ENTERPRISE SYSTEM CATALOG - SENATE BILL 272

Approved on October 11, 2015, Senate Bill 272 adds a section to the California Public Records Act which requires local agencies to create a catalog of Enterprise Systems by July 1, 2016 with annual updates.

Enterprise Systems
An Enterprise System is a software application or computer system that collects, stores, exchanges, and analyzes information that the agency uses that is both of the following:

• A multi-departmental system or a system that contains information collected about the public.
• A system that serves as an original source of data within an agency.

An Enterprise System does not include any of the following:

• Information Technology security systems, including firewalls and other cybersecurity systems.
• Physical access control systems, employee identification management systems, video monitoring and other physical control systems.
• Infrastructure and mechanical control systems, including those that control or manage street lights, electrical, natural gas or water or sewer functions.
• Systems related to 911 dispatch and operation or emergency services.
• Systems that would be restricted from disclosure by Section 6254.19.
• The specific records that the information technology system collects, stores, exchanges or analyzes.

Requirements
The requirements of Senate Bill 272 are as follows:

1. Create a catalog of Enterprise System(s) used by the local agency by the following criteria:

• Current System Vendor
• Current System Product
• System Purpose
• Description of Categories or Data Types
• Department that is the Prime Custodian of the Data
• System Data Collection Frequency
• System Date Update Frequency

2. Make the Catalog publicly available upon request.

3. Post the Catalog in a prominent location on the local agency's website

Exception
It the public interest served by not disclosing the information described clearly outweighs the public interest served by disclosure, the local agency may instead provide a system name, brief title, or identifier of the system.

SB272 Compliance Table