suppliers as provided in RCW 43.371.030;

(b) Design data collection mechanisms with consideration for the time and cost incurred by data suppliers and others in submission and collection and the benefits that measurement would achieve, ensuring the data submitted meet quality standards and are reviewed for quality assurance;

(c) Ensure protection of collected data and store and use any data in a manner that protects patient privacy and complies with this section. All patient-specific information must be deidentified with an up-to-date industry standard encryption algorithm;

(d) Consistent with the requirements of this chapter, make information from the database available as a resource for public and private entities, including carriers, employers, providers, hospitals, and purchasers of health care;

(e) Report performance on cost and quality pursuant to RCW 43.371.060 using, but not limited to, the performance measures developed under RCW 41.05.690;

(f) Develop protocols and policies, including prerelease peer review by data suppliers, to ensure the quality of data releases and reports;

(g) Develop a plan for the financial sustainability of the database as may be reasonable and customary as compared to other states' databases and charge fees for reports and data files as needed to fund the database. Any fees must be approved by the authority and should be comparable, accounting for relevant differences across data requests and uses. The lead organization may not charge providers or data suppliers fees other than fees directly related to requested reports and data files; and

(h) Convene advisory committees with the approval and participation of the authority, including: (i) A committee on data policy development; and (ii) a committee to establish a data release process consistent with the requirements of this chapter and to provide advice regarding formal data release requests. The advisory committees must include in-state representation from key provider, hospital, public health, health maintenance organization, large and small private purchasers, consumer organizations, and the two largest carriers supplying claims data to the database.

(6) The lead organization governance structure and advisory committees for this database must include representation of the third-party administrator of the uniform medical plan. A payer, health maintenance organization, or third-party administrator must be a data supplier to the all-payer health care claims database to be represented on the lead organization governance structure or advisory committees.

Sec. 55. RCW 44.68.065 and 2020 c 114 s 13 are each amended to read as follows:

The legislative service center, under the direction of the joint legislative systems administrative committee, shall:

(1) Develop a legislative information technology portfolio consistent with the provisions of RCW 43.105.341;

(2) Participate in the development of an enterprise-based statewide information technology strategy;

(3) Ensure the legislative information technology portfolio is organized and structured to clearly indicate participation in and use of enterprise-wide information technology strategies;

(4) As part of the biennial budget process, submit the legislative information technology portfolio to the chair and ranking member of the ways and means committees of the house of representatives and the senate, the office of financial management, and ((the consolidated technology services agency))Washington technology solutions.

Sec. 56. RCW 46.20.037 and 2012 c 80 s 1 are each amended to read as follows:

(1) The department may implement a facial recognition matching system for drivers' licenses, permits, and identicards. Any facial recognition matching system selected by the department must be used only to verify the identity of an applicant for or holder of a driver's license, permit, or identicard to determine whether the person has been issued a driver's license, permit, or identicard under a different name or names.

(2) Any facial recognition matching system selected by the department must be capable of highly accurate matching, and must be compliant with appropriate standards established by the American association of motor vehicle administrators that exist on June 7, 2012, or such subsequent date as may be provided by the department by rule, consistent with the purposes of this section.

(3) The department shall post notices in conspicuous locations at all department driver licensing offices, make written information available to all applicants at department driver licensing offices, and provide information on the department's website regarding the facial recognition matching system. The notices, written information, and information on the website must address how the facial recognition matching system works, all ways in which the department may use results from the facial recognition matching system, how an investigation based on results from the facial recognition matching system would be conducted, and a person's right to appeal any determinations made under this chapter.

(4) Results from the facial recognition matching system:

(a) Are not available for public inspection and copying under chapter 42.56 RCW;

(b) May only be disclosed when authorized by a court order;

(c) May only be disclosed to a federal government agency if specifically required under federal law; and

(d) May only be disclosed by the department to a government agency, including a court or law enforcement agency, for use in carrying out its functions if the department has determined that person has committed one of the prohibited practices listed in RCW 46.20.0921 and this determination has been confirmed by a hearings examiner under this chapter or the person declined a hearing or did not attend a scheduled hearing.

