Chapter 22A — INFORMATION AND COMMUNICATION TECHNOLOGY

Sec. 22A.1. Findings.

Sec. 22A.2. Definitions.

Sec. 22A.3. Committee on Information Technology.

Sec. 22A.4. Chief Information Officer.

Sec. 22A.5. Duty of All Departments to Coordinate Information and Communications Technology.

Sec. 22A.6. ICT Capital and Operating Plan.

Sec. 22A.7. Establishment of Department; Powers and Duties.

A. Information and communication technology (ICT) resources in the various departments, boards, commissions and agencies of the City and County of San Francisco (City Departments) are valuable strategic assets belonging to the people of San Francisco that must be managed accordingly.

B. Advances in ICT are immense in scope and complexity, and progressing rapidly.

C. The nature of the advances presents the City with the opportunity to provide higher quality, more timely, and more cost-effective governmental services.

D. City Departments independently acquire uncoordinated and duplicative ICT technologies that are more appropriately acquired as part of a coordinated effort for maximum cost effectiveness and use.

E. The sharing of ICT technologies among agencies is often the most cost-effective method of providing the highest quality and most timely governmental services that would otherwise be cost prohibitive.

F. Considerations of both cost and the need for the transfer of information among the various departments in the most timely and useful form possible require a uniform policy and coordinated system for the use and acquisition of ICT technologies.

G. It is the policy of the City to coordinate and direct the use of ICT technologies by City Departments and to provide the most cost-effective and useful retrieval and exchange of information both within and among City Departments and from City Departments to the people of San Francisco.

(Added by Ord. 169-10, File No. 100095, App. 7/23/2010)

For purpose only of this Chapter 22A the following words shall have the meanings given herein:

(a) "Board" means the San Francisco Board of Supervisors.

(b) "Charter" means the Charter of the City and County of San Francisco.

(c) "City" means the City and County of San Francisco.

(d) "COIT" means the Committee on Information and Communications Technology.

(e) "Department" means the Department of Technology.

(f) "Information and Communications Technology" means information and communications technology and computer-based equipment and related services designed for the storage, manipulation, and retrieval of data by electronic or mechanical means, or both.

(g) "Chief Information Officer" means the Chief Information Officer appointed pursuant to section 22A.4.

(h) "City Department" means all of the departments, commissions, boards, agencies, bureaus, and institutions in the City government.

(Added by Ord. 169-10, File No. 100095, App. 7/23/2010)

Establishment and Composition. There is hereby created a Committee on Information Technology (COIT).

(a) COIT shall be composed of eight permanent members consisting of the Mayor, the President of the Board of Supervisors, the Controller, the City Administrator, the Clerk of the Board of Supervisors, the Executive Director of the Human Rights Commission, the Chief Information Officer

(CIO [1] and the Chief Information Security Officer (CISO), or their designees. The City Administrator or the City Administrator’s designee shall serve as Chair. Five additional Department Heads shall be recommended by the Chair and approved by the permanent members for two-year terms, one representing each of the major service areas: (a) Public Protection, (b) Human Welfare and Neighborhood Development, (c) Community Health, (d) Culture and Recreation, and (e) General Administration and Finance; and three additional non-permanent members representing the major service area of Public Works, Transportation, and Commerce. The eight permanent members and eight non-permanent members shall be voting members of COIT.

(b) COIT shall organize into subcommittees. The Chair shall appoint subcommittee members based on participants' technical, financial, management, and policy-making capabilities and responsibilities. The Chair shall consult with and consider the recommendations of the CIO regarding the number, type and make-up of subcommittees, Subcommittee members shall represent major service areas of the City.

(c) Purpose and Duties. COIT shall review and approve the recommendations of the City CIO for (i) the five-year City ICT plan, including budget, projects and staffing for all City departments, boards, commissions and agencies (City Departments), (ii) ICT plans, budgets, projects and

staffing plans for City Departments; and (iii) ICT standards, policies and procedures to enable successful development, operation, maintenance, and support of the City's ICT.

(d) COIT shall monitor compliance of all City Departments with adopted ICT plans, budgets, projects, standards, policies and procedures.

