reglab/statecodes huggingface dataset:
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.239 - Portfolio-based management of information technology resources for Secretary of State.

(1) The Secretary of State shall implement portfolio-based management of information technology resources, as described in this section, to:
(a) Ensure that the Office of the Secretary of State links its information technology investments with business plans;
(b) Facilitate risk assessment of information technology projects and investments;
(c) Ensure that the office justifies information technology investments on the basis of sound business cases;
(d) Ensure that the office facilitates development and review of information technology performance related to business operations;
(e) Identify projects that can cross agency and program lines to leverage resources; and
(f) Assist in state government-wide planning for common, shared information technology infrastructure.
(2) The Secretary of State shall integrate strategic and business planning, technology planning and budgeting and project expenditure processes into the Secretary of State’s information technology portfolio-based management.
(3) The Secretary of State shall conduct and maintain a continuous inventory of current and planned investments in information technology, a compilation of information about those assets and the total life cycle cost of those assets.
(4) The Secretary of State shall develop and implement standards, processes and procedures for the required inventory and for the management of the information technology portfolio.
(5) As used in this section, "information technology" has the meaning given that term in ORS 276A.230. [Formerly 177.200]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.242 - Portfolio-based management of information technology resources for State Treasurer.

(1) The State Treasurer shall implement portfolio-based management of information technology resources, as described in this section, to:
(a) Ensure that the office of the State Treasurer links its information technology investments with business plans;
(b) Facilitate risk assessment of information technology projects and investments;
(c) Ensure that the office justifies information technology investments on the basis of sound business cases;
(d) Ensure that the office facilitates development and review of information technology performance related to business operations;
(e) Identify projects that can cross agency and program lines to leverage resources; and
(f) Assist in state government-wide planning for common, shared information technology infrastructure.
(2) The State Treasurer shall integrate strategic and business planning, technology planning and budgeting and project expenditure processes into the State Treasurer’s information technology portfolio-based management.
(3) The State Treasurer shall conduct and maintain a continuous inventory of current and planned investments in information technology, a compilation of information about those assets and the total life cycle cost of those assets.
(4) The State Treasurer shall develop and implement standards, processes and procedures for the required inventory and for the management of the information technology portfolio.
(5) As used in this section, "information technology" has the meaning given that term in ORS 276A.230. [Formerly 178.100]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.262 - Transparency Oregon Advisory Commission Fund.

(1) The Transparency Oregon Advisory Commission may accept contributions of moneys and assistance from the United States Government or its agencies or from any other source, public or private, and agree to conditions placed on the moneys not inconsistent with the duties of the commission.
(2) There is established in the State Treasury, separate and distinct from the General Fund, the Transparency Oregon Advisory Commission Fund. The fund consists of moneys received by the commission under this section and such other moneys as may otherwise be made available by law. Interest earned on the fund shall be credited to the fund. Moneys in the fund are continuously appropriated to the commission and may be used only for the performance of the functions of the commission. [Formerly 184.488]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.270 - Definitions.

As used in this section and ORS 276A.273 and 276A.276:
(1) "Electronic government portal" means an electronic information delivery system accessible by means of the Internet that a state agency designates officially as a means by which the state agency delivers information, products or services.
(2) "Electronic government portal provider" means a person that on behalf of a state agency provides facilities, goods or services necessary to develop, host, operate, maintain or otherwise implement an electronic government portal or provides facilities, goods or services that assist a state agency in designing, developing, hosting, operating, maintaining or otherwise implementing an electronic government portal.
(3) "Portal provider fee" means a fee for using an electronic government portal or governmental services available by means of an electronic government portal that the State Chief Information Officer charges, or authorizes an electronic government portal provider to charge, under ORS 276A.276 (3).
(4) "State agency" means the executive department, as defined in ORS 174.112. [Formerly 182.126]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.276 - Ability to offer government services through portal; portal provider fee; rules.

