Bill
Bill > HF2499
IA HF2499
IA HF2499A bill for an act relating to matters under the purview of the department of management, and including effective date and applicability provisions.(Formerly HSB 584.)
summary
Introduced
02/16/2026
02/16/2026
In Committee
Crossed Over
Passed
Dead
Introduced Session
91st General Assembly
Bill Summary
This bill relates to matters under the purview of the department of management (DOM). The bill strikes current law providing for the use of moneys in the technology reinvestment fund for certain technology projects and instead requires DOM to use moneys in the fund for technology projects using factors set forth in the bill. The bill requires DOM to provide a prioritized list of proposed projects to the governor, who must use the list to develop a budgetary recommendation to the general assembly, and to report completed and ongoing projects to the general assembly annually. The bill strikes the standing appropriations to the technology reinvestment fund and provides that any moneys in the fund shall remain available for two years after the appropriation is made. The bill increases the frequency at which a person performing work for DOM or an individual on the information technology staff of a supported entity may be subject to a national criminal history check through the federal bureau of investigation from at least once every 10 years to every 5 years. The bill prohibits the inclusion of certain provisions in information technology contracts and declares those provisions void if present in such contracts. The bill also provides that such contracts are deemed to include provisions relating to state data, requiring the contract to be governed by Iowa law, and requiring litigation related to the contract to be brought and maintained in a state or federal court sitting in Iowa. The bill authorizes the director of DOM to include limitations of vendor liability in information technology goods and services contracts, but sets forth prohibited terms in such limitations of liability. The bill makes all communication concerning cybersecurity between the chief information security officer and other entities confidential and allows the communications to be released only for specific purposes. Under current law, the department of health and human services serves as the Iowa statistical analysis center and maintains an integrated information system for data sharing among federal, state, and local governments. The bill transfers these powers and duties to DOM and grants DOM access to criminal justice information other than intelligence data and peace officer investigative reports maintained by the department of public safety. DOM is authorized to provide data analysis and reporting on issues that may affect the state’s correctional population and various subgroups of the population, to maintain a multiagency information system to track the progress of juveniles and adults charged with a criminal offense through state and local agencies and programs, and to count and track decision points for individuals in the juvenile justice system, child welfare system, and court system. If DOM lacks sufficient moneys to perform the authorized tasks of the Iowa statistical analysis center, the bill allows DOM to determine which, if any, to implement. The bill states that DOM is not the lawful custodian under Code chapter 22 (open records) for records DOM maintains in DOM’s information technology capacity for other state entities as an automated data processing unit of government or when held by DOM solely for storage for another department or establishment. The bill requires DOM to deny requests for information for which DOM is not the lawful custodian, to provide assistance to the lawful custodian to comply with production obligations, and to cooperate in any efforts to resist associated subpoenas.
AI Summary
This bill makes several changes related to the Department of Management (DOM), including how funds are used for technology projects, requiring DOM to prioritize projects based on specific criteria and submit a prioritized list to the governor for budgetary recommendations, and mandating annual reports on completed and ongoing projects to the general assembly. It also changes the frequency of national criminal history checks for individuals working with DOM or on information technology staff from every ten years to every five years, and prohibits certain provisions in information technology contracts, deeming them void if present, while also requiring specific terms related to state data, governing law, and litigation venue. Furthermore, the bill allows the director of DOM to limit vendor liability in technology contracts but sets forth prohibited terms for such limitations, and makes communications concerning cybersecurity with the chief information security officer confidential, with limited exceptions for release. Crucially, the bill transfers the duties of the Iowa statistical analysis center, which collects and shares data among government entities, from the Department of Health and Human Services to DOM, granting DOM access to criminal justice information for research and analysis, and authorizing DOM to maintain systems to track individuals through the criminal justice and child welfare systems, with the ability to scale back these functions if funding is insufficient. Finally, the bill clarifies that DOM is not the lawful custodian of records it maintains for other state entities as an automated data processing unit or for storage purposes, and outlines procedures for handling requests and subpoenas for such records.
Sponsors (0)
No sponsors listed
Other Sponsors (1)
State Government (House)
Last Action
Introduced, placed on calendar. H.J. 299. (on 02/16/2026)
Official Document
bill text
bill summary
Loading...
bill summary
Loading...
bill summary
| Document Type | Source Location |
|---|---|
| State Bill Page | https://www.legis.iowa.gov/legislation/BillBook?ga=91&ba=HF2499 |
| BillText | https://www.legis.iowa.gov/docs/publications/LGI/91/attachments/HF2499.html |
Loading...