| 1 | | - | Senate Bill No. 1328 CHAPTER 605An act to amend Sections 2550, 13004, 13004.5, 15209, 17301, 17302, 17305, 17306, 18564, 19201, 19205, and 19281 of, to add Section 327.5 to, and to add Chapter 7 (commencing with Section 17600) to Division 17 of, the Elections Code, relating to elections, and declaring the urgency thereof, to take effect immediately. [ Approved by Governor September 25, 2024. Filed with Secretary of State September 25, 2024. ] LEGISLATIVE COUNSEL'S DIGESTSB 1328, Bradford. Elections.(1) Existing law generally requires electronic poll books, ballot manufacturers and finishers, ballot on demand systems, voting systems, and remote accessible vote by mail systems to be approved by the Secretary of State before their use in an election.This bill would authorize the Secretary of State to impose additional conditions of approval for these purposes.(2) Existing law requires a ballot card manufacturer, ballot card finisher, or ballot on demand system vendor to notify the Secretary of State and affected local elections officials in writing within 2 business days after discovering any flaw or defect that could adversely affect the future casting or tallying of votes.This bill would instead require a ballot card manufacturer, ballot card finisher, or ballot on demand system vendor to provide that notice within 24 hours.(3) Under existing law, specified election materials, including voted ballots, are required to be kept by county elections officials for 22 months for elections involving a federal office or for 6 months for all other elections. Existing law authorizes an elections official to open sealed ballot containers if it is necessary in a shredding or recycling process.This bill would add paper cast vote records, voted conditional voter registration ballots, and conditional voter registration voter identification envelopes to the list of materials county elections officials are required to keep. The bill would also require county elections officials to keep certain electronic data for 22 months for elections involving a federal office or for 6 months for all other elections. By imposing additional duties on county elections officials, this bill would create a state-mandated local program. The bill would prohibit an elections official from opening sealed ballot containers unless it is necessary in a shredding or recycling process.(4) Under existing law, it is a felony punishable by imprisonment for 2 to 4 years to interfere or attempt to interfere with the secrecy of voting or ballot tally software program source code or to knowingly, and without authorization, possess a key to a voting machine that has been adopted and will be used.This bill would specify that, with respect to the secrecy of voting or ballot tally software program source code, the phrase interferes or attempts to interfere with includes knowingly, and without authorization, providing unauthorized access to, or breaking the chain of custody to, certified voting technology during the lifecycle of that certified voting technology, or any finished or unfinished ballot cards. The bill would also expand the crime of knowing and unauthorized possession of a key to a voting machine that has been adopted and will be used to include knowing and unauthorized possession of credentials, passwords, or access keys to a voting machine that has been adopted and will be used. By expanding the scope of an existing crime, this bill would create a state-mandated local program.The bill would authorize the destruction or secure disposal of certified voting technology at the end of lifecycle with the written approval of the Secretary of State and the manufacturer. The bill would also require specified actions to be taken for any part or component of certified voting technology for which the chain of custody has been compromised or for which security has been breached or attempted to be breached, including that the technology be removed from service immediately.(5) Existing law prohibits a voting system from being connected to the internet and from receiving or transmitting wireless communications or wireless data transfers.This bill would prohibit establishing a network connection to any device not directly used and necessary for voting system functions and would prohibit communication by or with any component of the voting system by wireless or modem transmission. The bill would require a voting system to be used in a configuration of parallel central election management systems separated by an air-gap, as defined.(6) The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.This bill would provide that with regard to certain mandates no reimbursement is required by this act for a specified reason.With regard to any other mandates, this bill would provide that, if the Commission on State Mandates determines that the bill contains costs so mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above.This bill would declare that it is to take effect immediately as an urgency statute.Digest Key Vote: 2/3 Appropriation: NO Fiscal Committee: YES Local Program: YES Bill TextThe people of the State of California do enact as follows:SECTION 1. Section 327.5 is added to the Elections Code, to read:327.5. Jurisdiction means any county, city and county, city, or special district that conducts elections pursuant to this code.SEC. 2. Section 2550 of the Elections Code is amended to read:2550. (a) For purposes of this section, electronic poll book means an electronic list of registered voters that may be transported to the polling location. An electronic poll book shall contain all of the following voter registration data:(1) Name.(2) Address.(3) Precinct.(4) Party preference.(5) Whether or not the voter has been issued a vote by mail ballot.(6) Whether or not the vote by mail ballot has been recorded as received by the elections official.(b) An electronic poll book shall not be used unless it has been certified by the Secretary of State.(c) The Secretary of State shall adopt and publish electronic poll book standards and regulations governing the certification and use of electronic poll books.(d) The Secretary of State shall not certify an electronic poll book unless it fulfills the requirements of this section and the Secretary of States standards and regulations. The Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.SEC. 3. Section 13004 of the Elections Code is amended to read:13004. (a) The Secretary of State shall adopt regulations governing the manufacture, finishing, quality standards, distribution, and inventory control of ballot cards and ballot on demand systems.(b) A ballot printer shall not manufacture or finish ballot cards, or manufacture unfinished ballot cards, for use in California elections, or accept or solicit orders for ballot cards or unfinished ballot cards, before certification as a ballot printer by the Secretary of State. The Secretary of State may impose conditions of approval as deemed necessary by the Secretary of State.(c) For commercial ballot manufacturers and finishers, the Secretary of State shall require a biennial inspection of the certified manufacturing, finishing, and storage facilities.(d) Not later than five working days before the Secretary of State begins the initial inspection, the ballot card manufacturer or finisher shall notify or disclose to the Secretary of State in writing any known flaw or defect in its ballot card manufacturing or finishing process, or its manufactured or finished ballot cards, that could adversely affect the future casting or tallying of votes. Once approved by the Secretary of State, the ballot card manufacturer or finisher shall notify the Secretary of State and the affected local elections officials in writing within 24 hours after it discovers any flaw or defect in its ballot card manufacturing or finishing process, or its manufactured or finished ballot cards, that could adversely affect the future casting or tallying of votes.(e) For purposes of this section, ballot printer means any company or jurisdiction that manufactures, finishes, or sells ballot cards, including test ballots, for use in an election conducted pursuant to this code.SEC. 4. Section 13004.5 of the Elections Code is amended to read:13004.5. (a) A jurisdiction shall not purchase, lease, or contract for a ballot on demand system unless the ballot on demand system has been certified by the Secretary of State. The Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.(b) A vendor, company, or person shall not sell, lease, or contract with a jurisdiction for the use of a ballot on demand system unless the ballot on demand system has been certified by the Secretary of State.(c) This section does not preclude a jurisdiction from conducting research and development of a ballot on demand system. A ballot on demand system that is used for purposes of this subdivision shall not be used in an election conducted pursuant to this code unless the system has been certified by the Secretary of State.(d) Once a ballot on demand system is approved by the Secretary of State, the ballot on demand system vendor shall notify the Secretary of State and the affected local elections officials in writing within 24 hours after it discovers any flaw or defect in its ballot on demand system that could adversely affect the future casting or tallying of votes.(e) The Secretary of State shall promulgate regulations for purposes of certifying ballot on demand systems.SEC. 5. Section 15209 of the Elections Code is amended to read:15209. Any magnetic or electronic storage medium, or copy thereof, used for the ballot tabulation program and any magnetic or electronic storage medium, or copy thereof, containing election results shall be kept in a secure location and shall be retained for 6 months following any local election and 22 months following any federal election or so long thereafter as any contest involving the vote at the local or federal election remains undetermined.SEC. 6. Section 17301 of the Elections Code is amended to read:17301. (a) The following provisions shall apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) The packages containing the following items shall be kept by the elections official, unopened and unaltered, for 22 months from the date of the election:(1) Voted polling place ballots.(2) Paper cast vote records, as defined by Sections 305.5 and 19271.(3) Voted vote by mail voter ballots.(4) Vote by mail voter identification envelopes.(5) Voted provisional voter ballots.(6) Voted conditional voter registration ballots.(7) Provisional ballot voter identification envelopes, including conditional voter registration voter identification envelopes cast pursuant to subdivision (e) of Section 2170.(8) Spoiled ballots.(9) Canceled ballots.(10) Unused vote by mail ballots surrendered by the voter pursuant to Section 3015.(c) If a contest is not commenced within the 22-month period, or if a criminal prosecution involving fraudulent use, marking or falsification of ballots, or forgery of vote by mail voters signatures is not commenced within the 22-month period, either of which may involve the vote of the precinct from which voted ballots were received, the elections official shall have the items identified in subdivision (b) destroyed or recycled. The packages shall otherwise remain unopened until the items are destroyed or recycled.SEC. 7. Section 17302 of the Elections Code is amended to read:17302. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17301. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) The packages containing the following items shall be kept by the elections official, unopened and unaltered, for six months from the date of the election:(1) Voted polling place ballots.(2) Paper cast vote records, as defined by Sections 305.5 and 19271.(3) Voted vote by mail voter ballots.(4) Vote by mail voter identification envelopes.(5) Voted provisional voter ballots.(6) Voted conditional voter registration ballots.(7) Provisional ballot voter identification envelopes, including conditional voter registration voter identification envelopes cast pursuant to subdivision (e) of Section 2170.(8) Spoiled ballots.(9) Canceled ballots.(10) Unused vote by mail ballots surrendered by the voter pursuant to Section 3015.(c) If a contest is not commenced within the six-month period, or if a criminal prosecution involving fraudulent use, marking or falsification of ballots, or forgery of vote by mail voters signatures is not commenced within the six-month period, either of which may involve the vote of the precinct from which voted ballots were received, the elections official shall have the items identified in subdivision (b) destroyed or recycled. The packages shall otherwise remain unopened until the items are destroyed or recycled.SEC. 8. Section 17305 of the Elections Code is amended to read:17305. (a) The following provisions apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) Upon the completion of the counting of the votes as provided in Article 4 (commencing with Section 15640) of Chapter 9 of Division 15, all items specified in subdivision (b) of Section 17301 shall be kept by the elections official for 22 months from the date of the election or so long thereafter as any contest involving the vote at the election remains undetermined.(c) Notwithstanding any other provision of this code, the final disposition of all items specified in subdivision (b) of Section 17301 shall be determined by the elections official.(d) Sealed ballot containers shall not be opened unless the elections official determines it is necessary in a shredding or recycling process. This section shall not be construed to allow packages or containers to be opened except for purposes specified herein. The packages or containers shall otherwise remain unopened until the ballots and paper cast vote records are destroyed or recycled.SEC. 9. Section 17306 of the Elections Code is amended to read:17306. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17305. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) Upon the completion of the counting of the votes as provided in Article 4 (commencing with Section 15640) of Chapter 9 of Division 15, all items specified in subdivision (b) of Section 17302 shall be kept by the elections official for six months from the date of the election or so long thereafter as any contest involving the vote at the election remains undetermined.(c) Notwithstanding any other provision of this code, the final disposition of all items specified in subdivision (b) of Section 17302 shall be determined by the elections official.(d) Sealed ballot containers shall not be opened unless the elections official determines it is necessary in a shredding or recycling process. This section shall not be construed to allow packages or containers to be opened except for purposes specified herein. The packages or containers shall otherwise remain unopened until the ballots and paper cast vote records are destroyed or recycled.SEC. 10. Chapter 7 (commencing with Section 17600) is added to Division 17 of the Elections Code, to read: CHAPTER 7. Preservation of Electronic Data17600. For purposes of this chapter, the following terms have the following meanings:(a) Ballot image means an electronically captured or generated image of a ballot that is created on a voting device or machine, which contains a list of contests on the ballot, may contain the voter selections for those contests, and complies with the ballot layout requirements.