(1) The State Chief Information Officer, with the advice of the Electronic Government Portal Advisory Board, shall provide the ability for state agencies to offer government services by means of an electronic government portal. The electronic government portal must be secure and must comply with the information security rules, policies and standards that the State Chief Information Officer adopts under ORS 276A.300 and meet the usability standards developed in cooperation with the advisory board.
(2) For the purposes of subsection (1) of this section, the State Chief Information Officer, under the provisions of the Public Contracting Code, may contract with an electronic government portal provider in a manner that is consistent with the State Chief Information Officer’s rules, policies and standards.
(3)(a) The State Chief Information Officer may charge members of the public a portal provider fee, or may authorize an electronic government portal provider to charge a portal provider fee, for an electronic government service if the advisory board recommends that the State Chief Information Officer charge or authorize a portal provider fee for the electronic government service. The portal provider fee must reflect the costs incurred in hosting, operating, maintaining or implementing the electronic government portal.
(b) The State Chief Information Officer shall cooperate with the advisory board to identify the electronic government portals or governmental services to which the portal provider fee applies.
(4) The State Chief Information Officer may adopt rules to implement the provisions of this section.
(5) Not later than the beginning of each odd-numbered year regular legislative session, the State Chief Information Officer shall prepare and submit to the Legislative Assembly a report in the manner provided in ORS 192.245 that summarizes the State Chief Information Officer’s activities under the provisions of this section. [Formerly 182.132]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.323 - State agency coordination.

(1) As used in this section:
(a) "Executive department" has the meaning given that term in ORS 174.112, except that "executive department" does not include:
(A) The Secretary of State.
(B) The State Treasurer.
(C) The Attorney General.
(D) The Oregon State Lottery.
(E) Public universities listed in ORS 352.002.
(b) "State agency" means an agency, as defined in ORS 183.310, in the executive department.
(2) All state agencies shall:
(a) Cooperate with the office of Enterprise Information Services in the implementation of a continuing statewide agency-by-agency risk-based information technology security assessment and remediation program.
(b) Cooperate in the development of, and follow, the plans, rules, policies and standards adopted by the State Chief Information Officer with regard to the unification of agency information technology security functions in this state.
(c) Conduct and document the completion of annual information technology security awareness training for all agency employees.
(d) Report security metrics using methodologies developed by the office of Enterprise Information Services.
(e) Participate in activities coordinated by the office of Enterprise Information Services in order to better understand and address security incidents and critical cybersecurity threats to the state.
(3) The State Chief Information Officer shall determine and allocate the costs to state agencies associated with providing information technology services, third-party security evaluations, vulnerability assessments and remediation measures. State agencies shall pay the costs to the State Chief Information Officer in the same manner as the state agency pays other claims. The State Chief Information Officer shall deposit into the State Information Technology Operating Fund established under ORS 276A.209 all moneys that the State Chief Information Officer receives from state agencies for purposes of providing information technology services and administering and enforcing the duties, functions and powers under this section. [2017 c.513 §2; 2021 c.17 §3]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.332 - Authority of State Chief Information Officer to enter into agreements.

Notwithstanding any other provision of law, the State Chief Information Officer may:
(1) Enter into any agreement, or any configuration of agreements, relating to state cybersecurity with any private entity or unit of government, or with any configuration of private entities and units of government. The subject of agreements entered into under this section may include, but need not be limited to, cybersecurity training and awareness, information technology security assessments and vulnerability testing, cyber disruption and incident response, risk-based remediation measures and application life cycle maintenance.
(2) Include in any agreement entered into under this section any financing mechanisms, including but not limited to the imposition and collection of franchise fees or user fees and the development or use of other revenue sources. [2017 c.513 §5]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.335 - Moneys from federal government and other sources.

(1) The State Chief Information Officer may accept from the United States Government or any of its agencies any funds that are made available to the state for carrying out the purposes of ORS 276A.323 to 276A.335, 276A.555 and 276A.560, regardless of whether the funds are made available by grant, loan or other financing arrangement. Under the authority granted by ORS chapter 190, the State Chief Information Officer may enter into agreements and other arrangements with the United States Government or any of its agencies as may be necessary, proper and convenient for carrying out the purposes of ORS 276A.323 to 276A.335, 276A.555 and 276A.560.
(2) The office of Enterprise Information Services may accept from any source any grant, donation, gift or other form of conveyance of land, money, real or personal property or other valuable thing made to the state or the office of Enterprise Information Services for carrying out the purposes of ORS 276A.323 to 276A.335, 276A.555 and 276A.560.
(3) Any cybersecurity initiative, consistent with the purposes of ORS 276A.323 to 276A.335, 276A.555 and 276A.560, may be financed in whole or in part by contributions of any funds or property made by any private entity or unit of government that is a party to any agreement entered into under the authority of the office of Enterprise Information Services.
(4) The State Chief Information Officer shall deposit into the State Information Technology Operating Fund established under ORS 276A.209 all moneys received under this section. [2017 c.513 §6; 2021 c.17 §5]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.340 - Definitions.

