97TH GENERAL ASSEMBLY
State of Illinois
2011 and 2012
SB1862

 

Introduced 2/9/2011, by Sen. Don Harmon

 

SYNOPSIS AS INTRODUCED:
 
20 ILCS 450/20

    Amends the Data Security on State Computers Act. Provides that the Department of Central Management Services shall implement a policy of preparing hard drives or disks of surplus equipment for sale, donation, or transfer by overwriting the previously stored data on the drive or disk at least 3 (rather than 10) times. Effective immediately.


LRB097 08343 PJG 48470 b

FISCAL NOTE ACT MAY APPLY

 

 

A BILL FOR

 

SB1862LRB097 08343 PJG 48470 b

1    AN ACT concerning State government.
 
2    Be it enacted by the People of the State of Illinois,
3represented in the General Assembly:
 
4    Section 5. The Data Security on State Computers Act is
5amended by changing Section 20 as follows:
 
6    (20 ILCS 450/20)
7    Sec. 20. Establishment and implementation. The Data
8Security on State Computers Act is established to protect
9sensitive data stored on State-owned electronic data
10processing equipment to be (i) disposed of by sale, donation,
11or transfer or (ii) relinquished to a successor executive
12administration. This Act shall be administered by the
13Department or an authorized agency. The governing board of each
14public university in this State must implement and administer
15the provisions of this Act with respect to State-owned
16electronic data processing equipment utilized by the
17university. The Department or an authorized agency shall
18implement a policy to mandate that all hard drives of surplus
19electronic data processing equipment be cleared of all data and
20software before being prepared for sale, donation, or transfer
21by (i) overwriting the previously stored data on a drive or a
22disk at least 3 10 times and (ii) certifying in writing that
23the overwriting process has been completed by providing the

 

 

SB1862- 2 -LRB097 08343 PJG 48470 b

1following information: (1) the serial number of the computer or
2other surplus electronic data processing equipment; (2) the
3name of the overwriting software used; and (3) the name, date,
4and signature of the person performing the overwriting process.
5The head of each State agency shall establish a system for the
6protection and preservation of State data on State-owned
7electronic data processing equipment necessary for the
8continuity of government functions upon it being relinquished
9to a successor executive administration.
10    For purposes of this Act and any other State directive
11requiring the clearing of data and software from State-owned
12electronic data processing equipment prior to sale, donation,
13or transfer by the General Assembly or a public university in
14this State, the General Assembly or the governing board of the
15university shall have and maintain responsibility for the
16implementation and administration of the requirements for
17clearing State-owned electronic data processing equipment
18utilized by the General Assembly or the university.
19(Source: P.A. 96-45, eff. 7-15-09.)
 
20    Section 99. Effective date. This Act takes effect upon
21becoming law.