(b) Certified voting technology means any certified voting technologies certified by the Secretary of State, including voting systems, ballot on demand printing systems, electronic poll book systems, or adjudication systems, and the hardware, firmware, software, proprietary intellectual property they contain, any components, and any products they generate, including ballots, ballot images, reports, logs, cast vote records, or electronic data.(c) Chain of custody means a process used to track the movement and control of certified voting technology, as defined in subdivision (b), through its lifecycle by documenting each person and organization who handles certified voting technology, the date and time it was collected or transferred, and the purpose of the transfer. A break in the chain of custody refers to a period during which control of the certified voting technology is uncertain and during which actions taken on the certified voting technology are unaccounted for or unconfirmed.(d) Electronic data includes voting technology software, operating systems, databases, firmware, drivers, and logs.(e) End of lifecycle means the secure clearing or wiping of the certified voting technology so that no software, firmware, or data remains on the equipment and the equipment becomes a nonfunctioning piece of hardware.(f) HASH means a mathematical algorithm used to create a digital fingerprint of a software program, which is used to validate software as identical to the original.(g) Lifecycle of certified voting technology means the entire lifecycle of the certified voting technology from the time of certification and trusted build creation through the end of lifecycle of the certified voting technology.17601. (a) The following provisions shall apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) The following data shall be kept by the elections official, on electronic media, stored and unaltered, for 22 months from the date of the election:(1) All voting system electronic data.(2) All ballot on demand system electronic data, if applicable.(3) All adjudication electronic data.(4) All remote accessible vote by mail system electronic data, if applicable.(5) All electronic poll book electronic data, if applicable.(6) HASH values taken from the voting technology devices, if applicable.(7) All ballot images.(c) If a contest is not commenced within the 22-month period, or if a criminal prosecution involving fraudulent use, using the ballot tally system to mark or falsify ballots, or manipulation of the ballot tally system, is not commenced within the 22-month period, either of which may involve the vote count of the precinct from which voted ballots were received, the elections official shall have the backups destroyed.17602. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17601. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) The following data shall be kept by the elections official, on electronic media, stored and unaltered, for six months from the date of the election:(1) All voting system electronic data.(2) All ballot on demand system electronic data, if applicable.(3) All adjudication electronic data.(4) All remote accessible vote by mail system electronic data, if applicable.(5) All electronic poll book electronic data, if applicable.(6) HASH values taken from the voting technology devices, if applicable.(7) All ballot images, if applicable.(c) If a contest is not commenced within the six-month period, or if a criminal prosecution involving fraudulent use, using the ballot tally system to mark or falsify ballots, or manipulation of the ballot tally system is not commenced within the six-month period, either of which may involve the vote count of the precinct from which voted ballots were received, the elections official shall have the backups destroyed.17603. (a) Certified voting technology equipment and components that are at the end of lifecycle may be securely disposed of or destroyed with the written approval of the manufacturer and the Secretary of State.(b) With respect to any part or component of certified voting technology for which the chain of custody has been compromised or the security or information has been breached or attempted to be breached, all of the following shall occur:(1) The chief elections official of the city, county, or special district and the Secretary of State shall be notified within 24 hours of discovery.(2) The equipment shall be removed from service immediately and replaced if possible.(3) The integrity and reliability of the certified voting technology system, components, and accompanying electronic data shall be evaluated to determine whether they can be restored to their original state and reinstated.SEC. 11. Section 18564 of the Elections Code is amended to read:18564. (a) Any person is guilty of a felony, punishable by imprisonment pursuant to subdivision (h) of Section 1170 of the Penal Code for two, three, or four years who, before or during an election:(1) Tampers with, interferes with, or attempts to interfere with, the correct operation of, or willfully damages in order to prevent the use of, any voting machine, voting device, voting system, vote tabulating device, or ballot tally software program source codes.(2) (A) Interferes or attempts to interfere with the secrecy of voting or ballot tally software program source codes.(B) For purposes of this paragraph, interferes or attempts to interfere with includes knowingly, and without authorization, providing unauthorized access to, or breaking the chain of custody to, either of the following:(i) Certified voting technology during the lifecycle of that certified voting technology.(ii) Any finished or unfinished ballot cards.(3) Knowingly, and without authorization, makes or has in the persons possession credentials, passwords, or access keys to a voting machine that has been adopted and will be used in elections in this state.(4) Willfully substitutes or attempts to substitute forged or counterfeit ballot tally software program source codes.(b) The definitions in Section 17600 apply for purposes of this section.SEC. 12. Section 19201 of the Elections Code is amended to read:19201. (a) (1) The Secretary of State may grant conditional approval to a voting system or part of a voting system under either of the following circumstances:(A) A voting system or part of a voting system was decertified as a result of a review by the Secretary of State pursuant to Section 19232.(B) A certified voting system or part of that voting system is modified to comply with voting system standards or changes in statute.(2) For purposes of granting conditional approval to a voting system or part of a voting system pursuant to paragraph (1), the Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.(b) The Secretary of State may withdraw conditional approval at any time pursuant to Section 19232.SEC. 13. Section 19205 of the Elections Code is amended to read:19205. A voting system shall comply with all of the following:(a) No part of the voting system shall be connected to the internet at any time.(b) No part of the voting system shall electronically receive or transmit election data through an exterior communication network, including the public telephone system, if the communication originates from or terminates at a polling place, satellite location, or counting center.(c) (1) No part of the voting system shall receive or transmit wireless communications or wireless data transfers.(2) A network connection to any device not directly used and necessary for voting system functions shall not be established. Communication by or with any component of the voting system by wireless or modem transmission at any time is prohibited. A component of the voting system, or any device with network connectivity to the voting system, shall not be connected to the internet, directly or indirectly, at any time.(d) (1) The voting system shall be used in a configuration of parallel central election management systems separated by an air-gap.(2) For purposes of this subdivision, air-gap includes all of the following:(A) A permanent central system known to be running unaltered, certified software and firmware that is used solely to define elections and program voting equipment and memory cards.(B) A physically isolated duplicate system, reformatted after every election to guard against the possibility of infection, that is used solely to read memory cards containing vote results, accumulate and tabulate those results, and produce reports.(C) A separate computer dedicated solely to this purpose that is used to reformat all memory devices before they are connected to the permanent system again.SEC. 14. Section 19281 of the Elections Code is amended to read:19281. (a) A remote accessible vote by mail system, in whole or in part, shall not be used unless it has been certified or conditionally approved by the Secretary of State before the election at which it is to be first used. The Secretary of State may impose additional conditions of approval as deemed necessary for the certification of the remote accessible vote by mail system.(b) All other uses of a remote accessible vote by mail system shall be subject to the provisions of Section 19202.SEC. 15. No reimbursement is required by this act pursuant to Section 6 of Article XIIIB of the California Constitution for certain costs that may be incurred by a local agency or school district because, in that regard, this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIIIB of the California Constitution.However, if the Commission on State Mandates determines that this act contains other costs mandated by the state, reimbursement to local agencies and school districts for those costs shall be made pursuant to Part 7 (commencing with Section 17500) of Division 4 of Title 2 of the Government Code.SEC. 16. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:To ensure that adequate protections for voting systems and voter data are implemented in time for the 2024 presidential general election, it is necessary that this act take effect immediately. |
|---|
| 1 | + | Enrolled September 05, 2024 Passed IN Senate August 30, 2024 Passed IN Assembly August 29, 2024 Amended IN Assembly August 23, 2024 Amended IN Assembly June 13, 2024 CALIFORNIA LEGISLATURE 20232024 REGULAR SESSION Senate Bill No. 1328Introduced by Senator Bradford(Coauthor: Senator Atkins)February 16, 2024An act to amend Sections 2550, 13004, 13004.5, 15209, 17301, 17302, 17305, 17306, 18564, 19201, 19205, and 19281 of, to add Section 327.5 to, and to add Chapter 7 (commencing with Section 17600) to Division 17 of, the Elections Code, relating to elections, and declaring the urgency thereof, to take effect immediately.LEGISLATIVE COUNSEL'S DIGESTSB 1328, Bradford. Elections.(1) Existing law generally requires electronic poll books, ballot manufacturers and finishers, ballot on demand systems, voting systems, and remote accessible vote by mail systems to be approved by the Secretary of State before their use in an election.This bill would authorize the Secretary of State to impose additional conditions of approval for these purposes.(2) Existing law requires a ballot card manufacturer, ballot card finisher, or ballot on demand system vendor to notify the Secretary of State and affected local elections officials in writing within 2 business days after discovering any flaw or defect that could adversely affect the future casting or tallying of votes.This bill would instead require a ballot card manufacturer, ballot card finisher, or ballot on demand system vendor to provide that notice within 24 hours.(3) Under existing law, specified election materials, including voted ballots, are required to be kept by county elections officials for 22 months for elections involving a federal office or for 6 months for all other elections. Existing law authorizes an elections official to open sealed ballot containers if it is necessary in a shredding or recycling process.This bill would add paper cast vote records, voted conditional voter registration ballots, and conditional voter registration voter identification envelopes to the list of materials county elections officials are required to keep. The bill would also require county elections officials to keep certain electronic data for 22 months for elections involving a federal office or for 6 months for all other elections. By imposing additional duties on county elections officials, this bill would create a state-mandated local program. The bill would prohibit an elections official from opening sealed ballot containers unless it is necessary in a shredding or recycling process.(4) Under existing law, it is a felony punishable by imprisonment for 2 to 4 years to interfere or attempt to interfere with the secrecy of voting or ballot tally software program source code or to knowingly, and without authorization, possess a key to a voting machine that has been adopted and will be used.This bill would specify that, with respect to the secrecy of voting or ballot tally software program source code, the phrase interferes or attempts to interfere with includes knowingly, and without authorization, providing unauthorized access to, or breaking the chain of custody to, certified voting technology during the lifecycle of that certified voting technology, or any finished or unfinished ballot cards. The bill would also expand the crime of knowing and unauthorized possession of a key to a voting machine that has been adopted and will be used to include knowing and unauthorized possession of credentials, passwords, or access keys to a voting machine that has been adopted and will be used. By expanding the scope of an existing crime, this bill would create a state-mandated local program.The bill would authorize the destruction or secure disposal of certified voting technology at the end of lifecycle with the written approval of the Secretary of State and the manufacturer. The bill would also require specified actions to be taken for any part or component of certified voting technology for which the chain of custody has been compromised or for which security has been breached or attempted to be breached, including that the technology be removed from service immediately.(5) Existing law prohibits a voting system from being connected to the internet and from receiving or transmitting wireless communications or wireless data transfers.This bill would prohibit establishing a network connection to any device not directly used and necessary for voting system functions and would prohibit communication by or with any component of the voting system by wireless or modem transmission. The bill would require a voting system to be used in a configuration of parallel central election management systems separated by an air-gap, as defined.(6) The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.This bill would provide that with regard to certain mandates no reimbursement is required by this act for a specified reason.With regard to any other mandates, this bill would provide that, if the Commission on State Mandates determines that the bill contains costs so mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above.This bill would declare that it is to take effect immediately as an urgency statute.Digest Key Vote: 2/3 Appropriation: NO Fiscal Committee: YES Local Program: YES Bill TextThe people of the State of California do enact as follows:SECTION 1. Section 327.5 is added to the Elections Code, to read:327.5. Jurisdiction means any county, city and county, city, or special district that conducts elections pursuant to this code.SEC. 2. Section 2550 of the Elections Code is amended to read:2550. (a) For purposes of this section, electronic poll book means an electronic list of registered voters that may be transported to the polling location. An electronic poll book shall contain all of the following voter registration data:(1) Name.