| |
| |
|
|
A BILL TO BE ENTITLED
|
|
|
AN ACT
|
|
|
relating to cybersecurity of voter registration lists and other |
|
|
election-related documents, systems, and technology. |
|
|
BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS: |
|
|
SECTION 1. Title 16, Election Code, is amended by adding |
|
|
Chapter 279 to read as follows: |
|
|
CHAPTER 279. CYBERSECURITY OF ELECTION SYSTEMS |
|
|
Sec. 279.001. DEFINITION. In this chapter, "election data" |
|
|
means voter registration information and other election-related |
|
|
documents, systems, and technology. |
|
|
Sec. 279.002. ELECTION CYBERSECURITY: SECRETARY OF STATE. |
|
|
(a) The secretary of state shall adopt rules establishing best |
|
|
practices for the electronic storage and security of election data. |
|
|
(b) The secretary of state shall offer training on best |
|
|
practices: |
|
|
(1) on an annual basis, to all appropriate personnel |
|
|
in the secretary of state's office; and |
|
|
(2) on request, to county election officers in this |
|
|
state. |
|
|
(c) If the secretary of state becomes aware of a breach of |
|
|
cybersecurity that impacts election data, the secretary shall |
|
|
immediately notify the members of the standing committees of each |
|
|
house of the legislature with jurisdiction over elections. |
|
|
Sec. 279.003. ELECTION CYBERSECURITY: VOTER REGISTRARS AND |
|
|
COUNTY CLERKS. (a) A voter registrar or county clerk shall |
|
|
request training on cybersecurity: |
|
|
(1) from the secretary of state; and |
|
|
(2) on an annual basis from another provider of |
|
|
cybersecurity training, if the registrar or clerk has available |
|
|
state funds for that purpose. |
|
|
(b) If a voter registrar or county clerk becomes aware of a |
|
|
breach of cybersecurity that impacts election data, the registrar |
|
|
or clerk shall immediately notify the secretary of state. |
|
|
(c) To the extent that state funds are available for the |
|
|
purpose, a voter registrar or county clerk shall implement endpoint |
|
|
security to ensure that all devices with access to election data |
|
|
comply to the highest extent possible with rules adopted by the |
|
|
secretary of state under Section 279.002. |
|
|
SECTION 2. This Act takes effect September 1, 2019. |