Amend CSHB 8 (house committee report) as follows:
(1) On page 11, strike lines 24-27 and substitute the following:
(2) not later than 48 hours after the discovery of the breach, suspected breach, or unauthorized exposure, notify:
(A) the department, including the chief information security officer and the state cybersecurity coordinator; or
(B) if the breach, suspected breach, or unauthorized exposure involves election data, the secretary of state.
(2) On page 20, line 9, between "(d)" and "Not", insert the following:
A state agency may not destroy or arrange for the destruction of any election data before the third anniversary of the date the election to which the data pertains is held.
(e)