(2) Address.(3) Precinct.(4) Party preference.(5) Whether or not the voter has been issued a vote by mail ballot.(6) Whether or not the vote by mail ballot has been recorded as received by the elections official.(b) An electronic poll book shall not be used unless it has been certified by the Secretary of State.(c) The Secretary of State shall adopt and publish electronic poll book standards and regulations governing the certification and use of electronic poll books.(d) The Secretary of State shall not certify an electronic poll book unless it fulfills the requirements of this section and the Secretary of States standards and regulations. The Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.SEC. 3. Section 13004 of the Elections Code is amended to read:13004. (a) The Secretary of State shall adopt regulations governing the manufacture, finishing, quality standards, distribution, and inventory control of ballot cards and ballot on demand systems.(b) A ballot printer shall not manufacture or finish ballot cards, or manufacture unfinished ballot cards, for use in California elections, or accept or solicit orders for ballot cards or unfinished ballot cards, before certification as a ballot printer by the Secretary of State. The Secretary of State may impose conditions of approval as deemed necessary by the Secretary of State.(c) For commercial ballot manufacturers and finishers, the Secretary of State shall require a biennial inspection of the certified manufacturing, finishing, and storage facilities.(d) Not later than five working days before the Secretary of State begins the initial inspection, the ballot card manufacturer or finisher shall notify or disclose to the Secretary of State in writing any known flaw or defect in its ballot card manufacturing or finishing process, or its manufactured or finished ballot cards, that could adversely affect the future casting or tallying of votes. Once approved by the Secretary of State, the ballot card manufacturer or finisher shall notify the Secretary of State and the affected local elections officials in writing within 24 hours after it discovers any flaw or defect in its ballot card manufacturing or finishing process, or its manufactured or finished ballot cards, that could adversely affect the future casting or tallying of votes.(e) For purposes of this section, ballot printer means any company or jurisdiction that manufactures, finishes, or sells ballot cards, including test ballots, for use in an election conducted pursuant to this code.SEC. 4. Section 13004.5 of the Elections Code is amended to read:13004.5. (a) A jurisdiction shall not purchase, lease, or contract for a ballot on demand system unless the ballot on demand system has been certified by the Secretary of State. The Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.(b) A vendor, company, or person shall not sell, lease, or contract with a jurisdiction for the use of a ballot on demand system unless the ballot on demand system has been certified by the Secretary of State.(c) This section does not preclude a jurisdiction from conducting research and development of a ballot on demand system. A ballot on demand system that is used for purposes of this subdivision shall not be used in an election conducted pursuant to this code unless the system has been certified by the Secretary of State.(d) Once a ballot on demand system is approved by the Secretary of State, the ballot on demand system vendor shall notify the Secretary of State and the affected local elections officials in writing within 24 hours after it discovers any flaw or defect in its ballot on demand system that could adversely affect the future casting or tallying of votes.(e) The Secretary of State shall promulgate regulations for purposes of certifying ballot on demand systems.SEC. 5. Section 15209 of the Elections Code is amended to read:15209. Any magnetic or electronic storage medium, or copy thereof, used for the ballot tabulation program and any magnetic or electronic storage medium, or copy thereof, containing election results shall be kept in a secure location and shall be retained for 6 months following any local election and 22 months following any federal election or so long thereafter as any contest involving the vote at the local or federal election remains undetermined.SEC. 6. Section 17301 of the Elections Code is amended to read:17301. (a) The following provisions shall apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) The packages containing the following items shall be kept by the elections official, unopened and unaltered, for 22 months from the date of the election:(1) Voted polling place ballots.(2) Paper cast vote records, as defined by Sections 305.5 and 19271.(3) Voted vote by mail voter ballots.(4) Vote by mail voter identification envelopes.(5) Voted provisional voter ballots.(6) Voted conditional voter registration ballots.(7) Provisional ballot voter identification envelopes, including conditional voter registration voter identification envelopes cast pursuant to subdivision (e) of Section 2170.(8) Spoiled ballots.(9) Canceled ballots.(10) Unused vote by mail ballots surrendered by the voter pursuant to Section 3015.(c) If a contest is not commenced within the 22-month period, or if a criminal prosecution involving fraudulent use, marking or falsification of ballots, or forgery of vote by mail voters signatures is not commenced within the 22-month period, either of which may involve the vote of the precinct from which voted ballots were received, the elections official shall have the items identified in subdivision (b) destroyed or recycled. The packages shall otherwise remain unopened until the items are destroyed or recycled.SEC. 7. Section 17302 of the Elections Code is amended to read:17302. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17301. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) The packages containing the following items shall be kept by the elections official, unopened and unaltered, for six months from the date of the election:(1) Voted polling place ballots.(2) Paper cast vote records, as defined by Sections 305.5 and 19271.(3) Voted vote by mail voter ballots.(4) Vote by mail voter identification envelopes.(5) Voted provisional voter ballots.(6) Voted conditional voter registration ballots.(7) Provisional ballot voter identification envelopes, including conditional voter registration voter identification envelopes cast pursuant to subdivision (e) of Section 2170.(8) Spoiled ballots.(9) Canceled ballots.(10) Unused vote by mail ballots surrendered by the voter pursuant to Section 3015.(c) If a contest is not commenced within the six-month period, or if a criminal prosecution involving fraudulent use, marking or falsification of ballots, or forgery of vote by mail voters signatures is not commenced within the six-month period, either of which may involve the vote of the precinct from which voted ballots were received, the elections official shall have the items identified in subdivision (b) destroyed or recycled. The packages shall otherwise remain unopened until the items are destroyed or recycled.SEC. 8. Section 17305 of the Elections Code is amended to read:17305. (a) The following provisions apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) Upon the completion of the counting of the votes as provided in Article 4 (commencing with Section 15640) of Chapter 9 of Division 15, all items specified in subdivision (b) of Section 17301 shall be kept by the elections official for 22 months from the date of the election or so long thereafter as any contest involving the vote at the election remains undetermined.(c) Notwithstanding any other provision of this code, the final disposition of all items specified in subdivision (b) of Section 17301 shall be determined by the elections official.(d) Sealed ballot containers shall not be opened unless the elections official determines it is necessary in a shredding or recycling process. This section shall not be construed to allow packages or containers to be opened except for purposes specified herein. The packages or containers shall otherwise remain unopened until the ballots and paper cast vote records are destroyed or recycled.SEC. 9. Section 17306 of the Elections Code is amended to read:17306. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17305. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) Upon the completion of the counting of the votes as provided in Article 4 (commencing with Section 15640) of Chapter 9 of Division 15, all items specified in subdivision (b) of Section 17302 shall be kept by the elections official for six months from the date of the election or so long thereafter as any contest involving the vote at the election remains undetermined.(c) Notwithstanding any other provision of this code, the final disposition of all items specified in subdivision (b) of Section 17302 shall be determined by the elections official.(d) Sealed ballot containers shall not be opened unless the elections official determines it is necessary in a shredding or recycling process. This section shall not be construed to allow packages or containers to be opened except for purposes specified herein. The packages or containers shall otherwise remain unopened until the ballots and paper cast vote records are destroyed or recycled.SEC. 10. Chapter 7 (commencing with Section 17600) is added to Division 17 of the Elections Code, to read: CHAPTER 7. Preservation of Electronic Data17600. For purposes of this chapter, the following terms have the following meanings:(a) Ballot image means an electronically captured or generated image of a ballot that is created on a voting device or machine, which contains a list of contests on the ballot, may contain the voter selections for those contests, and complies with the ballot layout requirements.(b) Certified voting technology means any certified voting technologies certified by the Secretary of State, including voting systems, ballot on demand printing systems, electronic poll book systems, or adjudication systems, and the hardware, firmware, software, proprietary intellectual property they contain, any components, and any products they generate, including ballots, ballot images, reports, logs, cast vote records, or electronic data.(c) Chain of custody means a process used to track the movement and control of certified voting technology, as defined in subdivision (b), through its lifecycle by documenting each person and organization who handles certified voting technology, the date and time it was collected or transferred, and the purpose of the transfer. A break in the chain of custody refers to a period during which control of the certified voting technology is uncertain and during which actions taken on the certified voting technology are unaccounted for or unconfirmed.(d) Electronic data includes voting technology software, operating systems, databases, firmware, drivers, and logs.(e) End of lifecycle means the secure clearing or wiping of the certified voting technology so that no software, firmware, or data remains on the equipment and the equipment becomes a nonfunctioning piece of hardware.(f) HASH means a mathematical algorithm used to create a digital fingerprint of a software program, which is used to validate software as identical to the original.(g) Lifecycle of certified voting technology means the entire lifecycle of the certified voting technology from the time of certification and trusted build creation through the end of lifecycle of the certified voting technology.17601. (a) The following provisions shall apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) The following data shall be kept by the elections official, on electronic media, stored and unaltered, for 22 months from the date of the election:(1) All voting system electronic data.(2) All ballot on demand system electronic data, if applicable.(3) All adjudication electronic data.(4) All remote accessible vote by mail system electronic data, if applicable.(5) All electronic poll book electronic data, if applicable.(6) HASH values taken from the voting technology devices, if applicable.(7) All ballot images.(c) If a contest is not commenced within the 22-month period, or if a criminal prosecution involving fraudulent use, using the ballot tally system to mark or falsify ballots, or manipulation of the ballot tally system, is not commenced within the 22-month period, either of which may involve the vote count of the precinct from which voted ballots were received, the elections official shall have the backups destroyed.17602. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17601. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) The following data shall be kept by the elections official, on electronic media, stored and unaltered, for six months from the date of the election:(1) All voting system electronic data.(2) All ballot on demand system electronic data, if applicable.(3) All adjudication electronic data.(4) All remote accessible vote by mail system electronic data, if applicable.(5) All electronic poll book electronic data, if applicable.(6) HASH values taken from the voting technology devices, if applicable.(7) All ballot images, if applicable.(c) If a contest is not commenced within the six-month period, or if a criminal prosecution involving fraudulent use, using the ballot tally system to mark or falsify ballots, or manipulation of the ballot tally system is not commenced within the six-month period, either of which may involve the vote count of the precinct from which voted ballots were received, the elections official shall have the backups destroyed.17603. (a) Certified voting technology equipment and components that are at the end of lifecycle may be securely disposed of or destroyed with the written approval of the manufacturer and the Secretary of State.(b) With respect to any part or component of certified voting technology for which the chain of custody has been compromised or the security or information has been breached or attempted to be breached, all of the following shall occur:(1) The chief elections official of the city, county, or special district and the Secretary of State shall be notified within 24 hours of discovery.(2) The equipment shall be removed from service immediately and replaced if possible.(3) The integrity and reliability of the certified voting technology system, components, and accompanying electronic data shall be evaluated to determine whether they can be restored to their original state and reinstated.SEC. 11. Section 18564 of the Elections Code is amended to read:18564. (a) Any person is guilty of a felony, punishable by imprisonment pursuant to subdivision (h) of Section 1170 of the Penal Code for two, three, or four years who, before or during an election:(1) Tampers with, interferes with, or attempts to interfere with, the correct operation of, or willfully damages in order to prevent the use of, any voting machine, voting device, voting system, vote tabulating device, or ballot tally software program source codes.