The act directs the chief information officer to convene an advisory group to study where personally identifiable information is stored by state agencies throughout Colorado, to study entities that have access to personally identifiable information stored by state agencies, and to determine the costs and processes necessary to centralize the storage and protection of personally identifiable information.
The advisory group consists of the members of the government data advisory board, a member who represents the attorney general's office, and members selected and appointed by the chief information officer who are personally identifiable information experts.
The advisory group shall report to the general assembly on or before January 1, 2023, with its findings and recommendations for legislation, if any. The advisory group is subject to repeal January 1, 2024.
(Note: This summary applies to this bill as enacted.)