By: Elkins H.B. No. 1861
 
 
 
A BILL TO BE ENTITLED
 
AN ACT
  relating to the confidentiality of certain information related to a
  computer security incident.
         BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS:
         SECTION 1.  Section 552.139, Government Code, is amended by
  amending Subsection (b) and adding Subsections (b-1) and (d) to
  read as follows:
         (b)  The following information is confidential:
               (1)  a computer network vulnerability report;
               (2)  any other assessment of the extent to which data
  processing operations, a computer, a computer program, network,
  system, or system interface, or software of a governmental body or
  of a contractor of a governmental body is vulnerable to
  unauthorized access or harm, including an assessment of the extent
  to which the governmental body's or contractor's electronically
  stored information containing sensitive or critical information is
  vulnerable to alteration, damage, erasure, or inappropriate use;
  [and]
               (3)  a photocopy or other copy of an identification
  badge issued to an official or employee of a governmental body; and
               (4)  information directly arising from a governmental
  body's routine efforts to prevent, detect, investigate, or mitigate
  a computer security incident, including information contained in or
  derived from an information security log.
         (b-1)  Subsection (b)(4) does not affect the notification
  requirements related to a breach of system security as defined by
  Section 521.053, Business & Commerce Code.
         (d)  A state agency shall redact from a contract posted on
  the agency's Internet website under Section
  2261.253 information
  that is made confidential by, or excepted from required public
  disclosure under, this section.  The redaction of information under
  this subsection does not exempt the information from the
  requirements of Section 552.021 or 552.221.
         SECTION 2.  Sections 552.139(b)(4) and (b-1), Government
  Code, as added by this Act, apply only to a request for public
  information received on or after the effective date of this Act. A
  request received before the effective date of this Act is governed
  by the law in effect when the request was received, and the former
  law is continued in effect for that purpose.
         SECTION 3.  This Act takes effect immediately if it receives
  a vote of two-thirds of all the members elected to each house, as
  provided by Section 39, Article III, Texas Constitution.  If this
  Act does not receive the vote necessary for immediate effect, this
  Act takes effect September 1, 2017.