96TH GENERAL ASSEMBLY
State of Illinois
2009 and 2010
SB3156

 

Introduced 2/9/2010, by Sen. Don Harmon

 

SYNOPSIS AS INTRODUCED:
 
20 ILCS 450/20

    Amends the Data Security on State Computers Act. Requires overwriting of data on State electronic data processing equipment at least 3 times (now, at least 10 times) before the equipment is sold, donated, transferred, or relinquished. Effective immediately.


LRB096 16583 JAM 31857 b

 

 

A BILL FOR

 

SB3156 LRB096 16583 JAM 31857 b

1     AN ACT concerning State government.
 
2     Be it enacted by the People of the State of Illinois,
3 represented in the General Assembly:
 
4     Section 5. The Data Security on State Computers Act is
5 amended by changing Section 20 as follows:
 
6     (20 ILCS 450/20)
7     Sec. 20. Establishment and implementation. The Data
8 Security on State Computers Act is established to protect
9 sensitive data stored on State-owned electronic data
10 processing equipment to be (i) disposed of by sale, donation,
11 or transfer or (ii) relinquished to a successor executive
12 administration. This Act shall be administered by the
13 Department or an authorized agency. The governing board of each
14 public university in this State must implement and administer
15 the provisions of this Act with respect to State-owned
16 electronic data processing equipment utilized by the
17 university. The Department or an authorized agency shall
18 implement a policy to mandate that all hard drives of surplus
19 electronic data processing equipment be cleared of all data and
20 software before being prepared for sale, donation, or transfer
21 by (i) overwriting the previously stored data on a drive or a
22 disk at least 3 10 times and (ii) certifying in writing that
23 the overwriting process has been completed by providing the

 

 

SB3156 - 2 - LRB096 16583 JAM 31857 b

1 following information: (1) the serial number of the computer or
2 other surplus electronic data processing equipment; (2) the
3 name of the overwriting software used; and (3) the name, date,
4 and signature of the person performing the overwriting process.
5 The head of each State agency shall establish a system for the
6 protection and preservation of State data on State-owned
7 electronic data processing equipment necessary for the
8 continuity of government functions upon it being relinquished
9 to a successor executive administration.
10     For purposes of this Act and any other State directive
11 requiring the clearing of data and software from State-owned
12 electronic data processing equipment prior to sale, donation,
13 or transfer by the General Assembly or a public university in
14 this State, the General Assembly or the governing board of the
15 university shall have and maintain responsibility for the
16 implementation and administration of the requirements for
17 clearing State-owned electronic data processing equipment
18 utilized by the General Assembly or the university.
19 (Source: P.A. 96-45, eff. 7-15-09.)
 
20     Section 99. Effective date. This Act takes effect upon
21 becoming law.