As used in ORS 276A.340 to 276A.344:
(1) "Covered product" means any form of hardware, software or service provided by a covered vendor.
(2) "Covered vendor" means any of the following corporate entities, or any parent, subsidiary, affiliate or successor entity of the following corporate entities:
(a) Ant Group Co., Limited.
(b) ByteDance Limited.
(c) Huawei Technologies Company Limited.
(d) Kaspersky Lab.
(e) Tencent Holdings Limited.
(f) ZTE Corporation.
(g) Any other corporate entity designated a covered vendor by the State Chief Information Officer under ORS 276A.344.
(3) "State agency" means any board, commission, department, division, office or other entity of state government, as defined in ORS 174.111, except that state government does not include the Secretary of State or State Treasurer.
(4) "State information technology asset" means any form of hardware, software or service for data processing, office automation or telecommunications used directly by a state agency or used to a significant extent by a contractor in the performance of a contract with a state agency. [2023 c.256 §1]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.342 - State agencies prohibited from using covered products; risk mitigation; exceptions.

(1) A covered product may not be:
(a) Installed or downloaded onto a state information technology asset; or
(b) Used or accessed by a state information technology asset.
(2) A state agency shall:
(a) Remove any covered product that is installed or downloaded onto a state information technology asset that is under the management or control of the state agency; and
(b) Implement all measures necessary to prevent the:
(A) Installation or download of a covered product onto a state information technology asset that is under the management or control of the state agency; or
(B) Use or access of a covered product by a state information technology asset that is under the management or control of the state agency.
(3)(a) Notwithstanding subsections (1) and (2) of this section, a state agency may, for investigatory, regulatory or law enforcement purposes, permit the:
(A) Installation or download of a covered product onto a state information technology asset; or
(B) Use or access of a covered product by a state information technology asset.
(b) A state agency that permits the installation, download, use or access of a covered product under this subsection shall adopt risk mitigation standards and procedures related to the installation, download, use or access of the covered product.
(4) The State Chief Information Officer shall coordinate with and oversee state agencies to implement the provisions of this section in accordance with the policies and standards adopted under ORS 276A.344 (3). [2023 c.256 §2]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.344 - Policies and standards; national security threat; rules.

(1) The State Chief Information Officer shall adopt:
(a) Rules pertaining to the designation of a corporate entity as a covered vendor under ORS 276A.340 (2)(g); and
(b) Policies and standards for state agencies to implement the provisions of ORS 276A.342.
(2) The rules adopted under this section must include:
(a) The definition of "national security threat" for purposes of protecting state information technology assets;
(b) Criteria and a process for determining when a corporate entity poses a national security threat; and
(c) Criteria and a process for determining when a corporate entity no longer poses a national security threat.
(3) The policies and standards adopted under this section must include:
(a) The procedures for providing state agencies, the Secretary of State and the State Treasurer notice that a corporate entity is designated or no longer designated a covered vendor under ORS 276A.340 (2)(g);
(b) The time schedules for implementing the requirements under ORS 276A.342 with regard to a corporate entity that is designated a covered vendor by the State Chief Information Officer; and
(c) The time schedules for incorporating the requirements under ORS 276A.342 into a state agency’s information security plans, standards or measures. [2023 c.256 §3]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.346 - Secretary of State prohibited from using covered products; risk mitigation; exceptions.