(5) All personally identifying information derived from the facial recognition matching system must be stored with appropriate security safeguards. ((The office of the chief information officer))Washington technology solutions shall develop the appropriate security standards for the department's use of the facial recognition matching system, subject to approval and oversight by the technology services board.

(6) The department shall develop procedures to handle instances in which the facial recognition matching system fails to verify the identity of an applicant for a renewal or duplicate driver's license, permit, or identicard. These procedures must allow an applicant to prove identity without using the facial recognition matching system.

Sec. 57. RCW 46.20.157 and 2011 1st sp.s. c 43 s 811 are each amended to read as follows:

(1) Except as provided in subsection (2) of this section, the department shall annually provide to ((the consolidated technology services agency))Washington technology solutions an electronic data file. The data file must:

(a) Contain information on all licensed drivers and identicard holders who are eighteen years of age or older and whose records have not expired for more than two years;

(b) Be provided at no charge; and

(c) Contain the following information on each such person: Full name, date of birth, residence address including county, sex, and most recent date of application, renewal, replacement, or change of driver's license or identicard.

(2) Before complying with subsection (1) of this section, the department shall remove from the file the names of any certified participants in the Washington state address confidentiality program under chapter 40.24 RCW that have been identified to the department by the secretary of state.

Sec. 58. RCW 50A.25.070 and 2022 c 233 s 10 and 2022 c 18 s 2 are each reenacted and amended to read as follows:

(1) The department may enter into data-sharing contracts and may disclose records and information deemed confidential to state or local government agencies under this chapter only if permitted under subsection (2) of this section and RCW 50A.25.090. A state or local government agency must need the records or information for an official purpose and must also provide:

(a) An application in writing to the department for the records or information containing a statement of the official purposes for which the state or local government agency needs the information or records and specifically identify the records or information sought from the department; and

(b) A written verification of the need for the specific information from the director, commissioner, chief executive, or other official of the requesting state or local government agency either on the application or on a separate document.

(2) The department may disclose information or records deemed confidential under this chapter to the following state or local government agencies:

(a) To the department of social and health services to identify child support obligations as defined in RCW 50A.15.080 and for the purposes of administering the department's responsibilities under Title 50B RCW;

(b) To the department of revenue to determine potential tax liability or employer compliance with registration and licensing requirements;

(c) To the department of labor and industries to compare records or information to detect improper or fraudulent claims;

(d) To the office of financial management for the purpose of conducting periodic salary or fringe benefit studies pursuant to law or for the actuarial services created under chapter 233, Laws of 2022;

(e) To the office of the state treasurer and any financial or banking institutions deemed necessary by the office of the state treasurer and the department for the proper administration of funds;

(f) To the office of the attorney general for purposes of legal representation;

(g) To a county clerk for the purpose of RCW 9.94A.760 if requested by the county clerk's office;

(h) To the office of administrative hearings for the purpose of administering the administrative appeal process;

(i) To the department of enterprise services for the purpose of agency administration and operations;

(j) To ((the consolidated technology services agency))Washington technology solutions for the purpose of enterprise technology support; ((and))

(k) To the health care authority and the office of the state actuary for the purposes of administering the department's responsibilities under Title 50B RCW;

(l) To the office of the state actuary for the purpose of performing actuarial services to assess the financial stability and solvency of the family and medical leave program, and specifically the family and medical leave insurance account created in RCW 50A.05.070; and

(m) To the joint legislative audit and review committee, in accordance with RCW 44.28.110, for the purpose of conducting performance audits.

(3) The department may also enter into data-sharing agreements with other state or local government agencies solely for the purposes of program evaluation under this title or Title 50B RCW.

Sec. 59. RCW 70A.02.110 and 2022 c 181 s 15 are each amended to read as follows:

(1) The environmental justice council is established to advise covered agencies on incorporating environmental justice into agency activities.

