Bills › 88th General Assembly

SF 2391Died when the session ended · March 11, 2020

Prohibiting the state or a political subdivision of the state from expending revenue received from taxpayers for payment to persons responsible for ransomware attacks, and including effective date provisions

Sponsored by the Senate State Government Committee

Topics:Cities & countiesPublic safety & emergencies

Same legislation: SF 2080

Where it is now

  1. Done: IntroducedJanuary 23, 2020
  2. Done: SubcommitteeJanuary 30, 2020
  3. Done: Senate committeeFebruary 24, 2020
  4. Done: Passes the SenateMarch 11, 202028–17
  5. Stopped: House committeeDied when the General Assembly ended
  6. Next: Passes the House
  7. Next: To the Governor
  8. Next: Signed into law

Died when the session ended The 2020 session adjourned on June 14, 2020, the General Assembly’s last regular session. Bills that didn’t pass both chambers died. What’s a funnel?

What’s in it

This bill prohibits the state and a political subdivision of the state from expending public moneys for payment to persons responsible for ransomware attacks. The bill defines “encryption” as the use of an algorithmic process to transform data into a form in which the data is rendered unreadable or unusable without the use of a confidential process or key. The bill defines “political subdivision” as a city, county, township, or school district.1; or the use of any form of software that results in the unauthorized encryption of data, the denial of access to data, the denial of access to a computer, or the denial of access to a computer system.

Read the full explanation

The bill provides that the state and a political subdivision of the state shall not expend public moneys for payment to a person responsible for, or reasonably believed to be responsible for, a ransomware attack. The bill allows the office of the chief information officer to authorize such expenditures in the event of a critical or emergency situation as determined by the department of homeland security and emergency management.7. The bill includes a legislative intent section, which provides that it is the intent of the general assembly that the state and political subdivisions of the state have tested cybersecurity mitigation plans and policies.

Changed since by amendments S-5085, S-5079; see Amendments.

Full bill text1

Iowa Code it changes

Creates§8H.1§8H.2

Amends§8B.4

How the Code works2

Lobbying

0 for · 1 against · 20 undecided · Who →

Family tree

Earlier and later bills are matched by wording or an identical title.

Similar bills

  • SF 2207 Prohibiting the state and political subdivisions of the state from expending public moneys…
    89th General Assembly · In committee
    Nearly identical

Matched by wording or an identical title.