(1) As used in this section:
(a) "Covered product" means any form of hardware, software or service provided by a covered vendor.
(b) "Covered vendor" means any of the following corporate entities, or any parent, subsidiary, affiliate or successor entity of the following corporate entities:
(A) Ant Group Co., Limited.
(B) ByteDance Limited.
(C) Huawei Technologies Company Limited.
(D) Kaspersky Lab.
(E) Tencent Holdings Limited.
(F) ZTE Corporation.
(c) "State information technology asset" means any form of hardware, software or service for data processing, office automation or telecommunications used directly by the office of the Secretary of State or used to a significant extent by a contractor in the performance of a contract with the office of the Secretary of State.
(2) Except as provided in subsection (4) of this section, the Secretary of State shall:
(a) Prohibit a covered product from being:
(A) Installed or downloaded onto a state information technology asset; or
(B) Used or accessed by a state information technology asset;
(b) Remove any covered product that is installed or downloaded onto a state information technology asset; and
(c) Implement all measures necessary to prevent the:
(A) Installation or download of a covered product onto a state information technology asset; or
(B) Use or access of a covered product by a state information technology asset.
(3) For any corporate entity that the State Chief Information Officer designates as a covered vendor under ORS 276A.344, the secretary may:
(a) Prohibit a covered product from being:
(A) Installed or downloaded onto a state information technology asset; or
(B) Used or accessed by a state information technology asset;
(b) Remove any covered product that is installed or downloaded onto a state information technology asset; and
(c) Implement all measures necessary to prevent the:
(A) Installation or download of a covered product onto a state information technology asset; or
(B) Use or access of a covered product by a state information technology asset.
(4) If the secretary adopts risk mitigation standards and procedures related to the installation, download, use or access of a covered product, the secretary may, for investigatory, regulatory or law enforcement purposes, permit the:
(a) Installation or download of the covered product onto a state information technology asset; or
(b) Use or access of the covered product by a state information technology asset. [2023 c.256 §4]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.348 - State Treasurer prohibited from using covered products; risk mitigation; exceptions.

(1) As used in this section:
(a) "Covered product" means any form of hardware, software or service provided by a covered vendor.
(b) "Covered vendor" means any of the following corporate entities, or any parent, subsidiary, affiliate or successor entity of the following corporate entities:
(A) Ant Group Co., Limited.
(B) ByteDance Limited.
(C) Huawei Technologies Company Limited.
(D) Kaspersky Lab.
(E) Tencent Holdings Limited.
(F) ZTE Corporation.
(c) "State information technology asset" means any form of hardware, software or service for data processing, office automation or telecommunications used directly by the office of the State Treasurer or used to a significant extent by a contractor in the performance of a contract with the office of the State Treasurer.
(2) Except as provided in subsection (4) of this section, the State Treasurer shall:
(a) Prohibit a covered product from being:
(A) Installed or downloaded onto a state information technology asset; or
(B) Used or accessed by a state information technology asset;
(b) Remove any covered product that is installed or downloaded onto a state information technology asset; and
(c) Implement all measures necessary to prevent the:
(A) Installation or download of a covered product onto a state information technology asset; or
(B) Use or access of a covered product by a state information technology asset.
(3) For any corporate entity that the State Chief Information Officer designates as a covered vendor under ORS 276A.344, the State Treasurer may:
(a) Prohibit a covered product from being:
(A) Installed or downloaded onto a state information technology asset; or
(B) Used or accessed by a state information technology asset;
(b) Remove any covered product that is installed or downloaded onto a state information technology asset; and
(c) Implement all measures necessary to prevent the:
(A) Installation or download of a covered product onto a state information technology asset; or
(B) Use or access of a covered product by a state information technology asset.
(4) If the State Treasurer adopts risk mitigation standards and procedures related to the installation, download, use or access of a covered product, the State Treasurer may, for investigatory, regulatory or law enforcement purposes, permit the:
(a) Installation or download of the covered product onto a state information technology asset; or
(b) Use or access of the covered product by a state information technology asset. [2023 c.256 §5]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.350 - Definitions.