(2) The council consists of 14 members, except as provided in RCW 70A.65.040(3), appointed by the governor. The councilmembers must be persons who are well-informed regarding and committed to the principles of environmental justice and who, to the greatest extent practicable, represent diversity in race, ethnicity, age, and gender, urban and rural areas, and different regions of the state. The members of the council shall elect two members to serve as cochairs for two-year terms. The council must include:

(a) Seven community representatives, including one youth representative, the nominations of which are based upon applied and demonstrated work and focus on environmental justice or a related field, such as racial or economic justice, and accountability to vulnerable populations and overburdened communities;

(i) The youth representative must be between the ages of 18 and 25 at the time of appointment;

(ii) The youth representative serves a two-year term. All other community representatives serve four-year terms, with six representatives initially being appointed to four-year terms and five being initially appointed to two-year terms, after which they will be appointed to four-year terms;

(b) Two members representing tribal communities, one from eastern Washington and one from western Washington, appointed by the governor, plus two tribal members as specified in RCW 70A.65.040. The governor shall solicit and consider nominees from each of the federally recognized tribes in Washington state. The governor shall collaborate with federally recognized tribes on the selection of tribal representatives. The tribal representatives serve four-year terms. One representative must be initially appointed for a four-year term. The other representative must be initially appointed for a two-year term, after which, that representative must be appointed for a four-year term;

(c) Two representatives who are environmental justice practitioners or academics to serve as environmental justice experts, the nominations of which are based upon applied and demonstrated work and focus on environmental justice;

(d)(i) One representative of a business that is regulated by a covered agency and whose ordinary business conditions are significantly affected by the actions of at least one other covered agency; and

(ii) One representative who is a member or officer of a union representing workers in the building and construction trades; and

(e) One representative at large, the nomination of which is based upon applied and demonstrated work and focus on environmental justice.

(3) Covered agencies shall serve as nonvoting, ex officio liaisons to the council. Each covered agency must identify an executive team level staff person to participate on behalf of the agency.

(4) Nongovernmental members of the council must be compensated and reimbursed in accordance with RCW 43.03.050, 43.03.060, and 43.03.220.

(5) The department of health must:

(a) Hire a manager who is responsible for overseeing all staffing and administrative duties in support of the council; and

(b) Provide all administrative and staff support for the council.

(6) In collaboration with the office of equity, the office of financial management, the council, and covered agencies, the department of health must:

(a) Establish standards for the collection, analysis, and reporting of disaggregated data as it pertains to tracking population level outcomes of communities;

(b) Create statewide and agency-specific process and outcome measures to show performance:

(i) Using outcome-based methodology to determine the effectiveness of agency programs and services on reducing environmental disparities; and

(ii) Taking into consideration community feedback from the council on whether the performance measures established accurately measure the effectiveness of covered agency programs and services in the communities served; and

(c) Create an online performance dashboard to publish performance measures and outcomes as referenced in RCW 70A.02.090 for the state and each covered agency.

(7) The department of health must coordinate with ((the consolidated technology services agency))Washington technology solutions to address cybersecurity and data protection for all data collected by the department.

(8)(a) With input and assistance from the council, the department of health must establish an interagency work group to assist covered agencies in incorporating environmental justice into agency decision making. The work group must include staff from each covered agency directed to implement environmental justice provisions under this chapter and may include members from the council. The department of health shall provide assistance to the interagency work group by:

(i) Facilitating information sharing among covered agencies on environmental justice issues and between agencies and the council;

(ii) Developing and providing assessment tools for covered agencies to use in the development and evaluation of agency programs, services, policies, and budgets;

(iii) Providing technical assistance and compiling and creating resources for covered agencies to use; and

(iv) Training covered agency staff on effectively using data and tools for environmental justice assessments.

