Bills › 90th General Assembly
Where it is now
- Done: IntroducedFebruary 9, 2023
- Done: SubcommitteeFebruary 9, 2023
- Done: House committeeFebruary 28, 2023
- Skipped: Passes the HouseContinued as HF 554
- Next: Senate committee
- Next: Passes the Senate
- Next: To the Governor
- Next: Signed into law
Became HF 554 → Its progress continues under the new number. Go to HF 554 What’s a funnel?
What’s in it
This bill prohibits the state or a political subdivision of the state from expending revenue received from taxpayers for payment to persons responsible for ransomware attacks.24. “Critical infrastructure” includes but is not limited to buildings, structures, offices, lines, poles, pipes, and equipment, as well as real and personal property owned or used to provide fire fighting, law enforcement, medical, or other emergency services. The bill defines “encryption” as the use of an algorithmic process to transform data into a form in which the data is rendered unreadable or unusable without the use of a confidential process or key.
Read the full explanation
The bill defines “political subdivision” as a city, county, township, or school district.1, or the use of any form of software that results in the unauthorized encryption of data, the denial of access to data, the denial of access to a computer, or the denial of access to a computer system. _____ and discovers the attack, the state or political subdivision shall expeditiously provide notice to the office of the chief information officer. The office of the chief information officer shall adopt rules establishing notification procedures. The bill provides that the state or a political subdivision of the state shall not expend revenue received from taxpayers for payment to a person responsible for, or reasonably believed to be responsible for, a ransomware attack. The bill allows the office of the chief information officer to authorize such expenditures in the event of a critical or emergency situation as determined by the department of homeland security and emergency management. The bill provides that information related to a political subdivision’s insurance coverage for cybersecurity or ransomware attack shall be considered confidential records. The bill provides that the state or a political subdivision of the state may use taxpayer revenue to pay for cybersecurity insurance or related ransomware insurance if the state or political subdivision first exhausts all other reasonable means of mitigating a potential ransomware attack. The bill includes a legislative intent section, which provides that it is the intent of the general assembly that the state and political subdivisions of the state have tested cybersecurity mitigation plans and policies. The bill takes effect July 1, 2024, except for the section of the bill requiring the office of the chief information officer to prepare a notice of intended action (NOIA) for the adoption of rules, which takes effect upon enactment. The NOIA must be submitted to the administrative rules coordinator and administrative code editor as soon as possible and no later than October 1, 2023.5(2)(b).
From the explanation printed with the bill as introduced, written by the Legislative Services Agency. Amendments adopted later aren’t reflected. Full bill text
House subcommittee
Named February 9, 2023. On February 23, 2023 it recommended passage. Vote Total: 2-0.
Three legislators hear a bill first and recommend what the committee should do; it’s the best time to weigh in. How to take part
Iowa Code it changes
Creates§8H.1§8H.2§8H.3§8H.4§8H.5
Amends§8B.4
Read from the bill as introduced. Each links to every bill touching that chapter of the Iowa Code. How the Code works
Lobbying
0 for · 0 against · 26 undecided · Who →
Family tree
Where this legislation came from and where it went: earlier tries, the versions it moved through this Assembly, and later bills built on it.
Study bill
90th General Assembly
Earlier and later bills are matched by wording or an identical title; check the text to be sure it’s the same idea.