(2) (A) Interferes or attempts to interfere with the secrecy of voting or ballot tally software program source codes.(B) For purposes of this paragraph, interferes or attempts to interfere with includes knowingly, and without authorization, providing unauthorized access to, or breaking the chain of custody to, either of the following:(i) Certified voting technology during the lifecycle of that certified voting technology.(ii) Any finished or unfinished ballot cards.(3) Knowingly, and without authorization, makes or has in the persons possession credentials, passwords, or access keys to a voting machine that has been adopted and will be used in elections in this state.(4) Willfully substitutes or attempts to substitute forged or counterfeit ballot tally software program source codes.(b) The definitions in Section 17600 apply for purposes of this section.SEC. 12. Section 19201 of the Elections Code is amended to read:19201. (a) (1) The Secretary of State may grant conditional approval to a voting system or part of a voting system under either of the following circumstances:(A) A voting system or part of a voting system was decertified as a result of a review by the Secretary of State pursuant to Section 19232.(B) A certified voting system or part of that voting system is modified to comply with voting system standards or changes in statute.(2) For purposes of granting conditional approval to a voting system or part of a voting system pursuant to paragraph (1), the Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.(b) The Secretary of State may withdraw conditional approval at any time pursuant to Section 19232.SEC. 13. Section 19205 of the Elections Code is amended to read:19205. A voting system shall comply with all of the following:(a) No part of the voting system shall be connected to the internet at any time.(b) No part of the voting system shall electronically receive or transmit election data through an exterior communication network, including the public telephone system, if the communication originates from or terminates at a polling place, satellite location, or counting center.(c) (1) No part of the voting system shall receive or transmit wireless communications or wireless data transfers.(2) A network connection to any device not directly used and necessary for voting system functions shall not be established. Communication by or with any component of the voting system by wireless or modem transmission at any time is prohibited. A component of the voting system, or any device with network connectivity to the voting system, shall not be connected to the internet, directly or indirectly, at any time.(d) (1) The voting system shall be used in a configuration of parallel central election management systems separated by an air-gap.(2) For purposes of this subdivision, air-gap includes all of the following:(A) A permanent central system known to be running unaltered, certified software and firmware that is used solely to define elections and program voting equipment and memory cards.(B) A physically isolated duplicate system, reformatted after every election to guard against the possibility of infection, that is used solely to read memory cards containing vote results, accumulate and tabulate those results, and produce reports.(C) A separate computer dedicated solely to this purpose that is used to reformat all memory devices before they are connected to the permanent system again.SEC. 14. Section 19281 of the Elections Code is amended to read:19281. (a) A remote accessible vote by mail system, in whole or in part, shall not be used unless it has been certified or conditionally approved by the Secretary of State before the election at which it is to be first used. The Secretary of State may impose additional conditions of approval as deemed necessary for the certification of the remote accessible vote by mail system.(b) All other uses of a remote accessible vote by mail system shall be subject to the provisions of Section 19202.SEC. 15. No reimbursement is required by this act pursuant to Section 6 of Article XIIIB of the California Constitution for certain costs that may be incurred by a local agency or school district because, in that regard, this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIIIB of the California Constitution.However, if the Commission on State Mandates determines that this act contains other costs mandated by the state, reimbursement to local agencies and school districts for those costs shall be made pursuant to Part 7 (commencing with Section 17500) of Division 4 of Title 2 of the Government Code.SEC. 16. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:To ensure that adequate protections for voting systems and voter data are implemented in time for the 2024 presidential general election, it is necessary that this act take effect immediately. |
|---|
| 14 | 25 | | |
|---|
| 15 | 26 | | LEGISLATIVE COUNSEL'S DIGEST |
|---|
| 16 | 27 | | |
|---|
| 17 | 28 | | ## LEGISLATIVE COUNSEL'S DIGEST |
|---|
| 18 | 29 | | |
|---|
| 19 | 30 | | SB 1328, Bradford. Elections. |
|---|
| 20 | 31 | | |
|---|
| 21 | 32 | | (1) Existing law generally requires electronic poll books, ballot manufacturers and finishers, ballot on demand systems, voting systems, and remote accessible vote by mail systems to be approved by the Secretary of State before their use in an election.This bill would authorize the Secretary of State to impose additional conditions of approval for these purposes.(2) Existing law requires a ballot card manufacturer, ballot card finisher, or ballot on demand system vendor to notify the Secretary of State and affected local elections officials in writing within 2 business days after discovering any flaw or defect that could adversely affect the future casting or tallying of votes.This bill would instead require a ballot card manufacturer, ballot card finisher, or ballot on demand system vendor to provide that notice within 24 hours.(3) Under existing law, specified election materials, including voted ballots, are required to be kept by county elections officials for 22 months for elections involving a federal office or for 6 months for all other elections. Existing law authorizes an elections official to open sealed ballot containers if it is necessary in a shredding or recycling process.This bill would add paper cast vote records, voted conditional voter registration ballots, and conditional voter registration voter identification envelopes to the list of materials county elections officials are required to keep. The bill would also require county elections officials to keep certain electronic data for 22 months for elections involving a federal office or for 6 months for all other elections. By imposing additional duties on county elections officials, this bill would create a state-mandated local program. The bill would prohibit an elections official from opening sealed ballot containers unless it is necessary in a shredding or recycling process.(4) Under existing law, it is a felony punishable by imprisonment for 2 to 4 years to interfere or attempt to interfere with the secrecy of voting or ballot tally software program source code or to knowingly, and without authorization, possess a key to a voting machine that has been adopted and will be used.This bill would specify that, with respect to the secrecy of voting or ballot tally software program source code, the phrase interferes or attempts to interfere with includes knowingly, and without authorization, providing unauthorized access to, or breaking the chain of custody to, certified voting technology during the lifecycle of that certified voting technology, or any finished or unfinished ballot cards. The bill would also expand the crime of knowing and unauthorized possession of a key to a voting machine that has been adopted and will be used to include knowing and unauthorized possession of credentials, passwords, or access keys to a voting machine that has been adopted and will be used. By expanding the scope of an existing crime, this bill would create a state-mandated local program.The bill would authorize the destruction or secure disposal of certified voting technology at the end of lifecycle with the written approval of the Secretary of State and the manufacturer. The bill would also require specified actions to be taken for any part or component of certified voting technology for which the chain of custody has been compromised or for which security has been breached or attempted to be breached, including that the technology be removed from service immediately.(5) Existing law prohibits a voting system from being connected to the internet and from receiving or transmitting wireless communications or wireless data transfers.This bill would prohibit establishing a network connection to any device not directly used and necessary for voting system functions and would prohibit communication by or with any component of the voting system by wireless or modem transmission. The bill would require a voting system to be used in a configuration of parallel central election management systems separated by an air-gap, as defined.(6) The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.This bill would provide that with regard to certain mandates no reimbursement is required by this act for a specified reason.With regard to any other mandates, this bill would provide that, if the Commission on State Mandates determines that the bill contains costs so mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above.This bill would declare that it is to take effect immediately as an urgency statute. |
|---|
| 22 | 33 | | |
|---|
| 23 | 34 | | (1) Existing law generally requires electronic poll books, ballot manufacturers and finishers, ballot on demand systems, voting systems, and remote accessible vote by mail systems to be approved by the Secretary of State before their use in an election. |
|---|
| 24 | 35 | | |
|---|
| 25 | 36 | | This bill would authorize the Secretary of State to impose additional conditions of approval for these purposes. |
|---|
| 26 | 37 | | |
|---|
| 27 | 38 | | (2) Existing law requires a ballot card manufacturer, ballot card finisher, or ballot on demand system vendor to notify the Secretary of State and affected local elections officials in writing within 2 business days after discovering any flaw or defect that could adversely affect the future casting or tallying of votes. |
|---|
| 28 | 39 | | |
|---|
| 29 | 40 | | This bill would instead require a ballot card manufacturer, ballot card finisher, or ballot on demand system vendor to provide that notice within 24 hours. |
|---|
| 30 | 41 | | |
|---|
| 31 | 42 | | (3) Under existing law, specified election materials, including voted ballots, are required to be kept by county elections officials for 22 months for elections involving a federal office or for 6 months for all other elections. Existing law authorizes an elections official to open sealed ballot containers if it is necessary in a shredding or recycling process. |
|---|
| 32 | 43 | | |
|---|
| 33 | 44 | | This bill would add paper cast vote records, voted conditional voter registration ballots, and conditional voter registration voter identification envelopes to the list of materials county elections officials are required to keep. The bill would also require county elections officials to keep certain electronic data for 22 months for elections involving a federal office or for 6 months for all other elections. By imposing additional duties on county elections officials, this bill would create a state-mandated local program. The bill would prohibit an elections official from opening sealed ballot containers unless it is necessary in a shredding or recycling process. |
|---|
| 34 | 45 | | |
|---|
| 35 | 46 | | (4) Under existing law, it is a felony punishable by imprisonment for 2 to 4 years to interfere or attempt to interfere with the secrecy of voting or ballot tally software program source code or to knowingly, and without authorization, possess a key to a voting machine that has been adopted and will be used. |
|---|
| 36 | 47 | | |
|---|
| 37 | 48 | | This bill would specify that, with respect to the secrecy of voting or ballot tally software program source code, the phrase interferes or attempts to interfere with includes knowingly, and without authorization, providing unauthorized access to, or breaking the chain of custody to, certified voting technology during the lifecycle of that certified voting technology, or any finished or unfinished ballot cards. The bill would also expand the crime of knowing and unauthorized possession of a key to a voting machine that has been adopted and will be used to include knowing and unauthorized possession of credentials, passwords, or access keys to a voting machine that has been adopted and will be used. By expanding the scope of an existing crime, this bill would create a state-mandated local program. |
|---|
| 38 | 49 | | |
|---|
| 39 | 50 | | The bill would authorize the destruction or secure disposal of certified voting technology at the end of lifecycle with the written approval of the Secretary of State and the manufacturer. The bill would also require specified actions to be taken for any part or component of certified voting technology for which the chain of custody has been compromised or for which security has been breached or attempted to be breached, including that the technology be removed from service immediately. |
|---|
| 40 | 51 | | |
|---|
| 41 | 52 | | (5) Existing law prohibits a voting system from being connected to the internet and from receiving or transmitting wireless communications or wireless data transfers. |
|---|
| 42 | 53 | | |
|---|
| 43 | 54 | | This bill would prohibit establishing a network connection to any device not directly used and necessary for voting system functions and would prohibit communication by or with any component of the voting system by wireless or modem transmission. The bill would require a voting system to be used in a configuration of parallel central election management systems separated by an air-gap, as defined. |
|---|
| 44 | 55 | | |
|---|
| 45 | 56 | | (6) The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement. |
|---|
| 46 | 57 | | |
|---|
| 47 | 58 | | This bill would provide that with regard to certain mandates no reimbursement is required by this act for a specified reason. |
|---|
| 48 | 59 | | |
|---|
| 49 | 60 | | With regard to any other mandates, this bill would provide that, if the Commission on State Mandates determines that the bill contains costs so mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above. |
|---|
| 50 | 61 | | |
|---|
| 51 | 62 | | This bill would declare that it is to take effect immediately as an urgency statute. |
|---|
| 52 | 63 | | |
|---|
| 53 | 64 | | ## Digest Key |
|---|
| 54 | 65 | | |
|---|
| 55 | 66 | | ## Bill Text |
|---|
| 56 | 67 | | |
|---|
