(a) Subject to § 620.004, a governmental entity shall adopt a policy prohibiting the installation or use of a covered application on any device owned or leased by the governmental entity and requiring the removal of covered applications from those devices.
(b) The Department of Information Resources and the Department of Public Safety shall jointly develop a model policy for governmental entities to use in developing the policy required by Subsection (a).