Iowa Senate Bill SF2473

Iowa 2025-2026 Regular Session

• Introduced: 3/24/26

Caption

A bill for an act relating to matters under the purview of the department of management, and including effective date and applicability provisions.(Formerly SF 2141, SSB 3028.)

Impact

A significant aspect of SF2473 is the increase in the frequency of national criminal history checks for individuals working within DOM or related entities, shifting the requirement from every ten years to every five. This change aims to bolster security measures within the state's technology operations. Provisions that govern the inclusion of specific terms in IT contracts are also outlined, declaring many burdensome terms void, such as those requiring the state to assume liabilities or to accept unfavorable arbitration agreements.

Summary

Senate File 2473 focuses on various matters under the purview of the Department of Management (DOM) and introduces several key changes affecting state data management and cybersecurity measures. The bill mandates the DOM to provide a prioritized list of proposed technology projects to the governor for budget recommendations and updates on ongoing projects. Additionally, it amends existing appropriations, requiring funds from the technology reinvestment fund to be available for two years post-appropriation, enhancing the capacity for state-level technology initiatives.

Contention

During discussions on SF2473, some notable points of contention arose around the balance between necessary cybersecurity measures and data privacy. Notably, the bill attempts to limit vendor liability in IT contracts while asserting state ownership of all associated data. Opponents of such provisions argue it could lead to discrepancies in data handling and security obligations, raising concerns over the adequacy of the protections provided against cybersecurity threats. Ensuring robust cybersecurity while protecting state data privacy remains a central theme in the legislative discourse surrounding this bill.