(e) COIT shall ensure the most cost-effective and useful retrieval and exchange of information both within and among City Departments and from the City to the people of San Francisco.

(f) There will be two additional non voting members of COIT selected by the voting members of COIT. These individuals cannot be employees of the City and County of San Francisco and shall have expertise in fields of ICT innovation and advances, emerging ICT applications, and public policy issues related to ICT.

(g) COIT shall incorporate performance and financial reporting on the Department of Technology and all other City Departments' ICT planning and purchases in the ICT Capital and Operating Plan and the annual reviews of the plan. The factors to be evaluated in determining the performance of all departments shall include, but are not limited to: quality of service level agreements, adherence to budgeted costs, and cost recovery methodology for all ICT products and services provided by City Departments, including the Department of Technology.

(h) COIT shall work to ensure adequate City ICT workforce development, including training and certification in order to maintain the competitiveness of City ICT staff.

(i) COIT will review and approve procedures, developed by the Office of Contract Administration and the Department of Technology, for the development and administration of ICT enterprise agreements. The factors addressed by the procedures will include, but not be limited to; (1) Whether the purchase is consistent with the City's current ICT Capital and Operating Plan; (2) Whether the purchase is the most economical method of obtaining the highest-quality products and services; (3) The best interests of the City.

(j) The Department of Technology shall provide support to the COIT. COIT shall review and approve the Department's annual plan, budget, and staffing required to support the Committee.

(k) When a City Department submits to COIT a Surveillance Impact Report under subsection 19B.2(b)(1) of Chapter 19B of the Administrative Code, COIT shall develop a Surveillance Technology Policy for the Department. For purposes of this subsection (k), “City Department,” “Surveillance Technology Policy,” and “Surveillance Impact Report” shall have the meanings set forth in Section 19B.1 of Chapter 19B of the Administrative Code.

(Added by Ord. 169-10, File No. 100095, App. 7/23/2010; amended by Ord. 103-19, File No. 190110, App. 5/31/2019, Eff. 7/1/2019; Ord. 107-19, File No. 190568, App. 6/14/2019, Eff. 7/15/2019; Ord. 147-21, File No. 210677, App. 9/24/2021, Eff. 10/25/2021; Ord. 49-22, File No. 211294, App. 3/31/2022, Eff. 5/1/2022)

CODIFICATION NOTE

1. So in Ord. 49-22.

(a) Establishment and Composition: There is hereby created the position of Chief Information Officer (CIO) for the City and County of San Francisco. The CIO shall:

(1) Be appointed by the City Administrator, with the concurrence of the Mayor.

(2) Serve as a permanent member of the Committee on Information Technology (COIT) with the authority and responsibility to develop recommendations and implement COIT standards, policies, and procedures for all City Departments.

(3) Serve as the Director of the Department of Technology with responsibility for making recommendations regarding development, implementation, maintenance, operation, and support of all citywide ICT.

(b) Purpose and Duties: The CIO shall (i) monitor trends and advances in ICT; (ii) advise the Mayor, Board of Supervisors, and City Departments regarding opportunities to provide higher quality, more timely, and more cost-effective governmental services; (iii) ensure coordinated and nonduplicative acquisition of ICT technologies for maximum cost effectiveness and use; (iv) ensure sharing of ICT technologies among City Departments as the most cost-effective method of providing the highest quality and most timely governmental services that could otherwise be cost prohibitive; (v) develop uniform policies and coordinated systems for the use, acquisition, and implementation of ICT technologies; (vi) establish Citywide standards and procedures to ensure cost-effective and useful retrieval and exchange of information both within and among the various City Departments and from the City to the people of San Francisco; and (vii) direct the City’s cyber security program.

(c) The CIO shall (i) consult with City Departments about ICT staffing needs and develop an ICT staffing plan for review and approval by COIT; and (ii) monitor hiring of ICT staff and adherence to the ICT staffing plan adopted by COIT.

