SECTION 1. Chapter 7D of the General Laws is hereby amended by adding the following section:-

Section 9. (a) As used in this section, the following words shall have the following meanings, except where the context clearly indicates otherwise:-

“Business intelligence”, the process of collecting, organizing, sharing, and analyzing data through integrated data management, reporting, visualization, and advanced analytics to discover patterns and other useful information that will allow policymakers and state officials to make more informed decisions. Business intelligence shall also include: (i) broad master data management capabilities such as data integration, data quality and enrichment, data governance, and master data management to collect, reference, and categorize information from multiple sources; and (ii) self service query and reporting capabilities to provide timely, relevant, and actionable information to business users delivered through a variety of interfaces, devices, or applications based on their specific roles and responsibilities.

“Center”, the commonwealth analytic center for excellence.

“Data analytics”, data analysis, including the ability to use the data for assessment and extraction of policy relevant information.

“Enterprise level data analytics”, standard analytics capabilities and services leveraging data throughout the commonwealth’s agencies, departments, and institutions.

(b) There shall be a center within the office known as the commonwealth analytic center for excellence. The center shall utilize public private partnerships as part of a statewide data integration and data sharing initiative and identify data integration and business intelligence opportunities that will generate greater efficiencies in, and improved service delivery by, state agencies, departments, and institutions. The center shall not replace transactional systems but shall leverage the data from those systems for enterprise level business intelligence. The center shall continue the work, purpose, and resources of previous data integration efforts and shall otherwise advise and assist the CIO in the management of the center. The office shall make any organizational changes necessary to maximize the effectiveness and efficiency of the center.

The office shall continue to utilize public private partnerships and existing data integration and analytics contracts and licenses as appropriate to continue the implementation of the center. Private entities that partner with the commonwealth may make appropriate contributions of funds or resources, including, but not limited to, knowledge transfer and education activities, software licensing, hardware and technical infrastructure resources, personnel resources, and such other appropriate resources as agreed upon by the parties.

(c) The center shall coordinate ongoing enterprise data integration efforts, including, but not limited to: (i) identifying technologies currently used in the commonwealth that have the capability to support the initiative; (ii) identify technologies with unique capabilities that are complementary to existing technology standards, and that have the potential to support the commonwealth’s business intelligence effort; (iii) comparing capabilities and costs across state agencies; (iv) ensuring implementation is properly supported across state agencies; (v) ensuring data integration and sharing is performed in a manner that preserves data privacy and security in transferring, storing, and accessing data, as appropriate; (vi) immediately seeking waivers and entering into written agreements that may be required by state or federal law to effectuate data sharing and to carry out the purposes of this section; (vii) coordinating data requirements and usage for the commonwealth’s business intelligence applications in a manner that: (1) limits impacts on participating state agencies as those agencies provide data and business knowledge expertise and (2) assists in defining business rules so data may be properly used; (viii) recommending the most cost effective and reliable long term hosting solution for the commonwealth’s enterprise level business intelligence and data integration, notwithstanding any other general or special law to the contrary; (ix) utilizing a common approach to establish standards for business intelligence initiatives for state agencies and prevent the development of projects that do not meet the established standards; (x) creating efficiencies in the commonwealth by ensuring that state agencies utilize the center for agency business intelligence requirements.

(d) The center shall provide state agencies and the University of Massachusetts with all business intelligence requirements and implementation, including any planning or development efforts associated with creating business intelligence capability, and any master data management efforts.

(e) The office, in consultation with the executive office of administrative and finance, shall identify potential funding sources for expansion of existing projects or development of new projects.

(f) All state agencies and the University of Massachusetts shall: (i) grant the center access to all information required to develop and support the commonwealth’s business intelligence applications pursuant to this section. The office and the center shall take all necessary actions and precautions, including training, certifications, background checks, and governance policy and procedure, to ensure the security, integrity, and privacy of the data in accordance with state and federal law and as may be required by contract; (ii) provide complete information regarding the state agency's information technology, operational, and security requirements; (iii) provide information on all of the state agency's information technology activities relevant to the commonwealth’s business intelligence effort; (iv) forecast the state agency's projected future business intelligence information technology needs and capabilities; (v) ensure that the state agency's future information technology initiatives coordinate efforts with the center to include planning and development of data interfaces to incorporate data into the initiative and to ensure the ability to leverage analytics capabilities; (vi) provide technical and business resources to participate in the initiative by providing, upon request and in a timely and responsive manner, complete and accurate data, business rules and policies, and support; (vii) identify potential resources for deploying business intelligence in their respective state agencies and as part of the enterprise level effort; and (viii) immediately seek any waivers and enter into any written agreements that may be required by state or federal law to effectuate data sharing and to carry out the purposes of this section, as appropriate.

(g) All information shared with center and the office pursuant this subsection shall be protected release and disclosure in the same manner other information is protected pursuant to this section.

(h) For the purposes of this section, the center and the office shall be deemed: (i) with respect to criminal information, and to the extent allowed by federal law, a criminal justice agency, as defined in the Federal Criminal Justice Information Services (CJIS) Security Policy. The department of criminal justice information services shall ensure that the center receives access to federal criminal information deemed to be essential in managing the center to support criminal justice professionals; and (ii) with respect to health information covered by the Federal Health Insurance Portability and Accountability Act of 1996, as amended, and to the extent allowed by federal law: (1) a business associate with access to protected health information acting on behalf of the commonwealth’s covered entities in support of data integration, analysis, and business intelligence; (2) authorized to access and view individually identifiable health information, provided that the access is essential to the enterprise fraud, waste, and improper payment detection program or required for future initiatives having specific definable need for the information; (3) authorized to access all state and federal data, including revenue and labor information, deemed to be essential to the enterprise fraud, waste, and improper payment detection program or future initiatives having specific definable need for the data; (4) authorized to develop agreements with the federal government to access data deemed to be essential to the enterprise fraud, waste, and improper payment detection program or future initiatives having specific definable need for such data.

(i) The center shall assist the fraud detection program in the department of transitional assistance, established by section 36 of chapter 18, to identify fraud of funds, assets or property provided by the department of transitional assistance.

(k) The office shall identify and make all efforts to secure any matching funds or other resources to assist in funding the center. Savings resulting from the cancellation of projects, software, and licensing, as well as any other savings from the utilization of the center, shall be returned to the General Fund and shall remain unexpended and unencumbered until appropriated by the general court in a subsequent fiscal year.

(k) The office shall: (i) submit and present quarterly reports on the activities described in this section to the chairs of the , the house committee on technology and intergovernmental affairs and the joint committee on state administration and regulatory oversight; (ii) report the failure of a state agency to provide information requested pursuant to this section to the house committee on technology and intergovernmental affairs and the joint committee on state administration and regulatory oversight upon its occurrence or as requested; and (iii) report the failure of a project to achieve projected savings and a proposed corrective action plan for the project to the house and senate committees on ways, the house committee on technology and intergovernmental affairs and the joint committee on state administration and regulatory oversight upon its occurrence or as requested.