Senate Bill 272 (SB 272) requires local agencies to create catalogs of all enterprise systems that store information about the public and to post this catalog on their websites. Compliance is required and applies to all California special districts, cities and counties.
Section 6270.5 defines an "enterprise system" as a software application or computer system that collects, stores, exchanges, and analyzes information that the agency uses and meets the following:
- A multi departmental system or a system that contains information collected about the public.
- A system of record, which means a system that serves as an original source of data within an agency.
Enterprise systems do not include cybersecurity systems, infrastructure and mechanical control systems, or information that would reveal vulnerabilities to, or otherwise increase the potential for an attack on a public agency's IT system. Additionally, Section 6270.5 does not automatically require disclosure of the specific records that the IT systems collect, store, exchange, or analyze, however the Act's other provisions pertaining to disclosure of such records still apply.SB 272 COMPLIANCE 20180701.pdf