SB1862 EngrossedLRB097 08343 PJG 48470 b

1    AN ACT concerning State government.
 
2    Be it enacted by the People of the State of Illinois,
3represented in the General Assembly:
 
4    Section 5. The Data Security on State Computers Act is
5amended by changing Section 20 as follows:
 
6    (20 ILCS 450/20)
7    Sec. 20. Establishment and implementation. The Data
8Security on State Computers Act is established to protect
9sensitive data stored on State-owned electronic data
10processing equipment to be (i) disposed of by sale, donation,
11or transfer or (ii) relinquished to a successor executive
12administration. This Act shall be administered by the
13Department or an authorized agency. The governing board of each
14public university in this State must implement and administer
15the provisions of this Act with respect to State-owned
16electronic data processing equipment utilized by the
17university. The Department or an authorized agency shall
18implement a policy to mandate that all hard drives of surplus
19electronic data processing equipment be erased, wiped,
20sanitized, or destroyed in a manner that prevents retrieval of
21sensitive cleared of all data and software before being sold,
22donated, or transferred prepared for sale, donation, or
23transfer by (i) overwriting the previously stored data on a

 

 

SB1862 Engrossed- 2 -LRB097 08343 PJG 48470 b

1drive or a disk at least 3 10 times or physically destroying
2the hard drive and (ii) certifying in writing that the
3overwriting process has been completed by providing the
4following information: (1) the serial number of the computer or
5other surplus electronic data processing equipment; (2) the
6name of the overwriting software or physical destruction
7process used; and (3) the name, date, and signature of the
8person performing the overwriting or destruction process. The
9head of each State agency shall establish a system for the
10protection and preservation of State data on State-owned
11electronic data processing equipment necessary for the
12continuity of government functions upon it being relinquished
13to a successor executive administration.
14    For purposes of this Act and any other State directive
15requiring the clearing of data and software from State-owned
16electronic data processing equipment prior to sale, donation,
17or transfer by the General Assembly or a public university in
18this State, the General Assembly or the governing board of the
19university shall have and maintain responsibility for the
20implementation and administration of the requirements for
21clearing State-owned electronic data processing equipment
22utilized by the General Assembly or the university.
23(Source: P.A. 96-45, eff. 7-15-09.)
 
24    Section 99. Effective date. This Act takes effect upon
25becoming law.