(b) The duties of the interagency work group include:

(i) Providing technical assistance to support agency compliance with the implementation of environmental justice into their strategic plans, environmental justice obligations for budgeting and funding criteria and decisions, environmental justice assessments, and community engagement plans;

(ii) Assisting the council in developing a suggested schedule and timeline for sequencing the types of: (A) Funding and expenditure decisions subject to rules; and (B) criteria incorporating environmental justice principles;

(iii) Identifying other policies, priorities, and projects for the council's review and guidance development;

(iv) Identifying goals and metrics that the council may use to assess agency performance in meeting the requirements of chapter 314, Laws of 2021 for purposes of communicating progress to the public, the governor, and the legislature; and

(v) Developing the guidance under subsection (9)(c) of this section in coordination with the council.

(9) The council has the following powers and duties:

(a) To provide a forum for the public to:

(i) Provide written or oral testimony on their environmental justice concerns;

(ii) Assist the council in understanding environmental justice priorities across the state in order to develop council recommendations to agencies for issues to prioritize; and

(iii) Identify which agencies to contact with their specific environmental justice concerns and questions;

(b)(i) The council shall work in an iterative fashion with the interagency work group to develop guidance for environmental justice implementation into covered agency strategic plans pursuant to RCW 70A.02.040, environmental justice assessments pursuant to RCW 70A.02.060, budgeting and funding criteria for making budgeting and funding decisions pursuant to RCW 70A.02.080, and community engagement plans pursuant to RCW 70A.02.050;

(ii) The council and interagency work group shall regularly update its guidance;

(c) In consultation with the interagency work group, the council:

(i) Shall provide guidance to covered agencies on developing environmental justice assessments pursuant to RCW 70A.02.060 for significant agency actions;

(ii) Shall make recommendations to covered agencies on which agency actions may cause environmental harm or may affect the equitable distribution of environmental benefits to an overburdened community or a vulnerable population and therefore should be considered significant agency actions that require an environmental justice assessment under RCW 70A.02.060;

(iii) Shall make recommendations to covered agencies:

(A) On the identification and prioritization of overburdened communities under this chapter; and

(B) Related to the use by covered agencies of the environmental and health disparities map in agency efforts to identify and prioritize overburdened communities;

(iv) May make recommendations to a covered agency on the timing and sequencing of a covered agencies' efforts to implement RCW 70A.02.040 through 70A.02.080; and

(v) May make recommendations to the governor and the legislature regarding ways to improve agency compliance with the requirements of this chapter;

(d) By December 1, 2023, and biennially thereafter, and with consideration of the information shared on September 1st each year in covered agencies' annual updates to the council required under RCW 70A.02.090, the council must:

(i) Evaluate the progress of each agency in applying council guidance, and update guidance as needed; and

(ii) Communicate each covered agency's progress to the public, the governor, and the legislature. This communication is not required to be a report and may take the form of a presentation or other format that communicates the progress of the state and its agencies in meeting the state's environmental justice goals in compliance with chapter 314, Laws of 2021, and summarizing the work of the council pursuant to (a) through (d) of this subsection, and subsection (11) of this section; and

(e) To fulfill the responsibilities established for the council in RCW 70A.65.040.

(10) By November 30, 2023, and in compliance with RCW 43.01.036, the council must submit a report to the governor and the appropriate committees of the house of representatives and the senate on:

(a) The council's recommendations to covered agencies on the identification of significant agency actions requiring an environmental justice assessment under subsection (9)(c)(ii) of this section;

(b) The summary of covered agency progress reports provided to the council under RCW 70A.02.090(1), including the status of agency plans for performing environmental justice assessments required by RCW 70A.02.060; and

(c) Guidance for environmental justice implementation into covered agency strategic plans, environmental justice assessments, budgeting and funding criteria, and community engagement plans under subsection (9)(c)(i) of this section.