| 57 | 68 | | The people of the State of California do enact as follows:SECTION 1. Section 327.5 is added to the Elections Code, to read:327.5. Jurisdiction means any county, city and county, city, or special district that conducts elections pursuant to this code.SEC. 2. Section 2550 of the Elections Code is amended to read:2550. (a) For purposes of this section, electronic poll book means an electronic list of registered voters that may be transported to the polling location. An electronic poll book shall contain all of the following voter registration data:(1) Name.(2) Address.(3) Precinct.(4) Party preference.(5) Whether or not the voter has been issued a vote by mail ballot.(6) Whether or not the vote by mail ballot has been recorded as received by the elections official.(b) An electronic poll book shall not be used unless it has been certified by the Secretary of State.(c) The Secretary of State shall adopt and publish electronic poll book standards and regulations governing the certification and use of electronic poll books.(d) The Secretary of State shall not certify an electronic poll book unless it fulfills the requirements of this section and the Secretary of States standards and regulations. The Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.SEC. 3. Section 13004 of the Elections Code is amended to read:13004. (a) The Secretary of State shall adopt regulations governing the manufacture, finishing, quality standards, distribution, and inventory control of ballot cards and ballot on demand systems.(b) A ballot printer shall not manufacture or finish ballot cards, or manufacture unfinished ballot cards, for use in California elections, or accept or solicit orders for ballot cards or unfinished ballot cards, before certification as a ballot printer by the Secretary of State. The Secretary of State may impose conditions of approval as deemed necessary by the Secretary of State.(c) For commercial ballot manufacturers and finishers, the Secretary of State shall require a biennial inspection of the certified manufacturing, finishing, and storage facilities.(d) Not later than five working days before the Secretary of State begins the initial inspection, the ballot card manufacturer or finisher shall notify or disclose to the Secretary of State in writing any known flaw or defect in its ballot card manufacturing or finishing process, or its manufactured or finished ballot cards, that could adversely affect the future casting or tallying of votes. Once approved by the Secretary of State, the ballot card manufacturer or finisher shall notify the Secretary of State and the affected local elections officials in writing within 24 hours after it discovers any flaw or defect in its ballot card manufacturing or finishing process, or its manufactured or finished ballot cards, that could adversely affect the future casting or tallying of votes.(e) For purposes of this section, ballot printer means any company or jurisdiction that manufactures, finishes, or sells ballot cards, including test ballots, for use in an election conducted pursuant to this code.SEC. 4. Section 13004.5 of the Elections Code is amended to read:13004.5. (a) A jurisdiction shall not purchase, lease, or contract for a ballot on demand system unless the ballot on demand system has been certified by the Secretary of State. The Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.(b) A vendor, company, or person shall not sell, lease, or contract with a jurisdiction for the use of a ballot on demand system unless the ballot on demand system has been certified by the Secretary of State.(c) This section does not preclude a jurisdiction from conducting research and development of a ballot on demand system. A ballot on demand system that is used for purposes of this subdivision shall not be used in an election conducted pursuant to this code unless the system has been certified by the Secretary of State.(d) Once a ballot on demand system is approved by the Secretary of State, the ballot on demand system vendor shall notify the Secretary of State and the affected local elections officials in writing within 24 hours after it discovers any flaw or defect in its ballot on demand system that could adversely affect the future casting or tallying of votes.(e) The Secretary of State shall promulgate regulations for purposes of certifying ballot on demand systems.SEC. 5. Section 15209 of the Elections Code is amended to read:15209. Any magnetic or electronic storage medium, or copy thereof, used for the ballot tabulation program and any magnetic or electronic storage medium, or copy thereof, containing election results shall be kept in a secure location and shall be retained for 6 months following any local election and 22 months following any federal election or so long thereafter as any contest involving the vote at the local or federal election remains undetermined.SEC. 6. Section 17301 of the Elections Code is amended to read:17301. (a) The following provisions shall apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) The packages containing the following items shall be kept by the elections official, unopened and unaltered, for 22 months from the date of the election:(1) Voted polling place ballots.(2) Paper cast vote records, as defined by Sections 305.5 and 19271.(3) Voted vote by mail voter ballots.(4) Vote by mail voter identification envelopes.(5) Voted provisional voter ballots.(6) Voted conditional voter registration ballots.(7) Provisional ballot voter identification envelopes, including conditional voter registration voter identification envelopes cast pursuant to subdivision (e) of Section 2170.(8) Spoiled ballots.(9) Canceled ballots.(10) Unused vote by mail ballots surrendered by the voter pursuant to Section 3015.(c) If a contest is not commenced within the 22-month period, or if a criminal prosecution involving fraudulent use, marking or falsification of ballots, or forgery of vote by mail voters signatures is not commenced within the 22-month period, either of which may involve the vote of the precinct from which voted ballots were received, the elections official shall have the items identified in subdivision (b) destroyed or recycled. The packages shall otherwise remain unopened until the items are destroyed or recycled.SEC. 7. Section 17302 of the Elections Code is amended to read:17302. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17301. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) The packages containing the following items shall be kept by the elections official, unopened and unaltered, for six months from the date of the election:(1) Voted polling place ballots.(2) Paper cast vote records, as defined by Sections 305.5 and 19271.(3) Voted vote by mail voter ballots.(4) Vote by mail voter identification envelopes.(5) Voted provisional voter ballots.(6) Voted conditional voter registration ballots.(7) Provisional ballot voter identification envelopes, including conditional voter registration voter identification envelopes cast pursuant to subdivision (e) of Section 2170.(8) Spoiled ballots.(9) Canceled ballots.(10) Unused vote by mail ballots surrendered by the voter pursuant to Section 3015.(c) If a contest is not commenced within the six-month period, or if a criminal prosecution involving fraudulent use, marking or falsification of ballots, or forgery of vote by mail voters signatures is not commenced within the six-month period, either of which may involve the vote of the precinct from which voted ballots were received, the elections official shall have the items identified in subdivision (b) destroyed or recycled. The packages shall otherwise remain unopened until the items are destroyed or recycled.SEC. 8. Section 17305 of the Elections Code is amended to read:17305. (a) The following provisions apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) Upon the completion of the counting of the votes as provided in Article 4 (commencing with Section 15640) of Chapter 9 of Division 15, all items specified in subdivision (b) of Section 17301 shall be kept by the elections official for 22 months from the date of the election or so long thereafter as any contest involving the vote at the election remains undetermined.(c) Notwithstanding any other provision of this code, the final disposition of all items specified in subdivision (b) of Section 17301 shall be determined by the elections official.(d) Sealed ballot containers shall not be opened unless the elections official determines it is necessary in a shredding or recycling process. This section shall not be construed to allow packages or containers to be opened except for purposes specified herein. The packages or containers shall otherwise remain unopened until the ballots and paper cast vote records are destroyed or recycled.SEC. 9. Section 17306 of the Elections Code is amended to read:17306. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17305. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) Upon the completion of the counting of the votes as provided in Article 4 (commencing with Section 15640) of Chapter 9 of Division 15, all items specified in subdivision (b) of Section 17302 shall be kept by the elections official for six months from the date of the election or so long thereafter as any contest involving the vote at the election remains undetermined.(c) Notwithstanding any other provision of this code, the final disposition of all items specified in subdivision (b) of Section 17302 shall be determined by the elections official.(d) Sealed ballot containers shall not be opened unless the elections official determines it is necessary in a shredding or recycling process. This section shall not be construed to allow packages or containers to be opened except for purposes specified herein. The packages or containers shall otherwise remain unopened until the ballots and paper cast vote records are destroyed or recycled.SEC. 10. Chapter 7 (commencing with Section 17600) is added to Division 17 of the Elections Code, to read: CHAPTER 7. Preservation of Electronic Data17600. For purposes of this chapter, the following terms have the following meanings:(a) Ballot image means an electronically captured or generated image of a ballot that is created on a voting device or machine, which contains a list of contests on the ballot, may contain the voter selections for those contests, and complies with the ballot layout requirements.(b) Certified voting technology means any certified voting technologies certified by the Secretary of State, including voting systems, ballot on demand printing systems, electronic poll book systems, or adjudication systems, and the hardware, firmware, software, proprietary intellectual property they contain, any components, and any products they generate, including ballots, ballot images, reports, logs, cast vote records, or electronic data.(c) Chain of custody means a process used to track the movement and control of certified voting technology, as defined in subdivision (b), through its lifecycle by documenting each person and organization who handles certified voting technology, the date and time it was collected or transferred, and the purpose of the transfer. A break in the chain of custody refers to a period during which control of the certified voting technology is uncertain and during which actions taken on the certified voting technology are unaccounted for or unconfirmed.(d) Electronic data includes voting technology software, operating systems, databases, firmware, drivers, and logs.(e) End of lifecycle means the secure clearing or wiping of the certified voting technology so that no software, firmware, or data remains on the equipment and the equipment becomes a nonfunctioning piece of hardware.(f) HASH means a mathematical algorithm used to create a digital fingerprint of a software program, which is used to validate software as identical to the original.(g) Lifecycle of certified voting technology means the entire lifecycle of the certified voting technology from the time of certification and trusted build creation through the end of lifecycle of the certified voting technology.17601. (a) The following provisions shall apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) The following data shall be kept by the elections official, on electronic media, stored and unaltered, for 22 months from the date of the election:(1) All voting system electronic data.(2) All ballot on demand system electronic data, if applicable.(3) All adjudication electronic data.(4) All remote accessible vote by mail system electronic data, if applicable.(5) All electronic poll book electronic data, if applicable.(6) HASH values taken from the voting technology devices, if applicable.(7) All ballot images.(c) If a contest is not commenced within the 22-month period, or if a criminal prosecution involving fraudulent use, using the ballot tally system to mark or falsify ballots, or manipulation of the ballot tally system, is not commenced within the 22-month period, either of which may involve the vote count of the precinct from which voted ballots were received, the elections official shall have the backups destroyed.17602. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17601. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) The following data shall be kept by the elections official, on electronic media, stored and unaltered, for six months from the date of the election:(1) All voting system electronic data.(2) All ballot on demand system electronic data, if applicable.(3) All adjudication electronic data.(4) All remote accessible vote by mail system electronic data, if applicable.(5) All electronic poll book electronic data, if applicable.(6) HASH values taken from the voting technology devices, if applicable.(7) All ballot images, if applicable.(c) If a contest is not commenced within the six-month period, or if a criminal prosecution involving fraudulent use, using the ballot tally system to mark or falsify ballots, or manipulation of the ballot tally system is not commenced within the six-month period, either of which may involve the vote count of the precinct from which voted ballots were received, the elections official shall have the backups destroyed.17603. (a) Certified voting technology equipment and components that are at the end of lifecycle may be securely disposed of or destroyed with the written approval of the manufacturer and the Secretary of State.(b) With respect to any part or component of certified voting technology for which the chain of custody has been compromised or the security or information has been breached or attempted to be breached, all of the following shall occur:(1) The chief elections official of the city, county, or special district and the Secretary of State shall be notified within 24 hours of discovery.(2) The equipment shall be removed from service immediately and replaced if possible.(3) The integrity and reliability of the certified voting technology system, components, and accompanying electronic data shall be evaluated to determine whether they can be restored to their original state and reinstated.SEC. 11. Section 18564 of the Elections Code is amended to read:18564. (a) Any person is guilty of a felony, punishable by imprisonment pursuant to subdivision (h) of Section 1170 of the Penal Code for two, three, or four years who, before or during an election:(1) Tampers with, interferes with, or attempts to interfere with, the correct operation of, or willfully damages in order to prevent the use of, any voting machine, voting device, voting system, vote tabulating device, or ballot tally software program source codes.(2) (A) Interferes or attempts to interfere with the secrecy of voting or ballot tally software program source codes.(B) For purposes of this paragraph, interferes or attempts to interfere with includes knowingly, and without authorization, providing unauthorized access to, or breaking the chain of custody to, either of the following:(i) Certified voting technology during the lifecycle of that certified voting technology.(ii) Any finished or unfinished ballot cards.