A bill for an act relating to matters under the purview of the department of management, making appropriations, and including applicability provisions.(See SF 307, SF 630.)
SSB1083 is a broad Department of Management bill that makes several changes to Iowa’s technology, contracting, confidentiality, and criminal-justice data systems. It updates the confidentiality rules for budget-related transmittals to the department until the governor submits the budget, revises the Technology Reinvestment Fund to direct funding toward state information technology projects using new prioritization criteria, and requires annual reporting on funded projects. It also shortens the interval for FBI national criminal history checks for certain department and supported-entity personnel from every 10 years to every 5 years.
The bill adds a new framework for state information technology contracts by voiding a long list of prohibited terms and requiring certain terms, such as Iowa governing law and Polk County venue, to be included. It also authorizes limited vendor-liability caps while invalidating liability waivers for cybersecurity incidents, gross negligence, intentional misconduct, and similar matters. In addition, it makes communications with the chief information security officer confidential, with narrow exceptions for threat response, law enforcement, and confidential briefings to elected officials.
A major structural change in the bill is the transfer of Iowa statistical analysis center functions from the Department of Health and Human Services to the Department of Management. The bill gives the department access, for research and evaluation purposes, to a wide range of criminal justice, juvenile, child welfare, and corrections data, and authorizes it to maintain integrated and multiagency information systems to track cases and outcomes across agencies. It also repeals several existing statutory provisions tied to the prior arrangement and updates multiple cross-references in the juvenile records statutes.
The overall sentiment reflected in the bill text is managerial and reform-oriented, with an emphasis on centralizing oversight, improving cybersecurity, strengthening contract protections for the state, and expanding data-analysis capacity. Because there are no committee transcripts or recorded votes provided, there is no direct evidence of support or opposition from legislators in the available materials. The bill’s structure suggests a technocratic, administrative approach rather than a partisan policy debate.
The main points of contention likely involve confidentiality and data access. The bill expands secrecy around budget transmittals and cybersecurity communications, limits open-records access for certain records held by the Department of Management, and shifts sensitive criminal-justice data functions to a different agency. Potential concerns could come from transparency advocates, vendors affected by the contract restrictions, and privacy stakeholders worried about broader data sharing and centralized control over juvenile and criminal justice information.
The bill would amend multiple sections of the Iowa Code governing the Department of Management, technology funding, background checks, contract terms, confidentiality, and criminal-justice data administration. It creates new statutory sections that restrict certain IT contract provisions, require Iowa law and Polk County venue, authorize limited vendor-liability caps, and make cybersecurity communications confidential. It also transfers statistical analysis center duties and related data-access authority to the Department of Management, repeals prior provisions in chapter 216A, and updates juvenile-records cross-references to reflect the new structure. The bill applies its new contract rules to contracts entered into or renewed on or after the effective date.
With no transcripts or votes available, the recorded legislative sentiment cannot be measured directly. Based on the bill’s contents, it appears to be a generally supportive administrative package focused on state control, cybersecurity, and technology governance, rather than a controversial policy overhaul. The absence of recorded opposition in the provided materials leaves the overall sentiment neutral to mildly favorable by default.
The most likely areas of contention are the bill’s confidentiality provisions and its expansion of Department of Management authority over sensitive data. Critics may object to limiting public access to budget transmittals, cybersecurity communications, and records held in the department’s IT capacity, while supporters may argue these protections are necessary for security and effective administration. Another possible dispute is the contract section, which strongly favors state bargaining positions by voiding many vendor-favorable terms and imposing mandatory Iowa-law and Polk County venue requirements. The transfer of criminal-justice analytics and access to juvenile, child welfare, and corrections data could also raise privacy, oversight, and agency-jurisdiction concerns.