As used in ORS 276A.350 to 276A.371:
(1)(a) "Data" means final versions of statistical or factual information, including statistical or factual data about image files, that:
(A) Is in alphanumeric form reflected in a list, table, graph, chart or other nonnarrative form that can be digitally transmitted or processed;
(B) Is controlled by and regularly created or maintained by, or on behalf of, a state agency; and
(C) Records a measurement, transaction or determination related to the mission of the agency.
(b) "Data" does not include image files, including but not limited to designs, drawings, photos and scanned copies of original documents.
(2) "Dataset" means a named collection of related records, maintained on a storage device, that contains data organized, formatted or structured in a specific or prescribed way.
(3) "Mosaic effect" means a situation in which information in an individual dataset, in isolation, may not pose a risk of identifying an individual, but when combined with other available information could pose such a risk.
(4)(a) "Publishable data" means all data and datasets collected by a state agency.
(b) "Publishable data" does not include:
(A) Data to which a state agency may deny access pursuant to any provision of a federal, state or local law, rule or regulation, or another applicable policy or restriction.
(B) Data that contain a significant amount of information to which a state agency may deny access pursuant to any provision of a federal, state or local law, rule or regulation.
(C) Data that reflect the internal deliberative process of a state agency, including but not limited to negotiating positions, future procurements or pending or reasonably anticipated legal or administrative proceedings.
(D) Data stored on a personal computing device owned by a state agency, or data stored on a portion of a network that has been exclusively assigned to a single agency employee or to a single computing device owned or controlled by a state agency.
(E) Materials subject to copyright, patent, trademark, confidentiality agreements or trade secret protection.
(F) Materials that have commercial value or the disclosure of which could reduce a state agency’s competitive advantage.
(G) Proprietary applications, computer code, software, operating systems and similar materials.
(H) Employment records, internal employee directories or lists, facilities data, information technology and other data related to internal state agency administration.
(I) Any other data the publication of which is prohibited by law.
(5) "State agency" means the executive department, as defined in ORS 174.112, except that "state agency" does not include the Secretary of State or the State Treasurer. [2017 c.720 §1]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.353 - Chief Data Officer; duties; rules.

(1) The State Chief Information Officer shall appoint a Chief Data Officer.
(2) The Chief Data Officer shall:
(a) Maintain a central web portal for the publication of publishable data under ORS 276A.362.
(b) Establish the open data standard as provided in ORS 276A.356.
(c) Prepare and publish the technical standards manual as provided in ORS 276A.359.
(d) Create an enterprise data inventory that accounts for all datasets used within agency information systems and that indicates whether each dataset may be made publicly available and if the dataset is currently available to the public. The enterprise data inventory is a public record.
(e) Provide information protection and privacy guidance for state agencies.
(f) Establish an enterprise data and information strategy.
(g) Identify ways to use and share existing data for business intelligence and predictive analytic opportunities.
(h) Identify strategies to combine internal and external data sources.
(i) Establish statewide data governance and policy area data governance and provide guidance for agencies about data governance efforts.
(j) Oversee the delivery of education and standards to state agencies regarding data quality, master data management and data life cycle management.
(k) Form an advisory group to assist the Chief Data Officer in carrying out the duties described in this section and in establishing an enterprise memorandum of understanding for interagency data sharing.
(L) Submit a biennial report to a committee or interim committee of the Legislative Assembly related to information management and technology on:
(A) The status of agency posting of publishable data; and
(B) The status of data sharing within and between agencies, enabling cross-agency analysis to provide information for public purposes, including but not limited to program design and budgeting decisions.
(3) The Chief Data Officer may establish and maintain an online forum to solicit feedback from the public and to encourage discussion on the open data standard and publishable data available on the web portal.
(4) The State Chief Information Officer may adopt rules necessary to implement ORS 276A.350 to 276A.371. [2017 c.720 §2]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.356 - Open data standard.

(1) The Chief Data Officer appointed under ORS 276A.353 shall establish an open data standard for state agencies publishing publishable data on the web portal maintained under ORS 276A.353. A local or tribal government may adopt the standard. The standard must include:
(a) A format that permits public notification of updates whenever possible.
(b) Requirements to update publishable data as often as is necessary to preserve the integrity and usefulness of publishable data.
(c) The availability of publishable data without registration or license requirements or restrictions on the use of publishable data. As used in this paragraph, "registration or license requirements or restrictions on the use of publishable data" does not include measures designed or required to ensure access to publishable data, to protect the web portal from abuse or attempts to damage or impair the use of the web portal, or to analyze the types of publishable data being accessed to improve service delivery.
(d) The ability to electronically search publishable data using external information technology.
(2) In establishing the open data standard, the Chief Data Officer shall consult with subject matter experts from state agencies, organizations specializing in technology and innovation, the academic community and other interested groups designated by the Chief Data Officer. Whenever feasible, the Chief Data Officer shall consult with these entities in the development of technical and open standards.
(3) The Chief Data Officer may adopt rules to implement the open data standard. [2017 c.720 §3]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.359 - Technical standards manual.

