Upon the adoption of SB 272, Government Code Section 6270.5 was added to the California Public Records Act on October 11, 2015, with implementation to take place by July 1, 2016, to address the disclosure and posting of an agency’s Enterprise Systems. In compliance with SB 272, the Orange County Fire Authority has made available its Catalog of Enterprise Systems, which will be updated on an annual-basis.
What is an Enterprise System?
As defined in Government Code Section 6270.5(c)(1), "Enterprise System" means a software application or computer system that collects, stores, exchanges, and analyzes information that the agency uses that is both of the following:
- A multi-departmental system or a system that contains information collected about the public.
- A system of record (i.e., a system that serves as an original source of data within the Authority).
What information is disclosed in the Enterprise Catalog?
Per Government Code Section 6270.5(a),The Catalog of Enterprise Systems discloses a list of the current enterprise systems utilized by the Authority including the current system’s vendor, product, brief description of the system’s purpose, description of categories or types of data, department identified as primary custodian, how frequently system data is collected, and how frequently the system data is updated.
What isn't defined as an Enterprise System?
Per Government Code Section 6270.5(c)(3), An enterprise system shall not include any of the following:
- Information technology security systems, including firewalls and other cybersecurity systems.
- Physical access control systems, employee identification management systems, video monitoring, and other physical control systems.
- Infrastructure and mechanical control systems, including those that control or manage street lights, electrical, natural gas, or water or sewer function.
- Systems related to 911 dispatch and operation or emergency services.
- Systems that would be restricted from disclosure pursuant to Government Code Section 6254.19.
- The specific records that the information technology system collects, stores, exchanges, or analyzes.