Bills › 89th General Assembly
Where it is now
- Done: IntroducedFebruary 9, 2022
- Done: SubcommitteeFebruary 9, 2022
- Stopped: House committeeDied when the General Assembly ended
- Next: Passes the House
- Next: Senate committee
- Next: Passes the Senate
- Next: To the Governor
- Next: Signed into law
Died when the session ended The 2022 session adjourned on May 24, 2022, the General Assembly’s last regular session. Bills that didn’t pass both chambers died. What’s a funnel?
What’s in it
This bill prohibits the state or a political subdivision of the state from expending revenue received from taxpayers for payment to persons responsible for ransomware attacks.24. “Critical infrastructure” includes but is not limited to buildings, structures, offices, lines, poles, pipes, and equipment, as well as real and personal property owned or used to provide fire fighting, law enforcement, medical, or other emergency services. The bill defines “encryption” as the use of an algorithmic process to transform data into a form in which the data is rendered unreadable or unusable without the use of a confidential process or key.
Read the full explanation
The bill defines “political subdivision” as a city, county, township, or school district.1, or the use of any form of software that results in the unauthorized encryption of data, the denial of access to data, the denial of access to a computer, or the denial of access to a computer system. _____ and discovers the attack, the state or political subdivision shall expeditiously provide notice to the office of the chief information officer. The office of the chief information officer shall adopt rules establishing notification procedures. The bill provides that the state or a political subdivision of the state shall not expend revenue received from taxpayers for payment to a person responsible for, or reasonably believed to be responsible for, a ransomware attack. The bill allows the office of the chief information officer to authorize such expenditures in the event of a critical or emergency situation as determined by the department of homeland security and emergency management. The bill provides that information related to a political subdivision’s insurance coverage for cybersecurity or ransomware attack shall be considered confidential records. The bill provides that the state or a political subdivision of the state may use taxpayer revenue to pay for cybersecurity insurance or related ransomware insurance if the state or political subdivision first exhausts all other reasonable means of mitigating a potential ransomware attack. The bill includes a legislative intent section, which provides that it is the intent of the general assembly that the state and political subdivisions of the state have tested cybersecurity mitigation plans and policies. The bill takes effect July 1, 2023, except for the section of the bill requiring the office of the chief information officer to prepare a notice of intended action (NOIA) for the adoption of rules, which takes effect upon enactment. The NOIA must be submitted to the administrative rules coordinator and administrative code editor as soon as possible and no later than October 1, 2022.5(2)(b).
House subcommittee
Named February 9, 2022. Meeting: Wednesday, February 16 · 8:15 AM · House Lounge.
Three legislators hear a bill first and recommend what the committee should do; it’s the best time to weigh in. How to take part
Iowa Code it changes
Creates§8H.1§8H.2§8H.3§8H.4§8H.5
Amends§8B.4
Lobbying
0 for · 0 against · 17 undecided · Who →
Family tree
Earlier and later bills are matched by wording or an identical title.
Similar bills
- HSB 153 HSB 15390th General Assembly · Renumbered as HF 554Nearly identical
Matched by wording or an identical title.