SB222: Commonwealth information security; definitions, requirements.

Legislative Summary

Commonwealth information security requirements. Exempts cybersecurity information, defined in the bill, from the provisions of the Virginia Freedom of Information Act and the Government Data Collection and Dissemination Practices Act while in possession of the Virginia Information Technologies Agency (VITA). The bill requires VITA to keep such cybersecurity information confidential unless the Chief Information Officer or his designee authorizes publication or disclosure of reports or aggregate cybersecurity information. Commonwealth information security requirements. Exempts cybersecurity information, defined in the bill, from the provisions of the Virginia Freedom of Information Act and the Government Data Collection and Dissemination Practices Act while in possession of the Virginia Information Technologies Agency (VITA). The bill requires VITA to keep such cybersecurity information confidential unless the Chief Information Officer or his designee authorizes publication or disclosure of reports or aggregate cybersecurity information.