2020 Colorado Revised Statutes
Title 2 - Legislative
Article 3. Legislative Services
Section 2-3-1704. Powers and duties of the joint technology committee.

(1) The committee oversees the office of information technology, including but not limited to:

1. A review of the state of information technology;

2. Any general information technology needs;

3. Any anticipated short-term or long-term changes for information technology;

4. The office of information technology's responsibilities related to the statewide communications and information infrastructure as set forth in section 24-37.5-108, C.R.S.; and

5. The office of information technology's responsibilities related to the geographic information system as set forth in section 24-37.5-111, C.R.S.

2. The committee oversees the chief information security officer and his or her duties asestablished in part 4 of article 37.5 of title 24, C.R.S.

3. The committee oversees any telecommunications coordination within state government that the chief information officer performs pursuant to part 5 of article 37.5 of title 24, C.R.S.

4. The committee oversees the general government computer center established in part6 of article 37.5 of title 24, C.R.S.

5. The committee may review the actions of the statewide internet portal authority created in section 24-37.7-102, C.R.S.

6. (a) The committee oversees a state agency regarding:

1. Any information technology purchased or implemented that is not managed or approved through the office of information technology;

2. Any information technology that a state agency purchased or implemented that doesnot follow the standards set by the office of information technology; and

3. Any information technology that a state agency purchased or implemented that hasthe same function as information technology that the office of information technology has already created, purchased, or implemented.

(b) On or before November 1, 2013, and on November 1 of each year thereafter, all state agencies are encouraged to submit a written report to the committee regarding any of the instances described in paragraph (a) of this subsection (6).

(6.5) The committee may request information and presentations from state agencies regarding data privacy and cybersecurity within state agencies and may coordinate with the Colorado cybersecurity council created in section 24-33.5-1902. In addition, the committee may consider:

1. Whether state agencies are collecting or retaining data that exceeds what is necessaryand appropriate for such agencies to perform their functions;

2. Who has access to data, the extent of such access, and appropriate mechanisms toprotect sensitive data; and

3. Measures to protect data against unauthorized access, disclosure, use, modification,or destruction.

7. On or before November 1, 2013, and on November 1 of each year thereafter, thejudicial department, the department of law, the department of state, and the department of the treasury are encouraged to submit a written report to the committee that details all information technology that such department purchased or implemented.

8. A copy of any legislative measure introduced during any legislative session, regularor special, commencing on or after January 1, 2014, and determined by the speaker of the house of representatives or by the president of the senate to be dealing with information technology, data privacy, or cybersecurity shall be reviewed by the committee. The committee may also request that any legislative measure introduced during a legislative session, regular or special, and determined by the committee to be dealing with information technology, data privacy, or cybersecurity be reviewed by the committee. The committee may make advisory recommendations about such legislative measures to the house of representatives, the senate, the joint budget committee, the capital development committee, or to any committee of reference, as appropriate, considering any such legislative measure.

9. On or before the first day of the regular legislative session commencing on or afterJanuary 1, 2014, and on the first day of each regular legislative session thereafter, the joint technology committee shall submit a written report on the committee's findings and recommendations based on the committee's oversight pursuant to subsections (1) to (8) of this section to the joint budget committee. Such report may include:

1. Legislation recommended by the committee that addresses any of the committee'sfindings and recommendations based on the committee's oversight pursuant to subsections (1) to (8) of this section. Any such legislation is exempt from the five-bill limitation specified in rule 24 of the joint rules of the senate and the house of representatives; and

2. A report on the status of any information technology budget request that was previously approved for phasing in or for incremental implementation over a period exceeding one year.

10. Upon request, a state agency and the judicial department, the department of law, thedepartment of state, and the department of the treasury shall make available to the committee such data, reports, or information as are necessary for the performance of the committee's duties. If the committee requests such data, reports, or information, the state agency or judicial department, the department of law, the department of state, or the department of the treasury shall provide the requested information no later than November 1 of the calendar year in which the request is made.

11. (a) The committee shall study all information technology budget requests pursuant to rule 45 of the joint rules of the senate and the house of representatives, made by all state agencies and state institutions of higher education. For purposes of institutions of higher education, the committee shall only review state-funded information technology budget requests. The committee shall make determinations of the priority to be accorded to such information technology budget requests based upon information made available to the committee from any sources with respect to estimates of revenues available in a fiscal year for information technology budget requests. The committee shall make written reports setting forth its recommendations, prioritization, findings, and comments as to each information technology budget request reviewed pursuant to rule 45 of the joint rules of the senate and the house of representatives, including recommendations regarding the appropriate amount of an information technology budget request, and shall submit such written reports to the joint budget committee for supplemental information technology budget requests no later than January 15 of each year, and for new or amended information technology budget requests for the upcoming fiscal year no later than February 15 of each year.

2. The joint budget committee may seek the committee's review of any operating budget request for information technology.

3. The committee shall hold such hearings as may be necessary to study all informationtechnology budget requests pursuant to rule 45 of the joint rules of the senate and the house of representatives made by all state agencies and state institutions of higher education.

4. The legislative council staff shall assist and advise the committee by reviewing andsummarizing the information technology budget requests made by all state agencies and state institutions of higher education.

5. The committee has the duty to forecast the state's requirements for future informationtechnology budget requests as may be necessary or desirable for adequate presentation of the planning and implementation of such projects.

(12) Between adjournment sine die of the second regular session of the seventy-second general assembly and the first meeting in 2021 of the sales and use tax simplification task force created in section 39-26-802, the committee shall:

1. Seek regular updates from the office of information technology and the departmentof revenue regarding the development of the electronic sales and use tax simplification system described in Senate Bill 19-006, enacted in 2019;

2. Once the electronic sales and use tax simplification system described in Senate Bill19-006, enacted in 2019, is online, monitor and encourage participation by businesses and home rule municipalities; and

3. Seek regular updates from the office of information technology and the departmentof revenue regarding the purchase and development of a geographic information system (GIS) database to maintain jurisdictional boundaries of sales tax districts and to calculate appropriate sales and use tax rates for individual addresses for which the department of revenue received an appropriation in Senate Bill 19-006, enacted in 2019.

Source: L. 2013: Entire part added, (HB 13-1079), ch. 246, p. 1189, § 1, effective May

18. L. 2014: (9), (11)(a), and (11)(c) amended and (11) added, (HB 14-1395), ch. 309, pp. 1305, 1309, §§ 2, 10, effective May 31. L. 2017: (6.5) added and (8) amended, (SB 17-304), ch. 252, p. 1054, § 2, effective August 9. L. 2020: (12) added, (HB 20-1022), ch. 156, p. 671, § 4, effective June 29.