| |
| |
|
|
A BILL TO BE ENTITLED
|
|
|
AN ACT
|
|
|
relating to the confidentiality of certain information related to a |
|
|
computer security incident. |
|
|
BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS: |
|
|
SECTION 1. Section 552.139, Government Code, is amended by |
|
|
amending Subsection (b) and adding Subsections (b-1) and (d) to |
|
|
read as follows: |
|
|
(b) The following information is confidential: |
|
|
(1) a computer network vulnerability report; |
|
|
(2) any other assessment of the extent to which data |
|
|
processing operations, a computer, a computer program, network, |
|
|
system, or system interface, or software of a governmental body or |
|
|
of a contractor of a governmental body is vulnerable to |
|
|
unauthorized access or harm, including an assessment of the extent |
|
|
to which the governmental body's or contractor's electronically |
|
|
stored information containing sensitive or critical information is |
|
|
vulnerable to alteration, damage, erasure, or inappropriate use; |
|
|
[and] |
|
|
(3) a photocopy or other copy of an identification |
|
|
badge issued to an official or employee of a governmental body; and |
|
|
(4) information directly arising from a governmental |
|
|
body's routine efforts to prevent, detect, investigate, or mitigate |
|
|
a computer security incident, including information contained in or |
|
|
derived from an information security log. |
|
|
(b-1) Subsection (b)(4) does not affect the notification |
|
|
requirements related to a breach of system security as defined by |
|
|
Section 521.053, Business & Commerce Code. |
|
|
(d) A state agency shall redact from a contract posted on |
|
|
the agency's Internet website under Section |
|
|
2261.253 information |
|
|
that is made confidential by, or excepted from required public |
|
|
disclosure under, this section. The redaction of information under |
|
|
this subsection does not exempt the information from the |
|
|
requirements of Section 552.021 or 552.221. |
|
|
SECTION 2. Sections 552.139(b)(4) and (b-1), Government |
|
|
Code, as added by this Act, apply only to a request for public |
|
|
information received on or after the effective date of this Act. A |
|
|
request received before the effective date of this Act is governed |
|
|
by the law in effect when the request was received, and the former |
|
|
law is continued in effect for that purpose. |
|
|
SECTION 3. This Act takes effect immediately if it receives |
|
|
a vote of two-thirds of all the members elected to each house, as |
|
|
provided by Section 39, Article III, Texas Constitution. If this |
|
|
Act does not receive the vote necessary for immediate effect, this |
|
|
Act takes effect September 1, 2017. |