(3) Knowingly, and without authorization, makes or has in the persons possession credentials, passwords, or access keys to a voting machine that has been adopted and will be used in elections in this state.(4) Willfully substitutes or attempts to substitute forged or counterfeit ballot tally software program source codes.(b) The definitions in Section 17600 apply for purposes of this section.SEC. 12. Section 19201 of the Elections Code is amended to read:19201. (a) (1) The Secretary of State may grant conditional approval to a voting system or part of a voting system under either of the following circumstances:(A) A voting system or part of a voting system was decertified as a result of a review by the Secretary of State pursuant to Section 19232.(B) A certified voting system or part of that voting system is modified to comply with voting system standards or changes in statute.(2) For purposes of granting conditional approval to a voting system or part of a voting system pursuant to paragraph (1), the Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.(b) The Secretary of State may withdraw conditional approval at any time pursuant to Section 19232.SEC. 13. Section 19205 of the Elections Code is amended to read:19205. A voting system shall comply with all of the following:(a) No part of the voting system shall be connected to the internet at any time.(b) No part of the voting system shall electronically receive or transmit election data through an exterior communication network, including the public telephone system, if the communication originates from or terminates at a polling place, satellite location, or counting center.(c) (1) No part of the voting system shall receive or transmit wireless communications or wireless data transfers.(2) A network connection to any device not directly used and necessary for voting system functions shall not be established. Communication by or with any component of the voting system by wireless or modem transmission at any time is prohibited. A component of the voting system, or any device with network connectivity to the voting system, shall not be connected to the internet, directly or indirectly, at any time.(d) (1) The voting system shall be used in a configuration of parallel central election management systems separated by an air-gap.(2) For purposes of this subdivision, air-gap includes all of the following:(A) A permanent central system known to be running unaltered, certified software and firmware that is used solely to define elections and program voting equipment and memory cards.(B) A physically isolated duplicate system, reformatted after every election to guard against the possibility of infection, that is used solely to read memory cards containing vote results, accumulate and tabulate those results, and produce reports.(C) A separate computer dedicated solely to this purpose that is used to reformat all memory devices before they are connected to the permanent system again.SEC. 14. Section 19281 of the Elections Code is amended to read:19281. (a) A remote accessible vote by mail system, in whole or in part, shall not be used unless it has been certified or conditionally approved by the Secretary of State before the election at which it is to be first used. The Secretary of State may impose additional conditions of approval as deemed necessary for the certification of the remote accessible vote by mail system.(b) All other uses of a remote accessible vote by mail system shall be subject to the provisions of Section 19202.SEC. 15. No reimbursement is required by this act pursuant to Section 6 of Article XIIIB of the California Constitution for certain costs that may be incurred by a local agency or school district because, in that regard, this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIIIB of the California Constitution.However, if the Commission on State Mandates determines that this act contains other costs mandated by the state, reimbursement to local agencies and school districts for those costs shall be made pursuant to Part 7 (commencing with Section 17500) of Division 4 of Title 2 of the Government Code.SEC. 16. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:To ensure that adequate protections for voting systems and voter data are implemented in time for the 2024 presidential general election, it is necessary that this act take effect immediately. |
|---|
| 58 | 69 | | |
|---|
| 59 | 70 | | The people of the State of California do enact as follows: |
|---|
| 60 | 71 | | |
|---|
| 61 | 72 | | ## The people of the State of California do enact as follows: |
|---|
| 62 | 73 | | |
|---|
| 63 | 74 | | SECTION 1. Section 327.5 is added to the Elections Code, to read:327.5. Jurisdiction means any county, city and county, city, or special district that conducts elections pursuant to this code. |
|---|
| 64 | 75 | | |
|---|
| 65 | 76 | | SECTION 1. Section 327.5 is added to the Elections Code, to read: |
|---|
| 66 | 77 | | |
|---|
| 67 | 78 | | ### SECTION 1. |
|---|
| 68 | 79 | | |
|---|
| 69 | 80 | | 327.5. Jurisdiction means any county, city and county, city, or special district that conducts elections pursuant to this code. |
|---|
| 70 | 81 | | |
|---|
| 71 | 82 | | 327.5. Jurisdiction means any county, city and county, city, or special district that conducts elections pursuant to this code. |
|---|
| 72 | 83 | | |
|---|
| 73 | 84 | | 327.5. Jurisdiction means any county, city and county, city, or special district that conducts elections pursuant to this code. |
|---|
| 74 | 85 | | |
|---|
| 75 | 86 | | |
|---|
| 76 | 87 | | |
|---|
| 77 | 88 | | 327.5. Jurisdiction means any county, city and county, city, or special district that conducts elections pursuant to this code. |
|---|
| 78 | 89 | | |
|---|
| 79 | 90 | | SEC. 2. Section 2550 of the Elections Code is amended to read:2550. (a) For purposes of this section, electronic poll book means an electronic list of registered voters that may be transported to the polling location. An electronic poll book shall contain all of the following voter registration data:(1) Name.(2) Address.(3) Precinct.(4) Party preference.(5) Whether or not the voter has been issued a vote by mail ballot.(6) Whether or not the vote by mail ballot has been recorded as received by the elections official.(b) An electronic poll book shall not be used unless it has been certified by the Secretary of State.(c) The Secretary of State shall adopt and publish electronic poll book standards and regulations governing the certification and use of electronic poll books.(d) The Secretary of State shall not certify an electronic poll book unless it fulfills the requirements of this section and the Secretary of States standards and regulations. The Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State. |
|---|
| 80 | 91 | | |
|---|
| 81 | 92 | | SEC. 2. Section 2550 of the Elections Code is amended to read: |
|---|
| 82 | 93 | | |
|---|
| 83 | 94 | | ### SEC. 2. |
|---|
| 84 | 95 | | |
|---|
| 85 | 96 | | 2550. (a) For purposes of this section, electronic poll book means an electronic list of registered voters that may be transported to the polling location. An electronic poll book shall contain all of the following voter registration data:(1) Name.(2) Address.(3) Precinct.(4) Party preference.(5) Whether or not the voter has been issued a vote by mail ballot.(6) Whether or not the vote by mail ballot has been recorded as received by the elections official.(b) An electronic poll book shall not be used unless it has been certified by the Secretary of State.(c) The Secretary of State shall adopt and publish electronic poll book standards and regulations governing the certification and use of electronic poll books.(d) The Secretary of State shall not certify an electronic poll book unless it fulfills the requirements of this section and the Secretary of States standards and regulations. The Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State. |
|---|
| 86 | 97 | | |
|---|
| 87 | 98 | | 2550. (a) For purposes of this section, electronic poll book means an electronic list of registered voters that may be transported to the polling location. An electronic poll book shall contain all of the following voter registration data:(1) Name.(2) Address.(3) Precinct.(4) Party preference.(5) Whether or not the voter has been issued a vote by mail ballot.(6) Whether or not the vote by mail ballot has been recorded as received by the elections official.(b) An electronic poll book shall not be used unless it has been certified by the Secretary of State.(c) The Secretary of State shall adopt and publish electronic poll book standards and regulations governing the certification and use of electronic poll books.(d) The Secretary of State shall not certify an electronic poll book unless it fulfills the requirements of this section and the Secretary of States standards and regulations. The Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State. |
|---|
| 88 | 99 | | |
|---|
| 89 | 100 | | 2550. (a) For purposes of this section, electronic poll book means an electronic list of registered voters that may be transported to the polling location. An electronic poll book shall contain all of the following voter registration data:(1) Name.(2) Address.(3) Precinct.(4) Party preference.(5) Whether or not the voter has been issued a vote by mail ballot.(6) Whether or not the vote by mail ballot has been recorded as received by the elections official.(b) An electronic poll book shall not be used unless it has been certified by the Secretary of State.(c) The Secretary of State shall adopt and publish electronic poll book standards and regulations governing the certification and use of electronic poll books.(d) The Secretary of State shall not certify an electronic poll book unless it fulfills the requirements of this section and the Secretary of States standards and regulations. The Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State. |
|---|
| 90 | 101 | | |
|---|
| 91 | 102 | | |
|---|
| 92 | 103 | | |
|---|
| 93 | 104 | | 2550. (a) For purposes of this section, electronic poll book means an electronic list of registered voters that may be transported to the polling location. An electronic poll book shall contain all of the following voter registration data: |
|---|
| 94 | 105 | | |
|---|
| 95 | 106 | | (1) Name. |
|---|
| 96 | 107 | | |
|---|
| 97 | 108 | | (2) Address. |
|---|
| 98 | 109 | | |
|---|
| 99 | 110 | | (3) Precinct. |
|---|
| 100 | 111 | | |
|---|
| 101 | 112 | | (4) Party preference. |
|---|
| 102 | 113 | | |
|---|
| 103 | 114 | | (5) Whether or not the voter has been issued a vote by mail ballot. |
|---|
| 104 | 115 | | |
|---|
| 105 | 116 | | (6) Whether or not the vote by mail ballot has been recorded as received by the elections official. |
|---|
| 106 | 117 | | |
|---|
| 107 | 118 | | (b) An electronic poll book shall not be used unless it has been certified by the Secretary of State. |
|---|
| 108 | 119 | | |
|---|
| 109 | 120 | | (c) The Secretary of State shall adopt and publish electronic poll book standards and regulations governing the certification and use of electronic poll books. |
|---|
| 110 | 121 | | |
|---|
| 111 | 122 | | (d) The Secretary of State shall not certify an electronic poll book unless it fulfills the requirements of this section and the Secretary of States standards and regulations. The Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State. |
|---|
| 112 | 123 | | |
|---|
| 113 | 124 | | SEC. 3. Section 13004 of the Elections Code is amended to read:13004. (a) The Secretary of State shall adopt regulations governing the manufacture, finishing, quality standards, distribution, and inventory control of ballot cards and ballot on demand systems.(b) A ballot printer shall not manufacture or finish ballot cards, or manufacture unfinished ballot cards, for use in California elections, or accept or solicit orders for ballot cards or unfinished ballot cards, before certification as a ballot printer by the Secretary of State. The Secretary of State may impose conditions of approval as deemed necessary by the Secretary of State.(c) For commercial ballot manufacturers and finishers, the Secretary of State shall require a biennial inspection of the certified manufacturing, finishing, and storage facilities.(d) Not later than five working days before the Secretary of State begins the initial inspection, the ballot card manufacturer or finisher shall notify or disclose to the Secretary of State in writing any known flaw or defect in its ballot card manufacturing or finishing process, or its manufactured or finished ballot cards, that could adversely affect the future casting or tallying of votes. Once approved by the Secretary of State, the ballot card manufacturer or finisher shall notify the Secretary of State and the affected local elections officials in writing within 24 hours after it discovers any flaw or defect in its ballot card manufacturing or finishing process, or its manufactured or finished ballot cards, that could adversely affect the future casting or tallying of votes.(e) For purposes of this section, ballot printer means any company or jurisdiction that manufactures, finishes, or sells ballot cards, including test ballots, for use in an election conducted pursuant to this code. |
|---|
| 114 | 125 | | |
|---|
| 115 | 126 | | SEC. 3. Section 13004 of the Elections Code is amended to read: |
|---|
| 116 | 127 | | |
|---|
| 117 | 128 | | ### SEC. 3. |
|---|
| 118 | 129 | | |
|---|
| 119 | 130 | | 13004. (a) The Secretary of State shall adopt regulations governing the manufacture, finishing, quality standards, distribution, and inventory control of ballot cards and ballot on demand systems.(b) A ballot printer shall not manufacture or finish ballot cards, or manufacture unfinished ballot cards, for use in California elections, or accept or solicit orders for ballot cards or unfinished ballot cards, before certification as a ballot printer by the Secretary of State. The Secretary of State may impose conditions of approval as deemed necessary by the Secretary of State.(c) For commercial ballot manufacturers and finishers, the Secretary of State shall require a biennial inspection of the certified manufacturing, finishing, and storage facilities.(d) Not later than five working days before the Secretary of State begins the initial inspection, the ballot card manufacturer or finisher shall notify or disclose to the Secretary of State in writing any known flaw or defect in its ballot card manufacturing or finishing process, or its manufactured or finished ballot cards, that could adversely affect the future casting or tallying of votes. Once approved by the Secretary of State, the ballot card manufacturer or finisher shall notify the Secretary of State and the affected local elections officials in writing within 24 hours after it discovers any flaw or defect in its ballot card manufacturing or finishing process, or its manufactured or finished ballot cards, that could adversely affect the future casting or tallying of votes.(e) For purposes of this section, ballot printer means any company or jurisdiction that manufactures, finishes, or sells ballot cards, including test ballots, for use in an election conducted pursuant to this code. |
|---|
| 120 | 131 | | |
|---|
