Public records: information security.

The California Public Records Act requires state and local agencies to make their records available for public inspection and to make copies available upon request and payment of a fee unless those records are exempt from disclosure. This bill would exempt from disclosure under the act the information security records of a public agency if, on the facts of the particular case, disclosure of those records would reveal vulnerabilities to, or otherwise increase the potential for an attack on, an information technology system of a public agency. The California Constitution requires a statute limiting the public's right of access to information concerning the public's business to be adopted with findings demonstrating the interest protected and the need for protecting that interest. This bill would make a legislative finding to that effect.