Enterprise Systems Catalog
On October 11, 2015, Governor Brown signed SB272 into law. This bill added Section 6270.5 to the California Public Records Act and requires local agencies to publish a list of "enterprise" systems. These are systems that are used across multiple departments or that contain information collected about the public and are systems that serve as original sources of data within an agency. SB 272 requires local agencies (excluding school districts) to create catalogs of all enterprise systems that store information about the public, and to post this catalog on their websites, if they have websites. This law applies to all California special districts, cities and counties, and compliance is required by July 1, 2016.
Section 6270.5 defines an enterprise system as a software application or computer system that collects, stores, exchanges, and analyzes information that the agency uses that is a multi-departmental system or system that contains information collected about the public and a system of record. A system of record means a system that serves as an original source of data within an agency.
For each enterprise system included in the catalog list, agencies must disclose:
- Current system vendor
- Current system product
- The purpose of the system
- What kind of data is stored in it
- The department that serves as the system's primary custodian
- How frequently system data is collected
- How frequently system data is updated
This catalog will be reviewed and updated on an annual basis by July 1 of each year.
What is Excluded
Enterprise systems do not include cybersecurity systems, infrastructure and mechanical control systems, or information that would reveal vulnerabilities to, or otherwise increase the potential for an attack on, a public agency's IT system. Additionally, section 6270.5 does not automatically require disclosure of the specific records that the IT systems collect, store, exchange or analyze, however, the Act's other provisions pertaining to disclosure of such records still apply.Read the full text of SB 272.