| 121 | 132 | | 13004. (a) The Secretary of State shall adopt regulations governing the manufacture, finishing, quality standards, distribution, and inventory control of ballot cards and ballot on demand systems.(b) A ballot printer shall not manufacture or finish ballot cards, or manufacture unfinished ballot cards, for use in California elections, or accept or solicit orders for ballot cards or unfinished ballot cards, before certification as a ballot printer by the Secretary of State. The Secretary of State may impose conditions of approval as deemed necessary by the Secretary of State.(c) For commercial ballot manufacturers and finishers, the Secretary of State shall require a biennial inspection of the certified manufacturing, finishing, and storage facilities.(d) Not later than five working days before the Secretary of State begins the initial inspection, the ballot card manufacturer or finisher shall notify or disclose to the Secretary of State in writing any known flaw or defect in its ballot card manufacturing or finishing process, or its manufactured or finished ballot cards, that could adversely affect the future casting or tallying of votes. Once approved by the Secretary of State, the ballot card manufacturer or finisher shall notify the Secretary of State and the affected local elections officials in writing within 24 hours after it discovers any flaw or defect in its ballot card manufacturing or finishing process, or its manufactured or finished ballot cards, that could adversely affect the future casting or tallying of votes.(e) For purposes of this section, ballot printer means any company or jurisdiction that manufactures, finishes, or sells ballot cards, including test ballots, for use in an election conducted pursuant to this code. |
|---|
| 122 | 133 | | |
|---|
| 123 | 134 | | 13004. (a) The Secretary of State shall adopt regulations governing the manufacture, finishing, quality standards, distribution, and inventory control of ballot cards and ballot on demand systems.(b) A ballot printer shall not manufacture or finish ballot cards, or manufacture unfinished ballot cards, for use in California elections, or accept or solicit orders for ballot cards or unfinished ballot cards, before certification as a ballot printer by the Secretary of State. The Secretary of State may impose conditions of approval as deemed necessary by the Secretary of State.(c) For commercial ballot manufacturers and finishers, the Secretary of State shall require a biennial inspection of the certified manufacturing, finishing, and storage facilities.(d) Not later than five working days before the Secretary of State begins the initial inspection, the ballot card manufacturer or finisher shall notify or disclose to the Secretary of State in writing any known flaw or defect in its ballot card manufacturing or finishing process, or its manufactured or finished ballot cards, that could adversely affect the future casting or tallying of votes. Once approved by the Secretary of State, the ballot card manufacturer or finisher shall notify the Secretary of State and the affected local elections officials in writing within 24 hours after it discovers any flaw or defect in its ballot card manufacturing or finishing process, or its manufactured or finished ballot cards, that could adversely affect the future casting or tallying of votes.(e) For purposes of this section, ballot printer means any company or jurisdiction that manufactures, finishes, or sells ballot cards, including test ballots, for use in an election conducted pursuant to this code. |
|---|
| 124 | 135 | | |
|---|
| 125 | 136 | | |
|---|
| 126 | 137 | | |
|---|
| 127 | 138 | | 13004. (a) The Secretary of State shall adopt regulations governing the manufacture, finishing, quality standards, distribution, and inventory control of ballot cards and ballot on demand systems. |
|---|
| 128 | 139 | | |
|---|
| 129 | 140 | | (b) A ballot printer shall not manufacture or finish ballot cards, or manufacture unfinished ballot cards, for use in California elections, or accept or solicit orders for ballot cards or unfinished ballot cards, before certification as a ballot printer by the Secretary of State. The Secretary of State may impose conditions of approval as deemed necessary by the Secretary of State. |
|---|
| 130 | 141 | | |
|---|
| 131 | 142 | | (c) For commercial ballot manufacturers and finishers, the Secretary of State shall require a biennial inspection of the certified manufacturing, finishing, and storage facilities. |
|---|
| 132 | 143 | | |
|---|
| 133 | 144 | | (d) Not later than five working days before the Secretary of State begins the initial inspection, the ballot card manufacturer or finisher shall notify or disclose to the Secretary of State in writing any known flaw or defect in its ballot card manufacturing or finishing process, or its manufactured or finished ballot cards, that could adversely affect the future casting or tallying of votes. Once approved by the Secretary of State, the ballot card manufacturer or finisher shall notify the Secretary of State and the affected local elections officials in writing within 24 hours after it discovers any flaw or defect in its ballot card manufacturing or finishing process, or its manufactured or finished ballot cards, that could adversely affect the future casting or tallying of votes. |
|---|
| 134 | 145 | | |
|---|
| 135 | 146 | | (e) For purposes of this section, ballot printer means any company or jurisdiction that manufactures, finishes, or sells ballot cards, including test ballots, for use in an election conducted pursuant to this code. |
|---|
| 136 | 147 | | |
|---|
| 137 | 148 | | SEC. 4. Section 13004.5 of the Elections Code is amended to read:13004.5. (a) A jurisdiction shall not purchase, lease, or contract for a ballot on demand system unless the ballot on demand system has been certified by the Secretary of State. The Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.(b) A vendor, company, or person shall not sell, lease, or contract with a jurisdiction for the use of a ballot on demand system unless the ballot on demand system has been certified by the Secretary of State.(c) This section does not preclude a jurisdiction from conducting research and development of a ballot on demand system. A ballot on demand system that is used for purposes of this subdivision shall not be used in an election conducted pursuant to this code unless the system has been certified by the Secretary of State.(d) Once a ballot on demand system is approved by the Secretary of State, the ballot on demand system vendor shall notify the Secretary of State and the affected local elections officials in writing within 24 hours after it discovers any flaw or defect in its ballot on demand system that could adversely affect the future casting or tallying of votes.(e) The Secretary of State shall promulgate regulations for purposes of certifying ballot on demand systems. |
|---|
| 138 | 149 | | |
|---|
| 139 | 150 | | SEC. 4. Section 13004.5 of the Elections Code is amended to read: |
|---|
| 140 | 151 | | |
|---|
| 141 | 152 | | ### SEC. 4. |
|---|
| 142 | 153 | | |
|---|
| 143 | 154 | | 13004.5. (a) A jurisdiction shall not purchase, lease, or contract for a ballot on demand system unless the ballot on demand system has been certified by the Secretary of State. The Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.(b) A vendor, company, or person shall not sell, lease, or contract with a jurisdiction for the use of a ballot on demand system unless the ballot on demand system has been certified by the Secretary of State.(c) This section does not preclude a jurisdiction from conducting research and development of a ballot on demand system. A ballot on demand system that is used for purposes of this subdivision shall not be used in an election conducted pursuant to this code unless the system has been certified by the Secretary of State.(d) Once a ballot on demand system is approved by the Secretary of State, the ballot on demand system vendor shall notify the Secretary of State and the affected local elections officials in writing within 24 hours after it discovers any flaw or defect in its ballot on demand system that could adversely affect the future casting or tallying of votes.(e) The Secretary of State shall promulgate regulations for purposes of certifying ballot on demand systems. |
|---|
| 144 | 155 | | |
|---|
| 145 | 156 | | 13004.5. (a) A jurisdiction shall not purchase, lease, or contract for a ballot on demand system unless the ballot on demand system has been certified by the Secretary of State. The Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.(b) A vendor, company, or person shall not sell, lease, or contract with a jurisdiction for the use of a ballot on demand system unless the ballot on demand system has been certified by the Secretary of State.(c) This section does not preclude a jurisdiction from conducting research and development of a ballot on demand system. A ballot on demand system that is used for purposes of this subdivision shall not be used in an election conducted pursuant to this code unless the system has been certified by the Secretary of State.(d) Once a ballot on demand system is approved by the Secretary of State, the ballot on demand system vendor shall notify the Secretary of State and the affected local elections officials in writing within 24 hours after it discovers any flaw or defect in its ballot on demand system that could adversely affect the future casting or tallying of votes.(e) The Secretary of State shall promulgate regulations for purposes of certifying ballot on demand systems. |
|---|
| 146 | 157 | | |
|---|
| 147 | 158 | | 13004.5. (a) A jurisdiction shall not purchase, lease, or contract for a ballot on demand system unless the ballot on demand system has been certified by the Secretary of State. The Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.(b) A vendor, company, or person shall not sell, lease, or contract with a jurisdiction for the use of a ballot on demand system unless the ballot on demand system has been certified by the Secretary of State.(c) This section does not preclude a jurisdiction from conducting research and development of a ballot on demand system. A ballot on demand system that is used for purposes of this subdivision shall not be used in an election conducted pursuant to this code unless the system has been certified by the Secretary of State.(d) Once a ballot on demand system is approved by the Secretary of State, the ballot on demand system vendor shall notify the Secretary of State and the affected local elections officials in writing within 24 hours after it discovers any flaw or defect in its ballot on demand system that could adversely affect the future casting or tallying of votes.(e) The Secretary of State shall promulgate regulations for purposes of certifying ballot on demand systems. |
|---|
| 148 | 159 | | |
|---|
| 149 | 160 | | |
|---|
| 150 | 161 | | |
|---|
| 151 | 162 | | 13004.5. (a) A jurisdiction shall not purchase, lease, or contract for a ballot on demand system unless the ballot on demand system has been certified by the Secretary of State. The Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State. |
|---|
| 152 | 163 | | |
|---|
| 153 | 164 | | (b) A vendor, company, or person shall not sell, lease, or contract with a jurisdiction for the use of a ballot on demand system unless the ballot on demand system has been certified by the Secretary of State. |
|---|
| 154 | 165 | | |
|---|
| 155 | 166 | | (c) This section does not preclude a jurisdiction from conducting research and development of a ballot on demand system. A ballot on demand system that is used for purposes of this subdivision shall not be used in an election conducted pursuant to this code unless the system has been certified by the Secretary of State. |
|---|
| 156 | 167 | | |
|---|
| 157 | 168 | | (d) Once a ballot on demand system is approved by the Secretary of State, the ballot on demand system vendor shall notify the Secretary of State and the affected local elections officials in writing within 24 hours after it discovers any flaw or defect in its ballot on demand system that could adversely affect the future casting or tallying of votes. |
|---|
| 158 | 169 | | |
|---|
| 159 | 170 | | (e) The Secretary of State shall promulgate regulations for purposes of certifying ballot on demand systems. |
|---|
| 160 | 171 | | |
|---|
| 161 | 172 | | SEC. 5. Section 15209 of the Elections Code is amended to read:15209. Any magnetic or electronic storage medium, or copy thereof, used for the ballot tabulation program and any magnetic or electronic storage medium, or copy thereof, containing election results shall be kept in a secure location and shall be retained for 6 months following any local election and 22 months following any federal election or so long thereafter as any contest involving the vote at the local or federal election remains undetermined. |
|---|
| 162 | 173 | | |
|---|
| 163 | 174 | | SEC. 5. Section 15209 of the Elections Code is amended to read: |
|---|
| 164 | 175 | | |
|---|
| 165 | 176 | | ### SEC. 5. |
|---|
| 166 | 177 | | |
|---|
| 167 | 178 | | 15209. Any magnetic or electronic storage medium, or copy thereof, used for the ballot tabulation program and any magnetic or electronic storage medium, or copy thereof, containing election results shall be kept in a secure location and shall be retained for 6 months following any local election and 22 months following any federal election or so long thereafter as any contest involving the vote at the local or federal election remains undetermined. |
|---|
| 168 | 179 | | |
|---|
| 169 | 180 | | 15209. Any magnetic or electronic storage medium, or copy thereof, used for the ballot tabulation program and any magnetic or electronic storage medium, or copy thereof, containing election results shall be kept in a secure location and shall be retained for 6 months following any local election and 22 months following any federal election or so long thereafter as any contest involving the vote at the local or federal election remains undetermined. |
|---|
| 170 | 181 | | |
|---|
| 171 | 182 | | 15209. Any magnetic or electronic storage medium, or copy thereof, used for the ballot tabulation program and any magnetic or electronic storage medium, or copy thereof, containing election results shall be kept in a secure location and shall be retained for 6 months following any local election and 22 months following any federal election or so long thereafter as any contest involving the vote at the local or federal election remains undetermined. |
|---|
| 172 | 183 | | |
|---|
| 173 | 184 | | |
|---|
| 174 | 185 | | |
|---|
| 175 | 186 | | 15209. Any magnetic or electronic storage medium, or copy thereof, used for the ballot tabulation program and any magnetic or electronic storage medium, or copy thereof, containing election results shall be kept in a secure location and shall be retained for 6 months following any local election and 22 months following any federal election or so long thereafter as any contest involving the vote at the local or federal election remains undetermined. |
|---|
| 176 | 187 | | |
|---|
