HB2416

THE CONTEXT: ADOA is responsible for government IT functions ( A. R.

WHAT THE BILL DID: The final vetoed version would require ADOA and AZDOHS, not more than 30 after the effective date, to develop Standards for Agencies that do the following: a) Require the removal of any Applications from state IT systems; b) Address the use of personal electronic devices by state employees and contractors of this state to conduct state business, including Application-enabled cell phones with remote access to an employee's state email account; and c) Identify sensitive locations, meetings or personnel within a state agency that could be exposed to covered applications-enable personal devices and develop restrictions on the use of personal cell phones, tablets or laptops in a designated sensitive location, require each budget unit to develop policies to support the implementation of IT standards and report the policy to ADOA and AZDOHS, and stipulate state employees and contractors may not: a) Conduct state business on any personal electronic device that has an Application; b) Use any communications equipment and services that are both of the following: i. Included on the Federal Communications Commission's covered communications equipment or services list; or ii. Used as a substantial or essential component of any system or as a critical technology as part of any system.

WHY IT MATTERED: The practical reason for this bill was to turn the Legislature's standard for electronic applications into an enforceable rule. It would require ADOA and AZDOHS, not more than 30 after the effective date, to develop Standards for Agencies that do the following: a) Require the removal of any Applications from state IT systems; b) Address the use of personal electronic devices by state employees and contractors of this state to conduct state business, including Application-enabled cell phones with remote access to an employee's state email account; and c) Identify sensitive locations, meetings or personnel within a state agency that could be exposed to covered applications-enable personal devices and develop restrictions on the use of personal cell phones, tablets or laptops in a designated sensitive location, and would also require each budget unit to develop policies to support the implementation of IT standards and report the policy to ADOA and AZDOHS, rather than leave the current rule unchanged.