HB1369

House Bill 1369 mandates that all Arkansas public entities establish formal policies governing the authorized use of technology resources and general cybersecurity. Public entities must develop training programs for employees regarding these policies, though some exemptions exist for political subdivisions regarding specific cybersecurity training and policy requirements. The bill defines technology resources broadly, encompassing all electronic devices, networks, and email accounts. It explicitly prohibits the use of these resources for personal political lobbying or expressing personal opinions to elected officials, unless within the scope of an employee's job duties. State entities must submit their cybersecurity policies to the State Cyber Security Office for approval every two years, and the Department of Education is charged with creating standardized policies for educational institutions. Cyber security policies are exempted from disclosure under the state's Freedom of Information Act. Finally, the bill requires entities to establish disciplinary procedures for policy violations, while protecting rights under the Public Employees' Political Freedom Act and the Arkansas Whistle-Blower Act.