Revision: March 24, 2022, 10:55 a.m.
Rep. Edwards, Rock. 4
March 16, 2022
2022-1134h
07/04
Amendment to HB 1662-FN
Amend RSA 126-A:101, I as inserted by section 2 of the bill by replacing it with the following:
I. For each information technology system that contains personal information, the department shall conduct a written risk assessment and mitigation remediation plan in the form of a privacy impact assessment.
Amend the bill by replacing section 3 with the following:
3 Data Privacy and Information Technology Security Governance Board; Specialized Employees Authorized; Appropriation.
I. The department is hereby authorized to establish 2 full-time, permanent employees to support and conduct the required data privacy and information technology security assessments, as well as manage the implementation of mitigation efforts and other necessary updates.
II. The qualifications of the 2 employees shall include privacy certifications, information systems expertise, and project management and communications experience. Certifications may be deferred for up to 2 years post-hiring.
III. The 2 employees shall be classified, full time employees who shall work on assisting in implementing the objectives of the data privacy and information technology security governance board, conducting the privacy assessment and mitigation plan, and other, related data privacy and information technology security activities in the department of health and human services. The classification shall be business systems analyst II, labor grade 30, step 5. The sum of $137,480 in general funds for the fiscal year ending June 30, 2023 is hereby appropriated to the department of health and human services for the purpose of funding 2 business systems analyst II positions for the purpose of implementation of this act. The governor is authorized to draw a warrant for said amounts out of any money in the treasury not otherwise appropriated. The department is authorized to accept and expend matching federal funds for the purposes of this section without prior approval of the fiscal committee of the general court.
IV. The department is authorized to use contract support available from funds prior to July 1, 2023.