(1) The Chief Data Officer appointed under ORS 276A.353 shall prepare and publish a technical standards manual for publishing data through the web portal maintained under ORS 276A.353. The manual must:
(a) Enable state agencies to make publishable data available to the greatest number of users and for the greatest number of applications and emphasize that state agencies must, whenever practicable, use open data standards for web publishing in a machine-readable format.
(b) Identify the policy for each technical standard and specify which types of data the standard applies to, and may recommend or require that publishable data be published in more than one technical standard.
(c) Include a plan to adopt or utilize a web application programming interface that permits application programs to request and receive publishable data directly from the web portal.
(2) The Chief Data Officer shall update the manual as necessary. [2017 c.720 §4]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.362 - Release of publishable data on web portal; exemptions; rules.

(1) A state agency that releases publishable data shall release the data on the web portal maintained under ORS 276A.353 in accordance with the open data standard and technical standards manual established by the Chief Data Officer under ORS 276A.356 and 276A.359. If a state agency cannot make all publishable data available on the web portal, the state agency shall report to the Chief Data Officer all publishable data that the agency is unable to make available and state the reasons why the agency is unable to make the data available and the date by which the agency expects the publishable data to be made available on the portal.
(2) The State Chief Information Officer shall adopt rules allowing a state agency to request an exemption from the requirements of subsection (1) of this section when:
(a) The release of publishable data would subject the agency’s information systems to a substantial risk of cyberattack; or
(b) The state agency is purchasing software or vendor services and industry practices do not support downstream processing and dissemination activities. [2017 c.720 §5]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.365 - Information management by state agencies.

(1) A state agency shall manage information as a strategic asset throughout the information’s life cycle. To improve the management of information resources and reinforce the state’s presumption of openness, an agency shall:
(a) Collect or create information in a way that supports downstream processing and dissemination activities, including:
(A) Using machine-readable and open formats;
(B) Using data standards approved by the Chief Data Officer in the collection and creation of information in order to promote data interoperability and openness;
(C) Ensuring information stewardship through the use of open licenses; and
(D) Using common core and extensible metadata.
(b) Build information systems to support interoperability and information accessibility.
(c) Strengthen data management and release practices to ensure agency data assets are managed and maintained throughout the assets’ life cycle by:
(A) Adopting effective data asset portfolio management approaches.
(B) Creating and maintaining an inventory of agency information resources to be included in the enterprise data inventory.
(C) Creating and maintaining a public data listing, including datasets that can be made publicly available but that have not yet been released.
(D) Establishing a process to engage with customers and the public to help facilitate and prioritize data release.
(E) Clarifying roles and responsibilities for promoting efficient and effective data release practices.
(d) Strengthen measures to ensure that privacy and confidentiality are fully protected and that data are properly secured.
(e) Account for the mosaic effect of data aggregation.
(f) Incorporate new interoperability and openness requirements into core agency processes.
(2) A state agency shall integrate the following minimum requirements into the project planning documentation and technical design for all new information systems and systems preparing for modernization, as appropriate:
(a) System designs must be scalable and flexible and must facilitate the extraction of data in multiple formats, using standards and specifications in the system design that promote industry best practices for data sharing, and separation of data from the application layer to maximize data reuse opportunities;
(b) All data outputs of the associated system must meet the requirements described in paragraph (a) of this subsection; and
(c) Data schemata and dictionaries must be documented and shared with internal partners and the State Chief Information Officer.
(3)(a) A state agency’s use of proprietary software may not diminish the ability of the public to inspect and copy a public record.
(b) A state agency may not enter into a contract for the creation of a public records database that impairs the ability of the public to inspect or copy the public records of the state agency, including but not limited to the documentation described in subsection (2)(c) of this section. [2017 c.720 §6]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.368 - Purpose of data; limitation of liability; publishable data in public domain.

(1) Publishable data available on the web portal maintained under ORS 276A.353 is provided for informational purposes only. The state does not warrant the completeness, accuracy, content or fitness for any particular purpose or use of publishable data made available on the web portal. No warranties may be implied or inferred with respect to the publishable data made available on the web portal.
(2) The state is not liable for any deficiencies in the completeness, accuracy, content or fitness for any particular purpose or use of publishable data made available on the web portal or by any third-party application utilizing publishable data.
(3) All publishable data is in the public domain for purposes of applicable copyright laws.
(4) The Chief Data Officer shall post the text of subsections (1) to (3) of this section on the web portal home page. [2017 c.720 §7]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.374 - Application to Secretary of State and State Treasurer; rules.