(11) The council may:

(a) Review incorporation of environmental justice implementation plans into covered agency strategic plans pursuant to RCW 70A.02.040, environmental justice assessments pursuant to RCW 70A.02.060, budgeting and funding criteria for making budgeting and funding decisions pursuant to RCW 70A.02.080, and community engagement plans pursuant to RCW 70A.02.050;

(b) Make recommendations for amendments to this chapter or other legislation to promote and achieve the environmental justice goals of the state;

(c) Review existing laws and make recommendations for amendments that will further environmental justice;

(d) Recommend to specific agencies that they create environmental justice-focused, agency-requested legislation;

(e) Provide requested assistance to state agencies other than covered agencies that wish to incorporate environmental justice principles into agency activities; and

(f) Recommend funding strategies and allocations to build capacity in vulnerable populations and overburdened communities to address environmental justice.

(12) The role of the council is purely advisory and council decisions are not binding on an agency, individual, or organization.

(13) The department of health must convene the first meeting of the council by January 1, 2022.

(14) All council meetings are subject to the open public meetings requirements of chapter 42.30 RCW and a public comment period must be provided at every meeting of the council.

Sec. 60. RCW 71.24.898 and 2021 c 302 s 109 are each amended to read as follows:

For the purpose of development and implementation of technology and platforms by the department and the authority under RCW 71.24.890, the department and the authority shall create a sophisticated technical and operational plan. The plan shall not conflict with, nor delay, the department meeting and satisfying existing 988 federal requirements that are already underway and must be met by July 16, 2022, nor is it intended to delay the initial planning phase of the project, or the planning and deliverables tied to any grant award received and allotted by the department or the authority prior to April 1, 2021. To the extent that funds are appropriated for this specific purpose, the department and the authority must contract for a consultant to critically analyze the development and implementation technology and platforms and operational challenges to best position the solutions for success. Prior to initiation of a new information technology development, which does not include the initial planning phase of this project or any contracting needed to complete the initial planning phase, the department and authority shall submit the technical and operational plan to the governor, office of financial management, steering committee of the crisis response improvement strategy committee created under RCW 71.24.892, and appropriate policy and fiscal committees of the legislature, which shall include the committees referenced in this section. The plan must be approved by ((the office of the chief information officer))Washington technology solutions, the director of the office of financial management, and the steering committee of the crisis response improvement strategy committee, which shall consider any feedback received from the senate ways and means committee chair, the house of representatives appropriations committee chair, the senate environment, energy and technology committee chair, the senate behavioral health subcommittee chair, and the house of representatives health care and wellness committee chair, before any funds are expended for the solutions, other than those funds needed to complete the initial planning phase. A draft technical and operational plan must be submitted no later than January 1, 2022, and a final plan by August 31, 2022.

The plan submitted must include, but not be limited to:

(1) Data management;

(2) Data security;

(3) Data flow;

(4) Data access and permissions;

(5) Protocols to ensure staff are following proper health information privacy procedures;

(6) Cybersecurity requirements and how to meet these;

(7) Service level agreements by vendor;

(8) Maintenance and operations costs;

(9) Identification of what existing software as a service products might be applicable, to include the:

(a) Vendor name;

(b) Vendor offerings to include product module and functionality detail and whether each represent add-ons that must be paid separately;

(c) Vendor pricing structure by year through implementation; and

(d) Vendor pricing structure by year post implementation;

(10) Integration limitations by system;

(11) Data analytic and performance metrics to be required by system;

(12) Liability;

(13) Which agency will host the electronic health record software as a service;

(14) Regulatory agency;

(15) The timeline by fiscal year from initiation to implementation for each solution in chapter 302, Laws of 2021;

(16) How to plan in a manner that ensures efficient use of state resources and maximizes federal financial participation; and

(17) A complete comprehensive business plan analysis.

(1) RCW 41.06.101 (Office of the chief information officer—Certain personnel exempted from chapter) and 2011 1st sp.s. c 43 s 723; and

(2) RCW 43.105.205 (Office of the state chief information officer—Created—Powers, duties, and functions) and 2015 3rd sp.s. c 1 s 201, 2013 2nd sp.s. c 33 s 3, & 2011 1st sp.s. c 43 s 702.

--- END ---