JLARC Ongoing Oversight of IT Outsourcing (language only)
Item 30 #1c
Item 30 #1c | | | |
Legislative Department |
Joint Legislative Audit and Review Commission |
Language
Page 15, after line 14, insert:
"E.1. The General Assembly hereby designates the Joint Legislative Audit and Review Commission (JLARC) to review and evaluate the Virginia Information Technologies Agency (VITA) on a continuing basis and to make such special studies and reports as may be requested by the General Assembly, the House Appropriations Committee, or the Senate Finance Committee.
2. The areas of review and evaluation to be conducted by the Commission shall include, but are not limited to, the following: (i) VITA's infrastructure outsourcing contracts and any amendments thereto; (ii) adequacy of VITA's planning and oversight responsibilities, including VITA's oversight of information technology projects and the security of governmental information; (iii) cost-effectiveness and adequacy of VITA's procurement services and its oversight of the procurement activities of State agencies.
3. For the purpose of carrying out its duties and notwithstanding any contrary provision of law, JLARC shall have the legal authority to access the information, records, facilities, and employees of VITA.
4. Records provided to VITA by a private entity pertaining to VITA's comprehensive infrastructure agreement or any successor contract, or any contractual amendments thereto for the operation of the Commonwealth's information technology infrastructure shall be exempt from the Virginia Freedom of Information Act (§ 2.2-3700 et seq.), to the extent that such records contain (i) trade secrets of the private entity as defined in the Uniform Trade Secrets Act (§ 59.1-336 et seq.) or (ii) financial records of the private entity, including balance sheets and financial statements, that are not generally available to the public through regulatory disclosure or otherwise. In order for the records specified in clauses (i) and (ii) to be excluded from the Virginia Freedom of Information Act, the private entity shall make a written request to VITA:
a. Invoking such exclusion upon submission of the data or other materials for which protection from disclosure is sought;
b. Identifying with specificity the data or other materials for which protection is sought; and
c. Stating the reasons why protection is necessary.
VITA shall determine whether the requested exclusion from disclosure is necessary to protect the trade secrets or financial records of the private entity. VITA shall make a written determination of the nature and scope of the protection to be afforded by it under this subdivision. Once a written determination is made by VITA, the records afforded protection under this subdivision shall continue to be protected from disclosure when in the possession of VITA or JLARC.
Except as specifically provided in this item, nothing in this item shall be construed to authorize the withholding of (a) procurement records as required by § 56-575.17; (b) information concerning the terms and conditions of any interim or comprehensive agreement, service contract, lease, partnership, or any agreement of any kind entered into by VITA and the private entity; (c) information concerning the terms and conditions of any financing arrangement that involves the use of any public funds; or (d) information concerning the performance of the private entity under the comprehensive infrastructure agreement, or any successor contract, or any contractual amendments thereto for the operation of the Commonwealth's information technology infrastructure.
5. The Chairman of JLARC may appoint a permanent subcommittee to provide guidance and direction for VITA review and evaluation activities, subject to the full Commission's supervision and such guidelines as the Commission itself may provide.
6. All agencies of the Commonwealth shall cooperate as requested by JLARC in the performance of its duties under this authority."
Explanation
(This amendment directs the Joint Legislative Audit and Review Commission to continue to provide ongoing oversight of Virginia's information technology outsourcing arrangement using the same model currently utilized by JLARC for ongoing review of the Virginia Retirement System.)