The Secretary of State and the State Treasurer shall by rule adopt for each respective office requirements related to data that are the same as, or are similar to, the requirements established by ORS 276A.350 to 276A.371 and by rules adopted by the State Chief Information Officer or the Chief Data Officer under ORS 276A.350 to 276A.371. [2017 c.720 §9]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.400 - Policy.

The Legislative Assembly declares it to be the policy of the State of Oregon:
(1) To use information technology in education, health care, economic development and government services to improve economic opportunities and quality of life for all Oregonians regardless of location or income.
(2) To stimulate demand to encourage and enable long-term infrastructure innovation and improvement.
(3) That telecommunications planning process shall:
(a) Organize users in new ways to aggregate demand, reduce costs and create support networks;
(b) Encourage collaboration between communities of interest by geographic area and economic sector; and
(c) Encourage competition among technology and service providers. [Formerly 283.500]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.403 - Coordination of telecommunications systems.

(1) The State Chief Information Officer shall coordinate, in a manner that is consistent with plans, standards, policies, goals, directives and rules that the State Chief Information Officer sets, specifies or adopts, the consolidation and operation of all telecommunications systems, including emergency telecommunications systems, that the state and state agencies use. Notwithstanding any other provision of law, an agent or agency of the state may not construct, purchase or otherwise gain access to a telecommunications system without the prior approval of the State Chief Information Officer.
(2) The provisions of this section do not require emergency service providers, as defined by the State Chief Information Officer, to consolidate telecommunications systems that emergency service providers use into nonemergency networks. [Formerly 283.505]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.406 - Acquisition of broadband and communications services.

(1) As used in this section and ORS 276A.412 and 276A.421:
(a) "Broadband" means wide bandwidth communications transmissions over coaxial cable, optical fiber, radio or twisted pair with an ability to simultaneously transport multiple signals and traffic types at a minimum transmission speed established by the State Chief Information Officer by rule, but in no event less than 25 megabits per second for downloads and three megabits per second for uploads.
(b) "Communications" means media that communicate voice, data, text or video over a distance using electrical, electronic or light wave transmissions.
(c) "State agency" has the meaning given that term in ORS 279A.010.
(d) "Telecommunications provider" means any person that is capable of providing broadband and communications services including, but not limited to, a telecommunications utility as defined in ORS 759.005, a competitive telecommunications provider as defined in ORS 759.005, a cable television provider or an interstate telecommunications provider.
(2) Notwithstanding ORS chapters 279A, 279B and 279C, the State Chief Information Officer:
(a) Shall provide broadband and communications services and operations for the state and state agencies; and
(b) Subject to ORS 276A.421 and notwithstanding ORS 276A.206 (6)(c), may provide broadband services and operations in unserved or underserved areas to any other public body, as defined in ORS 174.109, any federally recognized Indian tribe in Oregon or any nonprofit organization that the State Chief Information Officer designates as a community of interest under ORS 276A.206.
(3) The State Chief Information Officer provides the services and operations under subsection (2) of this section if the State Chief Information Officer:
(a) Provides the services directly;
(b) Enters into an interagency or intergovernmental agreement under ORS chapter 190 to have another state agency or governmental agency provide the services; or
(c) Acquires the services by entering into contracts with telecommunications providers or a consortium of telecommunications providers in a manner that is consistent with the State Chief Information Officer’s rules, policies and standards.
(4) The State Chief Information Officer may not enter into any contract or agreement under subsection (3) of this section or approve the procurement of any broadband or communications system or equipment that is incompatible with the network or that is inconsistent with the State Chief Information Officer’s rules, policies and standards. [Formerly 283.510; 2018 c.51 §4]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.409 - Use of agency travel and transportation funds for telecommunications services.

The State Chief Information Officer annually shall review each state agency’s budget, in conjunction with the state agency, to identify funds that the state agency uses for travel and transportation that the state agency could instead use for telecommunications. If the State Chief Information Officer determines that a state agency could use a portion of the state agency’s travel and transportation funds more effectively by instead using telecommunications, without diminishing the affected agency’s existing internal and external communications, the State Chief Information Officer shall recommend to the Emergency Board as described in ORS 291.326 action that the State Chief Information Officer determines is necessary to dedicate the identified state agency travel and transportation funds for use in telecommunications. The State Chief Information Officer shall make the recommendations to the Emergency Board not later than January 1. [Formerly 283.515]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.412 - Contracts for telecommunications equipment and services not to exceed 10 years; exception for broadband infrastructure; contract benefits for designated communities of interest.

