By Jack Brammer
FRANKFORT — The state House signed off Thursday on a bill that would require state and local government agencies to notify citizens if their personal information on government computers is exposed or hijacked.
House Bill 5, backed by Auditor Adam Edelen, got unanimous approval in the House on the chamber’s consent calendar.
The legislation, co-sponsored by Democratic Rep. Denny Butler of Louisville and Republican Sal Santoro of Florence, requires state and local government agencies to notify individuals affected by a data breach within 35 days of the incident.
Notification must be provided on the agency’s website and to the media. Individuals affected must be notified by phone, mail or email.
Law enforcement, regulatory agencies and the auditor’s office must be notified within 24 hours. If a breach affects more than 1,000 individuals, the Finance Cabinet and national consumer reporting agencies must be notified.
The bill also contains provisions to strengthen cyber security protections. It calls for agencies to encrypt personal information and calls on the Commonwealth Office of Technology to establish cyber security training for agencies.
Kentucky is one of four states that do not have a law requiring government to notify citizens of a breach.
In a release, Edelen called HB 5 “a common-sense measure to protect citizens’ data at a time when cyber security has become one of the most critical public protection issues.
“I applaud the House for taking swift action and hope the Senate follows suit.”
The measure now goes to the Senate for its consideration.
Supporters of the legislation include the Northern Kentucky Chamber of Commerce, the Commonwealth Office of Technology, Kentucky League of Cities, Kentucky Association of Counties, Kentucky State Police, Kentucky Press Association and various state agencies.
The House also approved on a 97-0 vote and sent to the Senate Thursday House Joint Resolution 48, sponsored by Rep. Derrick Graham, D-Frankfort. It directs the office of secretary of state to conduct a study of civic education and engagement in the state by Dec. 1.