Section 2-3-1704 - Powers and duties of the joint technology committee(1) The committee oversees the office of information technology, including but not limited to: (a) A review of the state of information technology;(b) Any general information technology needs;(c) Any anticipated short-term or long-term changes for information technology;(e) The office of information technology's responsibilities related to the geographic information system as set forth in section 24-37.5-103 (4).(2) The committee oversees the chief information security officer and his or her duties as established in part 4 of article 37.5 of title 24, C.R.S.(5) The committee may review the actions of the statewide internet portal authority created in section 24-37.7-102, C.R.S.(6)(a) The committee oversees a state agency regarding any authority that has been delegated to the state agency pursuant to section 24-37.5-105.4.(b) On or before November 1, 2021, and on November 1 of each year thereafter, the office of information technology shall submit a written report to the committee regarding any delegation of authority to the state agency pursuant to section 24-37.5-105.4. The report shall include a summary of the information included in the written delegation agreement between the state agency and the office of information technology pursuant to section 24-37.5-105.4 (3).(6.5) The committee may request information and presentations from state agencies regarding data privacy and cybersecurity within state agencies and may coordinate with the Colorado cybersecurity council created in section 24-33.5-1902. In addition, the committee may consider:(a) Whether state agencies are collecting or retaining data that exceeds what is necessary and appropriate for such agencies to perform their functions;(b) Who has access to data, the extent of such access, and appropriate mechanisms to protect sensitive data; and(c) Measures to protect data against unauthorized access, disclosure, use, modification, or destruction.(7) On or before November 1, 2013, and on November 1 of each year thereafter, the judicial department, the department of law, the department of state, and the department of the treasury shall submit a written report to the committee that details all information technology that such department purchased or implemented.(8) A copy of any legislative measure introduced during any legislative session, regular or special, commencing on or after January 1, 2014, and determined by the speaker of the house of representatives or by the president of the senate to be dealing with information technology, data privacy, or cybersecurity shall be reviewed by the committee. The committee may also request that any legislative measure introduced during a legislative session, regular or special, and determined by the committee to be dealing with information technology, data privacy, or cybersecurity be reviewed by the committee. The committee may make advisory recommendations about such legislative measures to the house of representatives, the senate, the joint budget committee, the capital development committee, or to any committee of reference, as appropriate, considering any such legislative measure.(9) On or before the first day of the regular legislative session commencing on or after January 1, 2014, and on the first day of each regular legislative session thereafter, the joint technology committee shall submit a written report on the committee's findings and recommendations based on the committee's oversight pursuant to subsections (1) to (8) of this section to the joint budget committee. Such report may include: (a) Legislation recommended by the committee that addresses any of the committee's findings and recommendations based on the committee's oversight pursuant to subsections (1) to (8) of this section. Any such legislation is exempt from the five-bill limitation specified in rule 24 of the joint rules of the senate and the house of representatives; and(b) A report on the status of any information technology budget request that was previously approved for phasing in or for incremental implementation over a period exceeding one year.(10) Upon request, a state agency and the judicial department, the department of law, the department of state, and the department of the treasury shall make available to the committee such data, reports, or information as are necessary for the performance of the committee's duties. If the committee requests such data, reports, or information, the state agency or judicial department, the department of law, the department of state, or the department of the treasury shall provide the requested information no later than November 1 of the calendar year in which the request is made.(11)(a) The committee shall study all information technology budget requests pursuant to rule 45 of the joint rules of the senate and the house of representatives, made by all state agencies and state institutions of higher education. For purposes of institutions of higher education, the committee shall only review state-funded information technology budget requests. The committee shall make determinations of the priority to be accorded to such information technology budget requests based upon information made available to the committee from any sources with respect to estimates of revenues available in a fiscal year for information technology budget requests. The committee shall make written reports setting forth its recommendations, prioritization, findings, and comments as to each information technology budget request reviewed pursuant to rule 45 of the joint rules of the senate and the house of representatives, including recommendations regarding the appropriate amount of an information technology budget request, and shall submit such written reports to the joint budget committee for supplemental information technology budget requests no later than January 15 of each year, and for new or amended information technology budget requests for the upcoming fiscal year no later than February 15 of each year.(b) The joint budget committee may seek the committee's review of any operating budget request for information technology, including a request for which the general assembly may make an appropriation pursuant to section 24-75-302 (3.7)(b).(c) The committee shall hold such hearings as may be necessary to study all information technology budget requests pursuant to rule 45 of the joint rules of the senate and the house of representatives made by all state agencies and state institutions of higher education.(d) The legislative council staff shall assist and advise the committee by reviewing and summarizing the information technology budget requests made by all state agencies and state institutions of higher education.(e) The committee shall oversee information technology strategy through the review of state agency information technology plans.(f) The committee shall oversee any information technology project for which the general assembly makes an appropriation pursuant to section 24-75-302 (3.7)(b). The legislative or judicial department, the department of law, the department of state, or the department of the treasury, as applicable, shall submit to the committee any data, reports, or information requested by the committee or otherwise necessary for the committee to perform its duties pursuant to this subsection (11)(f).(12) Between adjournment sine die of the second regular session of the seventy-second general assembly and the first meeting in 2021 of the sales and use tax simplification task force created in section 39-26-802, the committee shall: (a) Seek regular updates from the office of information technology and the department of revenue regarding the development of the electronic sales and use tax simplification system described in Senate Bill 19-006, enacted in 2019;(b) Once the electronic sales and use tax simplification system described in Senate Bill 19-006, enacted in 2019, is online, monitor and encourage participation by businesses and home rule municipalities; and(c) Seek regular updates from the office of information technology and the department of revenue regarding the purchase and development of a geographic information system (GIS) database to maintain jurisdictional boundaries of sales tax districts and to calculate appropriate sales and use tax rates for individual addresses for which the department of revenue received an appropriation in Senate Bill 19-006, enacted in 2019.Amended by 2023 Ch. 7,§ 1, eff. 3/3/2023.Amended by 2022 Ch. 479, § 2, eff. 7/1/2023.Amended by 2021 Ch. 211, § 2, eff. 9/7/2021.Amended by 2020 Ch. 156, § 4, eff. 6/29/2020.Amended by 2017 Ch. 252, § 2, eff. 8/9/2017.Amended by 2014 Ch. 309,§ 10, eff. 5/31/2014.Amended by 2014 Ch. 309,§ 2, eff. 5/31/2014.Added by 2013 Ch. 246, § 1, eff. 5/18/2013.