(1) For the purposes of ORS 276A.400 to 276A.412, the State Chief Information Officer may, in a manner that is consistent with the State Chief Information Officer’s rules, policies and standards, enter into a contract or contracts with telecommunications providers and equipment manufacturers for purchasing, using or operating telecommunications equipment and services for a period not to exceed 10 years.
(2) Notwithstanding subsection (1) of this section, the State Chief Information Officer may enter into a contract or a configuration of agreements related to broadband infrastructure, including leases, maintenance and operations of broadband transmission equipment, for a period that exceeds 10 years.
(3) For purposes of ORS 276A.206, the State Chief Information Officer may extend the benefits of telecommunications contracts for broadband networks, communications systems, equipment and services to nonprofit organizations that the State Chief Information Officer designates as communities of interest under ORS 276A.206. [Formerly 283.520; 2018 c.51 §6]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.415 - Agreements to fund or acquire telecommunications equipment and services.

The State Chief Information Officer may, in a manner that is consistent with the State Chief Information Officer’s rules, policies and standards, enter into an agreement or agreements to fund or otherwise acquire telecommunications equipment and services by installment purchase or lease purchase contracts. [Formerly 283.524]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.424 - Connecting Oregon Schools Fund; rules.

(1) The Connecting Oregon Schools Fund is established in the State Treasury, separate and distinct from the General Fund. Interest earned by the Connecting Oregon Schools Fund shall be credited to the fund.
(2) The Connecting Oregon Schools Fund consists of any moneys deposited in the fund from whatever source and may include moneys appropriated, allocated, deposited or transferred to the fund by the Legislative Assembly or otherwise and interest earned on moneys in the fund.
(3) The moneys in the fund are continuously appropriated to the Department of Education for the purpose of providing matching funds for federal moneys received by school districts, education service districts, public charter schools or a consortium that is any combination of school districts, education service districts and public charter schools for the purpose of providing broadband access to eligible education facilities in this state.
(4) An education facility is eligible to receive matching funds under this section if the education facility:
(a) Receives federal moneys for the purpose of providing broadband access to the education facility;
(b) Takes steps to determine whether existing broadband infrastructure, including fiber-based broadband, may be integrated into the proposed broadband access project; and
(c) Meets any other eligibility requirements established by the State Board of Education by rule.
(5)(a) Before the department may distribute any state moneys under this section, the board shall adopt rules to implement the provisions of this section, including rules setting criteria that govern the distribution of the moneys to eligible education facilities.
(b) Rules adopted under this section must take into consideration any eligibility requirements established by the federal program awarding federal moneys.
(6) As used in this section:
(a) "Education facility" means:
(A) A public school that offers education to students in kindergarten or grades 1 through 12, or any combination of those grade levels;
(B) A building owned by a school district, education service district or public charter school; or
(C) A public charter school building leased from a school district or education service district.
(b) "Public charter school" has the meaning given that term in ORS 338.005. [2018 c.51 §3; 2019 c.648 §7]
2023 Oregon Revised Statutes › Volume : 07 - Public Facilities and Finance › Chapter 276A - Information Technology › Section 276A.500 - Definitions.

As used in ORS 276A.500 to 276A.515:
(1) "Critical infrastructure information" means information about infrastructure that is so vital to this state or the United States that the incapacity or destruction of the infrastructure would detrimentally affect the personal and economic security, health or safety of residents of this state, including information about the security of items listed in ORS 192.355 (33).
(2) "Custodian" has the meaning given that term in ORS 192.311 (2)(b).
(3) "Geographic information" means geographic data as that term is defined in ORS 276A.203 (4)(b).
(4) "Geographic information system" has the meaning given that term in ORS 276A.203 (4)(b).
(5) "Geospatial framework data" means geographic information that a public body, under applicable provisions of law or on the basis of scientific methodology, technical standards or technical expertise, creates, generates, provides or aggregates and that the Oregon Geographic Information Council, in consultation with the public body, identifies as necessary to support the business processes of a governmental agency.
(6) "Public body" has the meaning given that term in ORS 174.109. [2017 c.166 §1]