Title 18 — Information Technology

In this chapter, unless the context otherwise requires: 1. "Budget unit" means a department, commission, board, institution or other agency of the state receiving, expending or disbursing state funds or incurring obligations of the state including the Arizona board of regents but…

The department is responsible for government information technology functions as prescribed in this chapter.

In regard to government information technology, the director shall: 1. Appoint a chief information officer for information technology. 2. Establish minimum qualifications for each position authorized for the department for government information technology. The qualifications sha…

A. The department shall: 1. Develop, implement and maintain a coordinated statewide plan for information technology. This includes: (a) Adopting statewide technical and coordination standards for information technology. (b) Serving as statewide coordinator for information technol…

A. The department, in consultation with the state treasurer, shall adopt policies or rules pursuant to title 41, chapter 6 establishing policies and procedures for the use of electronic and digital signatures by all state agencies, boards and commissions for documents filed with …

A. The information technology authorization committee is established consisting of the following members: 1. One member of the house of representatives who is appointed by the speaker of the house of representatives and who shall serve as an advisory member. 2. One member of the …

In this article, unless the context otherwise requires: 1. "Disability" means a physical or mental impairment that substantially limits one or more major life activities and includes having a record of or being regarded as having such an impairment. 2. "Electronic or information …

A. In order to improve accessibility of future electronic or information technology and increase the successful employment and access to government services for individuals with disabilities, particularly blind and visually impaired and deaf and hard-of-hearing persons, a budget …

In this article, unless the context otherwise requires: 1. "Agency": (a) Means any board, commission, department or other administrative unit of this state established by the Constitution of Arizona or by enactment of the legislature. (b) Includes the legislature, the courts and …

1. What services the site provides. 2. The information the agency obtains from individuals on line. 3. A person's option to choose to proceed with the transaction and any alternatives available. 4. How the agency uses the information. 5. Whether and under what circumstances the a…

A. An agency that maintains an agency web site shall post on the agency web site a copy of any annual report of activities that the agency: 1. Is required by law to make. 2. Elects to make. B. An agency that posts a copy of an annual report pursuant to subsection A of this sectio…

In this chapter, unless the context otherwise requires: 1. "Agency website" means a website that is connected to the internet and that is owned, operated or funded by a local government. 2. "Local government" means: (a) A county, city or town with a population of more than twenty…

The department of administration shall establish an internet web portal that provides a list of all local governments with jurisdiction over any address entered by a user. Each listing shall be linked to an agency website maintained by each local government that shall primarily c…

A. Every local government shall report to the department of administration all expenditures for communications that promote an individual elected public official and that include the official's name or physical likeness. This subsection does not apply to communications that are r…

A. State government and all local governments shall report to the department of administration all incurred debt, including the date of issue, purpose, original amount, current balance, interest paid to date and principal and interest paid in the latest full fiscal year according…

A. Notwithstanding any other law, state agencies may submit all statutorily required reports and budget estimates electronically, except those required by section 35-113. B. Each state agency shall post all statutorily required reports and budget estimates on the state agency's w…

A. The information technology fund is established for use by the department and the committee. Monies in the fund are subject to legislative appropriation. B. State agencies that are subject to section 41-750, all budget units and the legislative and judicial branches of state go…

A. The statewide e-rate program fund is established. The department shall administer the fund. The statewide e-rate program fund shall consist of: 1. Monies received pursuant to the e-rate program under the telecommunications act of 1996 or other grants to assist this state in im…

1. Monies appropriated to the fund by the legislature. 2. Any web portal usage fees collected by this state or under any agreement between this state and an independent contractor providing services for the common web portal minus the amount of fees collected pursuant to section …

A. Any state agency may authorize a person to be a third-party electronic service provider. B. The written agreement between the state agency and the authorized third-party electronic service provider may be for a limited number of services and may limit the persons that may rece…

A. A data processing acquisition fund is established to improve data processing in the office of secretary of state consisting of the fees collected pursuant to subsection B of this section. The secretary of state shall administer the fund. Monies in the fund are continuously app…

A. Subject to legislative appropriation or transfer of monies, the secretary of state shall develop electronic database systems for financial disclosures required under title 38, chapter 3.1, article 1 and lobbyist reporting requirements under title 41, chapter 7, article 8.1. B.…

A. In addition to other statements and reports required by law, every public officer, as a matter of public record, shall file with the secretary of state on a form prescribed by the secretary of state a verified financial disclosure statement covering the preceding calendar year…

