S31

	Chapter 23G of the general laws is hereby amended by inserting at the end thereof the following new section:-
	Section 48. Massachusetts Innovation Fund and State Agency Technology Upgrades Account
	(a) As used in this section, the following terms shall have the following meanings:-
	"Account", the state agency technology upgrades account.
	"Board", the Massachusetts innovation fund board.
	"Cloud computing service", has the meaning given the term by the National Institute of Standards and Technology in NIST Special Publication 800-145 and any amendatory or superseding document thereto.
	"Device-as-a-service", a managed service in which hardware that belongs to a managed service provider is installed at a state agency and a service level agreement defines the responsibilities of each party to the agreement.
	"Fund", means the Massachusetts Innovation Fund.
	"Information technology system", any equipment or interconnected system or subsystem of equipment used by a state agency, or a person under a contract with a state agency if the contract requires use of the equipment, to acquire, store, analyze, evaluate, manipulate, manage, move, control, display, switch, interchange, transmit, print, copy, scan, or receive data or other information. “Information technology system” shall include, but not be limited to, operational technology, including industrial control systems, a computer, a device-as-a-service solution, ancillary computer equipment such as imaging, printing, scanning, and copying peripherals and input, output, and storage devices necessary for security and surveillance, peripheral equipment designed to be controlled by the central processing unit of a computer, software and firmware and similar procedures, and services, including support services, and related resources. “Information technology system” shall not include equipment acquired by a contractor incidental to a state contract.
	"Legacy information technology system", is an information technology system that is operated with outdated or obsolete, or inefficient hardware or software system of information technology.
	"Qualifying information technology modernization project", a project by a state agency to (i) replace the agency's information technology systems; (ii) transition the agency's legacy information technology systems to a cloud computing service or other innovative commercial platform or technology;  (iii) develop and implement a method to provide adequate, risk-based, and cost-effective information technology responses to threats to the agency's information security; (iv) reducing data, hardware, and software redundancy; (v) improving system and data interoperability; or (vi) implementing cybersecurity solutions consistent with principles of Zero Trust architecture as defined by the National Institute of Standards and Technology.
	(b) The Massachusetts innovation fund board is established to administer the Massachusetts innovation fund and the state agency technology upgrades account and to make awards of financial assistance to state agencies from the fund or account for qualifying information technology modernization projects. The board shall consist of: (i) the executive director of Massachusetts Development Finance Agency or a designee; (ii) the secretary of the executive office of technology services and security or a designee; (iii) the governor or a designee; (iv) two members of the senate appointed by the president of the senate; (v) two members of the house of representatives appointed by the speaker of the house of representatives; (vi) one member of the public with relevant subject matter expertise appointed by the governor; and (vii) three state employees primarily having technical expertise in information technology development, financial management, cybersecurity and privacy, and acquisition, appointed by the secretary of the executive office of technology services and security.
	(c) Members of the board shall serve up to six two-year terms. A board member is not entitled to compensation for service on the board but is entitled to reimbursement of expenses incurred while performing duties as a board member.
	(d) The Massachusetts innovation fund and the state agency technology upgrades account are each established and set up on the books of the commonwealth as a separate fund, and may be expended from without further legislative appropriation, as provided by this section. MassDevelopment shall hold the Massachusetts innovation fund and the state agency technology upgrades account in separate accounts and apart from all other accounts.
	(e) The fund consists of:
	(1) money appropriated, credited, or transferred to the fund by the legislature;
	(2) gifts, donations, grants, including federal grants, and any other third-party funds;
	(3) money received by the board for the repayment of a loan made from the fund; and
	(4) interest and other earnings earned on deposits and investments of money in the fund.
	(f) The account consists of:
	(1) money deposited to the account by the comptroller in the manner prescribed by subsection (h); and
	(2) interest and other earnings earned on deposits and investments of money in the account.
	(g)  The Massachusetts Development Finance Agency, in consultation with the executive office of technology services and security, shall establish a loan program to authorize the board to use money from the fund to provide loans to state agencies for qualifying information technology modernization projects. A state agency may apply to the board for a loan from the fund. The application shall include a description of the qualifying information technology modernization project for which the state agency is requesting a loan. The board may grant a loan based upon a finding that the project is a qualifying information technology modernization project. A loan agreement entered into under this subsection shall require the state agency to:
	(1) repay the loan to the board within seven years of the date the loan is made to the agency; and
	(2) make annual reports to the board identifying cost savings realized by the agency as a result of the project for which the agency received the loan.
	(h) At the end of each state fiscal year, on the written request of a state agency, MassDevelopment shall, in conjunction with the comptroller, deposit to the account the unexpended balance of any money appropriated to the agency for that state fiscal year that is budgeted by the agency for information technology services or cybersecurity purposes. A state agency may request money from the account from the board at any time for a qualifying information technology modernization project.
	(i) The Massachusetts Development Finance Agency shall separately account for the amount of money deposited to the account at the request of each state agency under Subsection (h). Money deposited to the account under subsection (h) and any interest and other earnings on that money may be provided only to the state agency for which the comptroller deposited the money to the account and may be used by the agency only for a qualifying information technology modernization project.
	(j) Any money deposited to the account at the request of a state agency under subsection (h) that is not requested by the agency within three years from the date the money is deposited shall be transferred by the MassDevelopment, in conjunction with the comptroller, to the general revenue fund to be used in accordance with legislative appropriation.
	(k) A state agency that receives money from the fund or the account may collaborate with one or more other state agencies that also receive money from the fund or the account to purchase information technology systems that may be shared between the agencies.
	(l) Funds provided to an agency under this section, for any fiscal year, shall be used to supplement any appropriations made to the agency and shall not supplant any appropriations made to the agency.
	(m) MassDevelopment, in consultation with comptroller, MassDevelopment may adopt rules and regulations to implement and administer this section.