Catalog of Enterprise Systems

Senate Bill 272

On October 11, 2015 Senate Bill 272 was approved. The bill amends the California Public Records Act with government code section 6270.5 requiring local agencies to provide upon request and to post on the agency�s website a catalog of enterprise systems and to update it annually. The bill becomes effective July 1, 2016.

Requirements Outlined in California Government Code Section 6270.5 (SB 272)

The catalog of enterprise systems shall be publicly available upon request
The catalog of enterprise systems shall be posted in a prominent location on the agency�s website
The catalog of enterprise systems shall contain for each enterprise system:

Current system vendor
Current system product
A brief statement of the system's purpose
A general description of categories or types of data
The department that serves as the system's primary custodian
How frequently system data is collected
How frequently system data is updated

Enterprise System

"Enterprise system" means a software application or computer system that collects, stores, exchanges, and analyzes information that the agency uses that is both of the following:

A multi-departmental system or a system that contains information collected about the public.
A system of record.

"System of record" means a system that serves as an original source of data within an agency.

An Enterprise System shall not include any of the following:

Information technology security systems, including firewalls and other cybersecurity systems.
Physical access control systems, employee identification management systems, video monitoring, and other physical control systems.
Infrastructure and mechanical control systems, including those that control or manage street lights, electrical, natural gas, or water or sewer functions.
Systems related to 911 dispatch and operation or emergency services.
Systems that would be restricted from disclosure pursuant to Section 6254.19.
The specific records that the information technology system collects, stores, exchanges, or analyzes.

Nondisclosure

If the public interest served by not disclosing the information clearly outweighs the public interest served by disclosure of the record, the local agency may instead provide a system name, brief title, or identifier of the system.