In this article, unless the context otherwise requires: 1. "Advertisement" means a communication the primary purpose of which is the commercial promotion of a commercial product or service, including communication on an internet website that is operated for a commercial purpose. …

A. It is unlawful for any person who is not an owner or operator of a computer to transmit computer software to a computer, with actual knowledge or with conscious avoidance of actual knowledge, and to use the software to do any of the following: 1. Modify, through intentionally …

It is the intent of the legislature that this article is a matter of statewide concern. This article supersedes and preempts all rules, regulations, codes, ordinances and other laws adopted by a city, county, municipality or local agency regarding spyware and notices to consumers…

A. In addition to any other remedies provided by law, the attorney general, or a computer software provider or a website or trademark owner who is adversely affected by a violation of this article, may bring an action against a person who violates this article to: 1. Enjoin furth…

In this article, unless the context otherwise requires: 1. "Entity identifying information" has the same meaning prescribed in section 13-2001. 2. "Governmental agency" means: (a) Any board, commission, department or other administrative unit of this state established by the Cons…

A governmental agency shall develop and establish commercially reasonable procedures to ensure that entity identifying information or personal identifying information that is collected or obtained by the governmental agency is secure and cannot be accessed, viewed or acquired unl…

In this article, unless the context otherwise requires: 1. "Electronic mail message" means a message sent to a unique destination that consists of a unique user name or mailbox and a reference to an internet domain, whether or not displayed, and to which an electronic mail messag…

A person, with the intent to commit fraud or theft, shall not use a web page or electronic mail message or otherwise use the internet to solicit, request or take any action to induce another person to provide identifying information by representing that the person, either directl…

A. A person who either is engaged in the business of providing internet access service to the public or owns a web page or trademark and who is adversely affected by reason of a violation of this article may bring an action against a person who violates this article to: 1. Enjoin…

A person who violates this article is guilty of a class 5 felony.

In this article, unless the context otherwise requires: 1. "Breach" or "security system breach": (a) Means an unauthorized acquisition of and unauthorized access that materially compromises the security or confidentiality of unencrypted and unredacted computerized personal inform…

A. If a person that conducts business in this state and that owns, maintains or licenses unencrypted and unredacted computerized personal information becomes aware of a security incident, the person shall conduct an investigation to promptly determine whether there has been a sec…

In this chapter, unless the context otherwise requires: 1. "Applicable agency" means a department or agency of this state established by law to regulate certain types of business activity in this state and persons engaged in such business, including types of authorization, that t…

The chief executive officer shall establish a property technology sandbox program in direct consultation with the department of administration, the state real estate department and other applicable agencies of this state to enable a person to obtain limited access to the market i…

A. Any person may apply to enter the property technology sandbox to test an innovation. B. The chief executive officer must accept and review each application for entry into the property technology sandbox on a rolling basis. C. An application must demonstrate that an applicant b…

A. The chief executive officer must consult with an applicable agency before admitting an applicant into the property technology sandbox. This consultation may include seeking information about: 1. Whether the applicable agency previously has either: (a) Issued a license or other…

A. If the chief executive officer approves an application for entry into the property technology sandbox, the applicant is deemed a sandbox participant and both of the following apply: 1. The sandbox participant has twenty-four months after the date of approval to test the innova…

A. Before providing an innovative property product or service to consumers, a sandbox participant must disclose to consumers all of the following: 1. The name and contact information of the sandbox participant, including the registration number provided by the chief executive off…

A. At least thirty days before the end of the twenty-four-month property technology sandbox testing period, a sandbox participant must notify the chief executive officer that the sandbox participant will exit the property technology sandbox, wind down its test and cease offering …

A. A sandbox participant must retain records, documents and data produced in the ordinary course of business regarding an innovation tested in the property technology sandbox. B. If an innovation fails before the end of the testing period, the sandbox participant must notify the …

A. Records that are submitted to or obtained by the chief executive officer in administering this chapter are not public records or open for inspection by the public. B. Records and information that are submitted or obtained pursuant to this chapter may be disclosed to any of the…

A. The chief executive officer may establish periodic reporting requirements for sandbox participants. B. The chief executive officer may request records, documents and data from sandbox participants. On the chief executive officer's request, sandbox participants must make such r…

This chapter does not apply to a profession that is regulated pursuant to title 32, chapter 20.

A. A commercial entity that knowingly and intentionally publishes or distributes material on an internet website, including a social media platform, of which more than one-third is sexual material that is harmful to minors shall use reasonable age verification methods to verify t…