Bill Text: HI HB2582 | 2024 | Regular Session | Amended
Bill Title: Relating To Critical Infrastructure Information.
Spectrum: Partisan Bill (Democrat 1-0)
Status: (Engrossed) 2024-04-18 - Received notice of appointment of House conferees (Hse. Com. No. 760). [HB2582 Detail]
Download: Hawaii-2024-HB2582-Amended.html
|
HOUSE OF REPRESENTATIVES |
H.B. NO. |
2582 |
|
THIRTY-SECOND LEGISLATURE, 2024 |
H.D. 1 |
|
|
STATE OF HAWAII |
|
|
|
|
|
|
|
|
||
|
|
||
A BILL FOR AN ACT
RELATING TO CRITICAL INFRASTRUCTURE INFORMATION.
BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF HAWAII:
SECTION 1.
The legislature finds that in order to succeed in the legislated
responsibilities of the State and requirements of federal law regarding
protection of critical infrastructure under chapter 54, Hawaii Revised
Statutes, it is necessary to establish protections for critical infrastructure
information maintained by county boards of water supply. The legislature further finds that protection
of critical infrastructure information does not require confidentiality for
information created and made confidential by the county boards of water supply
for other purposes and that have historically been of public record, including
but not limited to the water service consumption data made public by section
92F-12, Hawaii Revised Statutes.
The purpose of this Act is to establish and specify protections for information that is required by federal law to be received or maintained by a county board of water supply for use regarding the security of critical infrastructure and protected systems, analysis, warning, interdependency study, recovery, reconstitution, or other informational purposes. This Act is not intended to alter the public's existing right to access information that is created for a purpose other than use in a federal or state critical infrastructure security and resilience program, even when the information is also used in and maintained by the critical infrastructure security and resilience program.
SECTION 2. Chapter 54, Hawaii Revised Statutes, is amended by adding a new section to part I to be appropriately designated and to read as follows:
"§54- Confidentiality of critical infrastructure
information. (a) Notwithstanding section 92F-11 and any other law
to the contrary, critical infrastructure information required by federal or state
law to be collected or maintained by a board in connection with a federal or
state critical infrastructure security and resilience program shall be
confidential and shall not be available to the public.
(b) Nothing
contained in this section shall be construed to alter existing rights to access
government records subject to chapter 92F created or maintained by a board or
other agency for a purpose other than a federal or state critical
infrastructure security and resilience program.
(c)
For the purposes of this section, "critical infrastructure information"
means information that is not customarily in the public domain and is related
to the security of critical infrastructure or protected systems, including
documents, records, or other information concerning:
(1) Actual,
potential, or threatened interference with, attack on, compromise of, or
incapacitation of critical infrastructure or protected systems by either
physical or computer-based attack or other similar conduct, including the
misuse of or unauthorized access to all types of communications and data
transmission systems, that violates federal, state, local, or tribal law, harms
interstate commerce of the United States, or threatens public health or safety;
(2) The ability of
any critical infrastructure or protected system to resist the interference,
attack, compromise, or incapacitation described under paragraph (1), including
any planned or past assessment, projection, or estimate of the vulnerability of
critical infrastructure or a protected system, including security testing, risk
evaluation thereto, risk-management planning, or risk audit; or
(3) Any planned or past operational problem or solution regarding critical infrastructure or protected systems, including repair, recovery, reconstruction, insurance, or continuity, to the extent it is related to the interference, attack, compromise, or incapacitation described under paragraph (1)."
SECTION 3. New statutory material is underscored.
SECTION 4. This Act shall take effect on July 1, 3000.
Report Title:
Critical Infrastructure Information; Water Systems
Description:
Requires critical infrastructure information required by federal or state law to be collected or maintained by a county board of water supply in connection with a federal or state critical infrastructure security and resilience program to be confidential and not available to the public. Effective 7/1/3000. (HD1)
The summary description
of legislation appearing on this page is for informational purposes only and is
not legislation or evidence of legislative intent.
