Sen. Don Harmon

Filed: 3/8/2011

 

 


 

 


 
09700SB1862sam001LRB097 08343 PJG 52114 a

1
AMENDMENT TO SENATE BILL 1862

2    AMENDMENT NO. ______. Amend Senate Bill 1862 by replacing
3everything after the enacting clause with the following:
 
4    "Section 5. The Data Security on State Computers Act is
5amended by changing Section 20 as follows:
 
6    (20 ILCS 450/20)
7    Sec. 20. Establishment and implementation. The Data
8Security on State Computers Act is established to protect
9sensitive data stored on State-owned electronic data
10processing equipment to be (i) disposed of by sale, donation,
11or transfer or (ii) relinquished to a successor executive
12administration. This Act shall be administered by the
13Department or an authorized agency. The governing board of each
14public university in this State must implement and administer
15the provisions of this Act with respect to State-owned
16electronic data processing equipment utilized by the

 

 

09700SB1862sam001- 2 -LRB097 08343 PJG 52114 a

1university. The Department or an authorized agency shall
2implement a policy to mandate that all hard drives of surplus
3electronic data processing equipment be erased, wiped,
4sanitized, or destroyed in a manner that prevents retrieval of
5sensitive cleared of all data and software before being sold,
6donated, or transferred prepared for sale, donation, or
7transfer by (i) overwriting the previously stored data on a
8drive or a disk at least 3 10 times or physically destroying
9the hard drive and (ii) certifying in writing that the
10overwriting process has been completed by providing the
11following information: (1) the serial number of the computer or
12other surplus electronic data processing equipment; (2) the
13name of the overwriting software or physical destruction
14process used; and (3) the name, date, and signature of the
15person performing the overwriting or destruction process. The
16head of each State agency shall establish a system for the
17protection and preservation of State data on State-owned
18electronic data processing equipment necessary for the
19continuity of government functions upon it being relinquished
20to a successor executive administration.
21    For purposes of this Act and any other State directive
22requiring the clearing of data and software from State-owned
23electronic data processing equipment prior to sale, donation,
24or transfer by the General Assembly or a public university in
25this State, the General Assembly or the governing board of the
26university shall have and maintain responsibility for the

 

 

09700SB1862sam001- 3 -LRB097 08343 PJG 52114 a

1implementation and administration of the requirements for
2clearing State-owned electronic data processing equipment
3utilized by the General Assembly or the university.
4(Source: P.A. 96-45, eff. 7-15-09.)
 
5    Section 99. Effective date. This Act takes effect upon
6becoming law.".