Pennsylvania HB 1219: An Act amending Title 71 (State Government) of the Pennsylvania Consolidated Statutes, in boards and offices, providing for information technology; establishing the Office of Information Technology and the Information Technology Fund; providing for administrative and procurement procedures and for the Joint Cybersecurity Oversight Committee; imposing duties on the Office of Information Technology; providing for administration of Pennsylvania Statewide Radio Network; and imposing penalties.

Bill Text

PRINTER'S NO. 1367
THE GENERAL ASSEMBLY OF PENNSYLVANIA
HOUSE BILL
No. 1219
Session of
2025
INTRODUCED BY GROVE, CUTLER, STENDER AND GAYDOS, APRIL 15, 2025
REFERRED TO COMMITTEE ON COMMUNICATIONS AND TECHNOLOGY,
APRIL 15, 2025
AN ACT
Amending Title 71 (State Government) of the Pennsylvania
Consolidated Statutes, in boards and offices, providing for
information technology; establishing the Office of
Information Technology and the Information Technology Fund;
providing for administrative and procurement procedures and
for the Joint Cybersecurity Oversight Committee; imposing
duties on the Office of Information Technology; providing for
administration of Pennsylvania Statewide Radio Network; and
imposing penalties.
The General Assembly of the Commonwealth of Pennsylvania
hereby enacts as follows:
Section 1. Part V of Title 71 of the Pennsylvania
Consolidated Statutes is amended by adding a chapter to read:
CHAPTER 43
INFORMATION TECHNOLOGY
Subchapter
A. General Provisions
B. Office of Information Technology
C. Business Operations
D. Procurement of Information Technology
E. Security
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

F. Enforcement and Penalties
G. Pennsylvania Statewide Radio Network
SUBCHAPTER A
GENERAL PROVISIONS
Sec.
4301. Scope of chapter.
4302. Findings and declarations.
4303. Definitions.
§ 4301. Scope of chapter.
This chapter relates to administrative procedures and
procurement regarding information technology.
§ 4302. Findings and declarations.
The General Assembly finds and declares the following:
(1) The Commonwealth has struggled to keep information
technology costs under control, including failing to include
as part of overall costs, time spent by Commonwealth staff
for development, implementation and use of information
technology.
(2) Many of the Commonwealth's information technology
contracts extend well beyond their anticipated date of
completion.
(3) The Commonwealth can begin to reduce information
technology costs by the consolidation of information
technology functions and resources within the executive
branch.
(4) Consolidation of information technology services
will not only reduce costs but create more efficient
information technology operations.
(5) By reforming the Commonwealth's outdated approach to
information technology, the Commonwealth can improve data and
20250HB1219PN1367 - 2 -
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

analytic capabilities and improve cybersecurity.
(6) The improvement of operations will enhance taxpayer
satisfaction and make it easier for residents to navigate.
(7) Consolidation of information technology services
must be designed to improve accountability and transparency
to taxpayers and enhance the Commonwealth's data and
analytics capabilities.
(8) The Commonwealth shall, as part of its information
technology and cybersecurity efforts:
(i) Reduce redundancy and align information
technology spending in a manner that reduces costs and
measurably improves Commonwealth agency mission
effectiveness.
(ii) Improve quality, transparency and
accountability in the procurement and use of information
technology.
(iii) Achieve five-year budget limits, within
limited variance, for all administrative agencies for
projects above a de minimis threshold.
(iv) Achieve measurable protection for Commonwealth
data, including identifying and mitigating risks for
personal identifiable information and other valuable,
nonpublic mission critical data.
§ 4303. Definitions.
The following words and phrases when used in this chapter
shall have the meanings given to them in this section unless the
context clearly indicates otherwise:
"Architecture." The overall design of a computing system and
the logical and physical interrelationships between its
components.
20250HB1219PN1367 - 3 -
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

"Authorization to operate." A formal declaration by the head
of the State agency that:
(1) authorizes operation of a product and explicitly
accepts the risk to agency operations; and
(2) is signed after the system has met and passed all
requirements to become operational.
"Business case." A statement specifying the needs of the
State agency for information technology, services and related
resources, including expected improvements to programmatic or
business operations, and the requirements for State resources
and funding, together with an evaluation of those requirements
by the chief information officer assigned to the State agency
which takes into consideration:
(1) The State's current technology.
(2) The opportunities for technology sharing.
(3) Any other factors relevant to the analysis by the
director.
"Director." The administrative head of the office and chief
information officer of the Commonwealth.
"Distributed information technology assets." Hardware,
software and communications equipment not classified as
traditional mainframe-based items, including personal com