Technology (Data Privacy)

This bill amends Idaho law to update the powers and duties of the Office of Information Technology Services, giving it greater authority to control and coordinate IT equipment purchases across state government departments. The legislation requires the office to conduct technical and financial analyses before approving IT acquisitions, allows for third-party broker assistance under specific ethical guidelines, and exempts smaller purchases under $15,000 from certain procurement rules. Key provisions include mandatory cybersecurity measures like multi-factor authentication for all state systems, requirements for criminal background checks on IT staff in specific roles, and directives to implement cybersecurity training and best practices across all state agencies. The bill also establishes the office's role in overseeing cybersecurity policies, managing federal IT funds, and coordinating public outreach efforts to protect personal information from cyber threats.