Legacy IT Reduction Act of 2023

This bill requires federal agencies to reduce their reliance on and spending on old information technology systems by creating inventories and modernization plans. It also sets rules for guidance, review, and protection of sensitive information.

Sec. 3, Legacy information technology system inventory: Within one year of enactment and again five years later, each agency's Chief Information Officer must create a list of all legacy IT systems the agency uses. The Director of the Office of Management and Budget (OMB) will issue guidance on what details to include, such as the system's name, what mission it supports, whether it connects to newer systems, the date of its last update, annual operating costs, vendor information, and the expected date of its next update or retirement. Agencies must share this inventory with Congress, the Comptroller General, or an inspector general upon request.

Sec. 4, Agency legacy information technology systems modernization plans: Within two years of enactment and every five years after, each agency head must create a plan to modernize its legacy IT systems and include it in the agency's strategic plan. The plan must list the agency's legacy systems, identify which ones are priorities for updates or retirement, describe steps to be taken over the next five years, and may include details on the agency's capacity to maintain updated systems, estimated costs and funding sources, ability to adapt to changes, and the effect of changes on connected non-legacy systems. The plan must be submitted to specific Senate and House committees within 30 days.

Sec. 5, Role of the Office of Management and Budget: Within 180 days of enactment, the OMB Director, working with the Office of Electronic Government, must issue guidance on implementing this bill. This guidance will include criteria for defining a legacy IT system, templates for the inventory and modernization plans, and any other needed instructions.

Sec. 6, Comptroller General review: Within three years of enactment, the Comptroller General must report to Senate and House committees on how this bill is being implemented and how it works alongside other IT modernization efforts, such as the Technology Modernization Fund, the IT working capital fund, and programs like 18F and 10X.

Sec. 7, Protection of sensitive information; exemption of national security systems: This bill does not require agencies to disclose information protected by other laws or that would compromise federal IT security. It also does not authorize or require agencies to inventory, report on, or transfer national security systems. Additionally, it does not authorize transferring legacy IT systems or equipment to the Chinese Communist Party, the People's Republic of China, or any entity it controls.

Sec. 8, No new funds; sunset: No additional funds are authorized for this bill, and it will expire six years after enactment.