HB5399 101ST GENERAL ASSEMBLY

LRB101 16721 RJF 66110 b

101ST GENERAL ASSEMBLY
State of Illinois
2019 and 2020
HB5399

Introduced , by Rep. Amy Grant - Grant Wehrli

SYNOPSIS AS INTRODUCED:

20 ILCS 1375/5-30 new

Amends the Illinois Information Security Improvement Act. Provides that no State agency shall use any software platform developed, in whole or in part, by Kaspersky Lab or any entity of which Kaspersky Lab holds majority ownership. Provides that the Department of Innovation and Technology shall adopt rules as necessary to implement the provisions. Provides legislative findings.

A BILL FOR

AN ACT concerning State government.

Be it enacted by the People of the State of Illinois, represented in the General Assembly:

Section 1. Legislative Findings. The General hereby finds and declares that:

(1) The State of Illinois faces constantly evolving threats to its information technology systems. These treats can range from individuals to state or state-sponsored actors including, China, Iran, North Korea, and Russia. To counter this threat, the State of Illinois needs to contract with outside vendors to obtain the latest in cybersecurity software. In addition to being effective, it is equally important that the software obtained can be relied upon not to provide a hostile actor access to the State's information technology systems.

(2) Kaspersky Lab is a Russian cybersecurity company founded in 1997 by Eugene Kaspersky, and based in Moscow, Russia. The company's founder, Eugene Kaspersky, also has a history with Russian intelligence activities and was educated at the Technical Faculty of the KGB Higher School.

(3) Under Russian law, their Federal Security Service, the successor to the KGB, can compel a telecommunications business to install software to assist in its operations and can assign officers to work at a company.

(4) The federal Government has already prohibited Kaspersky Lab's products from being used by the federal Government in the 2018 National Defense Authorization Act. When 6 heads of United States intelligence agencies were asked during a United States Senate Committee on Intelligence hearing if they would install Kaspersky software on their own computers, all replied no.

(5) Because the federal government has determined that the use of software obtained from Kaspersky Lab would be a national security threat, use of Kaspersky Lab software would also be a threat to the security of the State of Illinois.

Section 5. The Illinois Information Security Improvement Act is amended by adding Section 5-30 as follows:

(20 ILCS 1375/5-30 new)

Sec. 5-30. Cybersecurity software prohibited. No State agency shall use any software platform developed, in whole or in part, by Kaspersky Lab or any entity of which Kaspersky Lab holds majority ownership. The Department shall adopt rules as necessary to implement this Section.