Bill Caption

Relating to state agency and local government security incident procedures.

Fiscal Notes

No significant fiscal implication to the State is anticipated.

Bill Analysis

HB 4395 would define a governmental security incident as an unauthorized exposure to sensitive personal information.

A state agency or local government that owns or maintains computerized data of sensitive information that experiences a security incident would have 48 hours to notify the Department of Information Resources (or the Secretary of State, if the data breach involves election data). After the security incident is resolved, the state agency or local government would have 10 business days to notify the department with the details of the event and an analysis of the cause of the event.

Vote Recommendation Notes

Texas Action is neutral on HB 4395 which does not appear to affect our liberty principles as it is procedural or administrative in nature.