Personal information: contractors: cyber insurance.

Existing law, the Information Practices Act of 1977 (IPA) , requires an agency, as defined, to maintain and disclose personal information in accordance with specified conditions and limitations to ensure the security and confidentiality of the personal information. Existing law regulates contracts for goods and services entered into by state agencies. Specified violations of provisions in a state contract is a crime. This bill would require a contract with a contractor doing business with a state agency to require that the contractor maintain cyber insurance if the contractor receives or has access to records containing personal information protected under the IPA. By expanding the scope of existing crimes, this bill would impose a state-mandated local program. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that no reimbursement is required by this act for a specified reason.