(d) The CIO shall develop for the review and approval of COIT policies and procedures for the effective management of technology investments throughout their entire life-cycle, including but not limited to project definition, procurement, development, implementation, operation, performance evaluation, and enhancement or retirement.

(Added by Ord. 169-10, File No. 100095, App. 7/23/2010; Ord. 49-22, File No. 211294, App. 3/31/2022, Eff. 5/1/2022)

All City Departments shall, to the extent allowable by the Charter, participate with and advise the CIO on the creation of the ICT plan and shall:

(1) Be in compliance with the City's five-year and annual ICT plans.

(2) Specify the department's ICT procurement and system acquisition plans for the planning period.

(3) Consult with the CIO regarding ICT procurement and staffing and develop procurement and staffing plans consistent with the ICT plan.

(4) Identify risks, issues, and concerns with the department's information technology infrastructure.

(5) Cooperate with the CIO, COIT and Department of Technology in developing and implementing processes for the sharing of data and information with the Department and between City departments.

(6) Cooperate with citywide efforts to standardize ICT resources.

(7) Provide to COIT, when requested, complete and accurate accounting of all planned and expended ICT funds.

(Added by Ord. 169-10, File No. 100095, App. 7/23/2010)

(1) By March 1 of each odd-numbered year, COIT shall submit to the Mayor and Board of Supervisors a five-year Information and Communication Technology ("ICT") plan which shall include an assessment of the City's enterprise and general fund ICT capital and operating infrastructure, hardware and software needs, an estimate of timelines and investments required to meet the needs identified through this assessment, and recommendations to budget for or otherwise finance the investments.

(2) By May 1 of each odd-numbered year, the Mayor and Board of Supervisors shall review, update, amend, and adopt by resolution the five-year information technology plan and its corresponding budget request. The Mayor and Board of Supervisors may update the plan as necessary and appropriate to reflect the City's priorities, resources, and requirements as reviewed and approved by the COIT.

(Added by Ord. 169-10, File No. 100095, App. 7/23/2010; amended by Ord. 222-11, File No. 111001, App. 11/15/2011, Eff. 12/15/2011)

(a) There is hereby created a Department of Technology within the executive branch which shall consist of a Director and such officers and employees as are authorized pursuant to the budgetary and fiscal provisions of the Charter. The Director shall serve as appointing officer for the Department and as the Chief Information Officer for the City and County of San Francisco.

(b) The Department shall assume responsibility for:

(1) All functions previously performed by the Department of Electricity and Telecommunications, including all functions assigned by Chapters 22 and 22B of the Administrative Code.

(2) All functions previously performed by the Information Services Division of the Controller's Office.

(3) Enforcing the customer service and consumer protection standards contained in: (1) California Government code Sections 53055, 53055.1, 53055.2, and 53088.2; and (2) Title 47, Code of Federal Regulations, Section 76.309(c), or any other customer service standards pertaining to the provision of video service subsequently established by federal law or adopted by federal regulation.

(4) Overseeing the use and operation of the cable television public, educational and governmental access channels.

(5) Advising COIT as to compliance with adopted ICT policies, standards, and funding plans.

(6) Implementing the multi-year City ICT Plan.

(7) Providing staff support to the committee on Information Technology.

(8) Advising the Mayor, the Board of Supervisors, and the CIO regarding ICT for City residents and businesses.

(9) Installing, repairing, maintaining and inspecting ICT infrastructure to serve federal, state, and regional agencies, non-profit agencies, businesses, individuals, and telecommunications and information service providers, provided that the entity to be served pays for the department's costs of providing such services, and further provided that providing such services would not interfere with the operations of the department or impair services to City departments.

(10) Developing and encouraging a world wide web-based City government and facilitate the dissemination of information onto the web.

(11) Evaluating and streamlining City business practices for the enhanced utilization of technology.

(12) Providing assistance, advice, and expertise in connection with business relationships between City agencies and private sector providers of ICT resources. Such assistance shall include efforts that strengthen and create efficiencies in those business relationships.

(13) All additional functions assigned by the Mayor pursuant to Section 4.132 of the Charter.

(Added by Ord. 169-10, File No. 100095, App. 7/23/2010)