There is hereby established a data privacy and information technology security governance board to oversee the department’s use of data, data privacy, and information technology security that shall be maintained by the department of health and human services.