(1) The
committee oversees the office of information technology, including but not limited
to:
(a) A review of the state of information technology;
(b) Any general information technology needs;
(c) Any anticipated short-term or long-term changes for information
technology;
(d) Repealed.
(e) The office of information technology's responsibilities related to the
geographic information system as set forth in section 24-37.5-103 (4).
(2) The committee oversees the chief information security officer and his or
her duties as established in part 4 of article 37.5 of title 24, C.R.S.
(3) and (4) Repealed.
(5) The committee may review the actions of the statewide internet portal
authority created in section 24-37.7-102, C.R.S.
(6) (a) The committee oversees a state agency regarding any authority that
has been delegated to the state agency pursuant to section 24-37.5-105.4.
(b) On or before November 1, 2021, and on November 1 of each year
thereafter, the office of information technology shall submit a written report to the
committee regarding any delegation of authority to the state agency pursuant to
section 24-37.5-105.4. The report shall include a summary of the information
included in the written delegation agreement between the state agency and the
office of information technology pursuant to section 24-37.5-105.4 (3).
(6.5) The committee may request information and presentations from state
agencies regarding data privacy and cybersecurity within state agencies and may
coordinate with the Colorado cybersecurity council created in section 24-33.5-1902. In addition, the committee may consider:
(a) Whether state agencies are collecting or retaining data that exceeds
what is necessary and appropriate for such agencies to perform their functions;
(b) Who has access to data, the extent of such access, and appropriate
mechanisms to protect sensitive data; and
(c) Measures to protect data against unauthorized access, disclosure, use,
modification, or destruction.
(7) On or before November 1, 2013, and on November 1 of each year
thereafter, the judicial department, the department of law, the department of state,
and the department of the treasury shall submit a written report to the committee
that details all information technology that such department purchased or
implemented.
(8) A copy of any legislative measure introduced during any legislative
session, regular or special, commencing on or after January 1, 2014, and determined
by the speaker of the house of representatives or by the president of the senate to
be dealing with information technology, data privacy, or cybersecurity shall be
reviewed by the committee. The committee may also request that any legislative
measure introduced during a legislative session, regular or special, and determined
by the committee to be dealing with information technology, data privacy, or
cybersecurity be reviewed by the committee. The committee may make advisory
recommendations about such legislative measures to the house of representatives,
the senate, the joint budget committee, the capital development committee, or to
any committee of reference, as appropriate, considering any such legislative
measure.
(9) On or before the first day of the regular legislative session commencing
on or after January 1, 2014, and on the first day of each regular legislative session
thereafter, the joint technology committee shall submit a written report on the
committee's findings and recommendations based on the committee's oversight
pursuant to subsections (1) to (8) of this section to the joint budget committee. Such
report may include:
(a) Legislation recommended by the committee that addresses any of the
committee's findings and recommendations based on the committee's oversight
pursuant to subsections (1) to (8) of this section. Any such legislation is exempt
from the five-bill limitation specified in rule 24 of the joint rules of the senate and
the house of representatives; and
(b) A report on the status of any information technology budget request that
was previously approved for phasing in or for incremental implementation over a
period exceeding one year.
(10) Upon request, a state agency and the judicial department, the
department of law, the department of state, and the department of the treasury
shall make available to the committee such data, reports, or information as are
necessary for the performance of the committee's duties. If the committee requests
such data, reports, or information, the state agency or judicial department, the
department of law, the department of state, or the department of the treasury shall
provide the requested information no later than November 1 of the calendar year in
which the request is made.
(11) (a) The committee shall study all information technology budget
requests pursuant to rule 45 of the joint rules of the senate and the house of
representatives, made by all state agencies and state institutions of higher
education. For purposes of institutions of higher education, the committee shall
only review state-funded information technology budget requests. The committee
shall make determinations of the priority to be accorded to such information
technology budget requests based upon information made available to the
committee from any sources with respect to estimates of revenues available in a
fiscal year for information technology budget requests. The committee shall make
written reports setting forth its recommendations, prioritization, findings, and
comments as to each information technology budget request reviewed pursuant to
rule 45 of the joint rules of the senate and the house of representatives, including
recommendations regarding the appropriate amount of an information technology
budget request, and shall submit such written reports to the joint budget
committee for supplemental information technology budget requests no later than
January 15 of each year, and for new or amended information technology budget
requests for the upcoming fiscal year no later than February 15 of each year.
(b) The joint budget committee may seek the committee's review of any
operating budget request for information technology, including a request for which
the general assembly may make an appropriation pursuant to section 24-75-302
(3.7)(b).
(c) The committee shall hold such hearings as may be necessary to study all
information technology budget requests pursuant to rule 45 of the joint rules of the
senate and the house of representatives made by all state agencies and state
institutions of higher education.
(d) The legislative council staff shall assist and advise the committee by
reviewing and summarizing the information technology budget requests made by
all state agencies and state institutions of higher education.
(e) The committee shall oversee information technology strategy through
the review of state agency information technology plans.
(f) The committee shall oversee any information technology project for
which the general assembly makes an appropriation pursuant to section 24-75-302
(3.7)(b). The legislative or judicial department, the department of law, the
department of state, or the department of the treasury, as applicable, shall submit
to the committee any data, reports, or information requested by the committee or
otherwise necessary for the committee to perform its duties pursuant to this
subsection (11)(f).
(12) Between adjournment sine die of the second regular session of the
seventy-second general assembly and the first meeting in 2021 of the sales and use
tax simplification task force created in section 39-26-802, the committee shall:
(a) Seek regular updates from the office of information technology and the
department of revenue regarding the development of the electronic sales and use
tax simplification system described in Senate Bill 19-006, enacted in 2019;
(b) Once the electronic sales and use tax simplification system described in
Senate Bill 19-006, enacted in 2019, is online, monitor and encourage participation
by businesses and home rule municipalities; and
(c) Seek regular updates from the office of information technology and the
department of revenue regarding the purchase and development of a geographic
information system (GIS) database to maintain jurisdictional boundaries of sales tax
districts and to calculate appropriate sales and use tax rates for individual
addresses for which the department of revenue received an appropriation in Senate
Bill 19-006, enacted in 2019.