Committee tables OIT cybersecurity update bill to refine carve‑outs for Secretary of State systems

The State and Local Government Committee voted Feb. 25 to table LD22092, a department bill that would update statutes governing the Office of Information Technology and modernize language on cybersecurity and procurement.

Department staff described the bill as a technical update to Title 5 that would allow the chief information officer to name an authorized designee, add a definition of “cyber attack,” update mission language and permit procurement of IT products or services necessary to detect, prevent and respond to cyberattacks. Committee staff noted the bill amends and enacts provisions under Title 5 (including sections cited in the bill packet).

Anya Trundy, deputy commissioner of the Department of Administrative and Financial Services, told the committee DAFS has met with the Secretary of State’s office and that both sides are largely in agreement about preserving the existing balance between the two offices. “We have a sense of where we need to add some additional language,” Trundy said, asking for time and staff assistance so the wording does not expand or curtail either office’s authority.

Deputy Secretary of State Emily Cook said her office and DAFS "are in agreement on what the appropriate path forward is" and supported working deliberately with committee staff to ensure the words are precise.

Members expressed concern about any provision that could limit the Secretary of State’s constitutional authority over elections and motor vehicle data; committee staff had flagged sections 6, 10, 16 and 17 in the bill packet as points the Secretary of State’s testimony identified for clarification. Representative Dave Rollins moved to table the bill with direction that DAFS work with the Secretary of State’s office and committee staff to draft narrowly targeted carve‑outs; Representative Wayne Farren seconded. The motion carried with the members present.

The tabling preserves the opportunity to return the bill with revised language that the committee can consider at a later date.