Department of General Services: drone cybersecurity.

Existing law requires the Department of General Services to perform a variety of duties in connection with the acquisition of goods and services by state agencies, and requires the department to issue rules and regulations in administering its duties. This bill would require the department, in consultation with the Chief of the Office of Information Security, to adopt rules and regulations, by January 1, 2025, to ensure that each unmanned aircraft and unmanned aircraft system used by a government entity, as defined, in part, to include local governmental entities, for any purpose meets appropriate safeguards to ensure the confidentiality, integrity, and availability of any data collected, transmitted, or stored by that unmanned aircraft or unmanned aircraft system, as specified; and to specify requirements for a comprehensive plan to be adopted by a government entity to discontinue the use of noncompliant aircraft and systems, as specified. This bill would, beginning on the date the department adopts the rules and regulations, authorize a government entity to use unmanned aircraft or unmanned aircraft systems it did not previously use only if that aircraft or system complies with those rules and regulations. The bill would, by July 1, 2025, require a government entity that uses a noncompliant aircraft or system to submit to the department a comprehensive plan for discontinuing its use, as specified. By January 1, 2026, the bill would, with certain exceptions, require any government entity to cease the use of unmanned aircraft or unmanned aircraft systems not in compliance with these regulations. The bill would require the regulations to apply to unmanned aircraft operated under contract between a government entity and a third party, as provided. By requiring these regulations to apply to local governmental agencies, this bill would establish a state-mandated local program. The bill would include findings that changes proposed by this bill address a matter of statewide concern rather than a municipal affair and, therefore, apply to all cities, including charter cities. The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. This bill would provide that, if the Commission on State Mandates determines that the bill contains costs mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above.