Florida Senate - 2016 COMMITTEE AMENDMENT Bill No. SB 776 Ì6468320Î646832 LEGISLATIVE ACTION Senate . House Comm: RCS . 02/02/2016 . . . . ————————————————————————————————————————————————————————————————— ————————————————————————————————————————————————————————————————— The Committee on Communications, Energy, and Public Utilities (Bradley) recommended the following: 1 Senate Amendment (with title amendment) 2 3 Delete everything after the enacting clause 4 and insert: 5 Section 1. Subsection (15) is added to section 119.011, 6 Florida Statutes, to read: 7 119.011 Definitions.—As used in this chapter, the term: 8 (15) “Utility” means a person or entity that provides 9 electricity, natural gas, telecommunications, water, chilled 10 water, reuse water, or wastewater. 11 Section 2. Subsection (5) is added to section 119.0713, 12 Florida Statutes, to read: 13 119.0713 Local government agency exemptions from inspection 14 or copying of public records.— 15 (5)(a) The following information held by a utility owned or 16 operated by a unit of local government is exempt from s. 17 119.07(1) and s. 24(a), Art. I of the State Constitution: 18 1. Information related to the security of the technology, 19 processes, or practices of a utility owned or operated by a unit 20 of local government that are designed to protect the utility’s 21 networks, computers, programs, and data from attack, damage, or 22 unauthorized access, which information, if disclosed, would 23 facilitate the alteration, disclosure, or destruction of such 24 data or information technology resources. 25 2. Information, whether in physical or virtual form, 26 related to the security of existing or proposed information 27 technology systems or industrial control technology systems of a 28 utility owned or operated by a unit of local government, which, 29 if disclosed, would facilitate unauthorized access to, and 30 alteration or destruction of, such systems in a manner that 31 would adversely impact the safe and reliable operation of the 32 systems and the utility. 33 (b) This exemption applies to such information obtained 34 before, on, or after the effective date of this exemption. 35 (c) This subsection is subject to the Open Government 36 Sunset Review Act in accordance with s. 119.15 and shall stand 37 repealed on October 2, 2021, unless reviewed and saved from 38 repeal through reenactment by the Legislature. 39 Section 3. (1) The Legislature finds that, as utility 40 system infrastructure becomes more connected and integrated 41 through information and communications technology, the exposure 42 to damage from attacks through such technology continues to 43 grow. These attacks may result in the disruption of utility 44 services and damage to utility systems. Maintaining safe and 45 reliable utility systems is vital to protecting the public 46 health and safety and ensuring the economic well-being of the 47 state. Accordingly, many utilities have adopted technologies, 48 processes, and practices designed to secure data, information 49 technology systems, and industrial control technology systems. 50 Disclosure of sensitive information related to these security 51 measures could result in the identification of vulnerabilities 52 that allow a security breach that damages utility systems and 53 disrupts the safe and reliable operation of such systems, 54 adversely impacting the public health and safety and the 55 economic well-being of the state. Because of the interconnected 56 nature of utility systems, a security breach may also impact 57 national security concerns. As a result, the Legislature finds 58 that the public and private harm in disclosing the information 59 made exempt by this act outweighs any public benefit derived 60 from disclosure of such information. The protection of 61 information made exempt by this act will ensure that utilities 62 have greater safeguards to protect against security threats and 63 will bolster efforts to develop more resilient information 64 technology systems and industrial control technology systems. 65 (2) The Legislature finds that it is a public necessity 66 that the following information relating to a utility owned or 67 operated by a unit of local government be exempt from s. 68 119.07(1), Florida Statutes, and s. 24(a), Article I of the 69 State Constitution: 70 (a) Information related to the security of the technology, 71 processes, or practices of a utility owned or operated by a unit 72 of local government which are designed to protect the utility’s 73 networks, computers, programs, and data from attack, damage, or 74 unauthorized access, which information, if disclosed, would 75 facilitate the alteration, disclosure, or destruction of such 76 data or information technology resources. 77 (b) Information, whether in physical or virtual form, 78 related to the security of existing or proposed information 79 technology systems or industrial control technology systems of a 80 utility owned or operated by a unit of local government, which, 81 if disclosed, would facilitate unauthorized access to, and 82 alteration or destruction of, such systems in a manner that 83 would adversely impact the safe and reliable operation of the 84 systems and the utility. 85 Section 4. This act shall take effect upon becoming a law. 86 87 ================= T I T L E A M E N D M E N T ================ 88 And the title is amended as follows: 89 Delete everything before the enacting clause 90 and insert: 91 A bill to be entitled 92 An act relating to public records; amending s. 93 119.011, F.S.; defining the term “utility”; amending 94 s. 119.0713, F.S.; providing an exemption from public 95 records requirements for information related to the 96 security of information technology systems or 97 industrial control technology systems of a utility 98 owned or operated by a unit of local government; 99 providing for retroactive application; providing for 100 future legislative review and repeal of the exemption; 101 providing a statement of public necessity; providing 102 an effective date.