as introduced - 93rd Legislature (2023 - 2024) Posted on 01/30/2023 02:03pm
A bill for an act
relating to government data practices; creating general data audit trail requirements
for not public data; amending Minnesota Statutes 2022, section 13.05, by adding
a subdivision.
BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF MINNESOTA:
Minnesota Statutes 2022, section 13.05, is amended by adding a subdivision
to read:
new text begin
(a) The responsible authority shall establish procedures
to ensure that all actions in which not public data are created, received, changed, accessed,
shared, or disseminated are recorded in a data audit trail. In addition, an audit trail must
record:
new text end
new text begin
(1) the date of the action;
new text end
new text begin
(2) the identity of the person interacting with the data;
new text end
new text begin
(3) for data received from another government entity or person, the identity of the sending
government entity or person; and
new text end
new text begin
(4) for data shared or disseminated outside the government entity, the identity of the
receiving government entity or person.
new text end
new text begin
(b) Data contained in an audit trail shall have the same classification as the underlying
data tracked by the audit trail.
new text end
new text begin
(c) Notwithstanding section 138.17, an audit trail must be retained for not less than ten
years or until the underlying data tracked by the audit trail is destroyed pursuant to the
government entity's approved records retention schedule.
new text end
new text begin
(d) This subdivision is intended to create general requirements for government entities.
It is not intended to conflict with and does not supersede other particular audit trail
requirements in state law. Any conflict between this subdivision and other particular audit
trail requirements in state law shall be resolved pursuant to section 645.26, subdivision 1.
new text end
new text begin
This section is effective beginning August 1, 2024.
new text end