| 177 | 188 | | SEC. 6. Section 17301 of the Elections Code is amended to read:17301. (a) The following provisions shall apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) The packages containing the following items shall be kept by the elections official, unopened and unaltered, for 22 months from the date of the election:(1) Voted polling place ballots.(2) Paper cast vote records, as defined by Sections 305.5 and 19271.(3) Voted vote by mail voter ballots.(4) Vote by mail voter identification envelopes.(5) Voted provisional voter ballots.(6) Voted conditional voter registration ballots.(7) Provisional ballot voter identification envelopes, including conditional voter registration voter identification envelopes cast pursuant to subdivision (e) of Section 2170.(8) Spoiled ballots.(9) Canceled ballots.(10) Unused vote by mail ballots surrendered by the voter pursuant to Section 3015.(c) If a contest is not commenced within the 22-month period, or if a criminal prosecution involving fraudulent use, marking or falsification of ballots, or forgery of vote by mail voters signatures is not commenced within the 22-month period, either of which may involve the vote of the precinct from which voted ballots were received, the elections official shall have the items identified in subdivision (b) destroyed or recycled. The packages shall otherwise remain unopened until the items are destroyed or recycled. |
|---|
| 178 | 189 | | |
|---|
| 179 | 190 | | SEC. 6. Section 17301 of the Elections Code is amended to read: |
|---|
| 180 | 191 | | |
|---|
| 181 | 192 | | ### SEC. 6. |
|---|
| 182 | 193 | | |
|---|
| 183 | 194 | | 17301. (a) The following provisions shall apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) The packages containing the following items shall be kept by the elections official, unopened and unaltered, for 22 months from the date of the election:(1) Voted polling place ballots.(2) Paper cast vote records, as defined by Sections 305.5 and 19271.(3) Voted vote by mail voter ballots.(4) Vote by mail voter identification envelopes.(5) Voted provisional voter ballots.(6) Voted conditional voter registration ballots.(7) Provisional ballot voter identification envelopes, including conditional voter registration voter identification envelopes cast pursuant to subdivision (e) of Section 2170.(8) Spoiled ballots.(9) Canceled ballots.(10) Unused vote by mail ballots surrendered by the voter pursuant to Section 3015.(c) If a contest is not commenced within the 22-month period, or if a criminal prosecution involving fraudulent use, marking or falsification of ballots, or forgery of vote by mail voters signatures is not commenced within the 22-month period, either of which may involve the vote of the precinct from which voted ballots were received, the elections official shall have the items identified in subdivision (b) destroyed or recycled. The packages shall otherwise remain unopened until the items are destroyed or recycled. |
|---|
| 184 | 195 | | |
|---|
| 185 | 196 | | 17301. (a) The following provisions shall apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) The packages containing the following items shall be kept by the elections official, unopened and unaltered, for 22 months from the date of the election:(1) Voted polling place ballots.(2) Paper cast vote records, as defined by Sections 305.5 and 19271.(3) Voted vote by mail voter ballots.(4) Vote by mail voter identification envelopes.(5) Voted provisional voter ballots.(6) Voted conditional voter registration ballots.(7) Provisional ballot voter identification envelopes, including conditional voter registration voter identification envelopes cast pursuant to subdivision (e) of Section 2170.(8) Spoiled ballots.(9) Canceled ballots.(10) Unused vote by mail ballots surrendered by the voter pursuant to Section 3015.(c) If a contest is not commenced within the 22-month period, or if a criminal prosecution involving fraudulent use, marking or falsification of ballots, or forgery of vote by mail voters signatures is not commenced within the 22-month period, either of which may involve the vote of the precinct from which voted ballots were received, the elections official shall have the items identified in subdivision (b) destroyed or recycled. The packages shall otherwise remain unopened until the items are destroyed or recycled. |
|---|
| 186 | 197 | | |
|---|
| 187 | 198 | | 17301. (a) The following provisions shall apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) The packages containing the following items shall be kept by the elections official, unopened and unaltered, for 22 months from the date of the election:(1) Voted polling place ballots.(2) Paper cast vote records, as defined by Sections 305.5 and 19271.(3) Voted vote by mail voter ballots.(4) Vote by mail voter identification envelopes.(5) Voted provisional voter ballots.(6) Voted conditional voter registration ballots.(7) Provisional ballot voter identification envelopes, including conditional voter registration voter identification envelopes cast pursuant to subdivision (e) of Section 2170.(8) Spoiled ballots.(9) Canceled ballots.(10) Unused vote by mail ballots surrendered by the voter pursuant to Section 3015.(c) If a contest is not commenced within the 22-month period, or if a criminal prosecution involving fraudulent use, marking or falsification of ballots, or forgery of vote by mail voters signatures is not commenced within the 22-month period, either of which may involve the vote of the precinct from which voted ballots were received, the elections official shall have the items identified in subdivision (b) destroyed or recycled. The packages shall otherwise remain unopened until the items are destroyed or recycled. |
|---|
| 188 | 199 | | |
|---|
| 189 | 200 | | |
|---|
| 190 | 201 | | |
|---|
| 191 | 202 | | 17301. (a) The following provisions shall apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative. |
|---|
| 192 | 203 | | |
|---|
| 193 | 204 | | (b) The packages containing the following items shall be kept by the elections official, unopened and unaltered, for 22 months from the date of the election: |
|---|
| 194 | 205 | | |
|---|
| 195 | 206 | | (1) Voted polling place ballots. |
|---|
| 196 | 207 | | |
|---|
| 197 | 208 | | (2) Paper cast vote records, as defined by Sections 305.5 and 19271. |
|---|
| 198 | 209 | | |
|---|
| 199 | 210 | | (3) Voted vote by mail voter ballots. |
|---|
| 200 | 211 | | |
|---|
| 201 | 212 | | (4) Vote by mail voter identification envelopes. |
|---|
| 202 | 213 | | |
|---|
| 203 | 214 | | (5) Voted provisional voter ballots. |
|---|
| 204 | 215 | | |
|---|
| 205 | 216 | | (6) Voted conditional voter registration ballots. |
|---|
| 206 | 217 | | |
|---|
| 207 | 218 | | (7) Provisional ballot voter identification envelopes, including conditional voter registration voter identification envelopes cast pursuant to subdivision (e) of Section 2170. |
|---|
| 208 | 219 | | |
|---|
| 209 | 220 | | (8) Spoiled ballots. |
|---|
| 210 | 221 | | |
|---|
| 211 | 222 | | (9) Canceled ballots. |
|---|
| 212 | 223 | | |
|---|
| 213 | 224 | | (10) Unused vote by mail ballots surrendered by the voter pursuant to Section 3015. |
|---|
| 214 | 225 | | |
|---|
| 215 | 226 | | (c) If a contest is not commenced within the 22-month period, or if a criminal prosecution involving fraudulent use, marking or falsification of ballots, or forgery of vote by mail voters signatures is not commenced within the 22-month period, either of which may involve the vote of the precinct from which voted ballots were received, the elections official shall have the items identified in subdivision (b) destroyed or recycled. The packages shall otherwise remain unopened until the items are destroyed or recycled. |
|---|
| 216 | 227 | | |
|---|
| 217 | 228 | | SEC. 7. Section 17302 of the Elections Code is amended to read:17302. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17301. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) The packages containing the following items shall be kept by the elections official, unopened and unaltered, for six months from the date of the election:(1) Voted polling place ballots.(2) Paper cast vote records, as defined by Sections 305.5 and 19271.(3) Voted vote by mail voter ballots.(4) Vote by mail voter identification envelopes.(5) Voted provisional voter ballots.(6) Voted conditional voter registration ballots.(7) Provisional ballot voter identification envelopes, including conditional voter registration voter identification envelopes cast pursuant to subdivision (e) of Section 2170.(8) Spoiled ballots.(9) Canceled ballots.(10) Unused vote by mail ballots surrendered by the voter pursuant to Section 3015.(c) If a contest is not commenced within the six-month period, or if a criminal prosecution involving fraudulent use, marking or falsification of ballots, or forgery of vote by mail voters signatures is not commenced within the six-month period, either of which may involve the vote of the precinct from which voted ballots were received, the elections official shall have the items identified in subdivision (b) destroyed or recycled. The packages shall otherwise remain unopened until the items are destroyed or recycled. |
|---|
| 218 | 229 | | |
|---|
| 219 | 230 | | SEC. 7. Section 17302 of the Elections Code is amended to read: |
|---|
| 220 | 231 | | |
|---|
| 221 | 232 | | ### SEC. 7. |
|---|
| 222 | 233 | | |
|---|
| 223 | 234 | | 17302. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17301. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) The packages containing the following items shall be kept by the elections official, unopened and unaltered, for six months from the date of the election:(1) Voted polling place ballots.(2) Paper cast vote records, as defined by Sections 305.5 and 19271.(3) Voted vote by mail voter ballots.(4) Vote by mail voter identification envelopes.(5) Voted provisional voter ballots.(6) Voted conditional voter registration ballots.(7) Provisional ballot voter identification envelopes, including conditional voter registration voter identification envelopes cast pursuant to subdivision (e) of Section 2170.(8) Spoiled ballots.(9) Canceled ballots.(10) Unused vote by mail ballots surrendered by the voter pursuant to Section 3015.(c) If a contest is not commenced within the six-month period, or if a criminal prosecution involving fraudulent use, marking or falsification of ballots, or forgery of vote by mail voters signatures is not commenced within the six-month period, either of which may involve the vote of the precinct from which voted ballots were received, the elections official shall have the items identified in subdivision (b) destroyed or recycled. The packages shall otherwise remain unopened until the items are destroyed or recycled. |
|---|
| 224 | 235 | | |
|---|
| 225 | 236 | | 17302. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17301. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) The packages containing the following items shall be kept by the elections official, unopened and unaltered, for six months from the date of the election:(1) Voted polling place ballots.(2) Paper cast vote records, as defined by Sections 305.5 and 19271.(3) Voted vote by mail voter ballots.(4) Vote by mail voter identification envelopes.(5) Voted provisional voter ballots.(6) Voted conditional voter registration ballots.(7) Provisional ballot voter identification envelopes, including conditional voter registration voter identification envelopes cast pursuant to subdivision (e) of Section 2170.(8) Spoiled ballots.(9) Canceled ballots.(10) Unused vote by mail ballots surrendered by the voter pursuant to Section 3015.(c) If a contest is not commenced within the six-month period, or if a criminal prosecution involving fraudulent use, marking or falsification of ballots, or forgery of vote by mail voters signatures is not commenced within the six-month period, either of which may involve the vote of the precinct from which voted ballots were received, the elections official shall have the items identified in subdivision (b) destroyed or recycled. The packages shall otherwise remain unopened until the items are destroyed or recycled. |
|---|
| 226 | 237 | | |
|---|
| 227 | 238 | | 17302. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17301. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) The packages containing the following items shall be kept by the elections official, unopened and unaltered, for six months from the date of the election:(1) Voted polling place ballots.(2) Paper cast vote records, as defined by Sections 305.5 and 19271.(3) Voted vote by mail voter ballots.(4) Vote by mail voter identification envelopes.(5) Voted provisional voter ballots.(6) Voted conditional voter registration ballots.(7) Provisional ballot voter identification envelopes, including conditional voter registration voter identification envelopes cast pursuant to subdivision (e) of Section 2170.(8) Spoiled ballots.(9) Canceled ballots.(10) Unused vote by mail ballots surrendered by the voter pursuant to Section 3015.(c) If a contest is not commenced within the six-month period, or if a criminal prosecution involving fraudulent use, marking or falsification of ballots, or forgery of vote by mail voters signatures is not commenced within the six-month period, either of which may involve the vote of the precinct from which voted ballots were received, the elections official shall have the items identified in subdivision (b) destroyed or recycled. The packages shall otherwise remain unopened until the items are destroyed or recycled. |
|---|
| 228 | 239 | | |
|---|
| 229 | 240 | | |
|---|
| 230 | 241 | | |
|---|
| 231 | 242 | | 17302. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17301. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office. |
|---|
| 232 | 243 | | |
|---|
| 233 | 244 | | (b) The packages containing the following items shall be kept by the elections official, unopened and unaltered, for six months from the date of the election: |
|---|
| 234 | 245 | | |
|---|
| 235 | 246 | | (1) Voted polling place ballots. |
|---|
| 236 | 247 | | |
|---|
| 237 | 248 | | (2) Paper cast vote records, as defined by Sections 305.5 and 19271. |
|---|
| 238 | 249 | | |
|---|
| 239 | 250 | | (3) Voted vote by mail voter ballots. |
|---|
| 240 | 251 | | |
|---|
| 241 | 252 | | (4) Vote by mail voter identification envelopes. |
|---|
| 242 | 253 | | |
|---|
| 243 | 254 | | (5) Voted provisional voter ballots. |
|---|
| 244 | 255 | | |
|---|
| 245 | 256 | | (6) Voted conditional voter registration ballots. |
|---|
| 246 | 257 | | |
|---|
| 247 | 258 | | (7) Provisional ballot voter identification envelopes, including conditional voter registration voter identification envelopes cast pursuant to subdivision (e) of Section 2170. |
|---|
| 248 | 259 | | |
|---|
| 249 | 260 | | (8) Spoiled ballots. |
|---|
| 250 | 261 | | |
|---|
| 251 | 262 | | (9) Canceled ballots. |
|---|
| 252 | 263 | | |
|---|
| 253 | 264 | | (10) Unused vote by mail ballots surrendered by the voter pursuant to Section 3015. |
|---|
| 254 | 265 | | |
|---|
| 255 | 266 | | (c) If a contest is not commenced within the six-month period, or if a criminal prosecution involving fraudulent use, marking or falsification of ballots, or forgery of vote by mail voters signatures is not commenced within the six-month period, either of which may involve the vote of the precinct from which voted ballots were received, the elections official shall have the items identified in subdivision (b) destroyed or recycled. The packages shall otherwise remain unopened until the items are destroyed or recycled. |
|---|
| 256 | 267 | | |
|---|
| 257 | 268 | | SEC. 8. Section 17305 of the Elections Code is amended to read:17305. (a) The following provisions apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) Upon the completion of the counting of the votes as provided in Article 4 (commencing with Section 15640) of Chapter 9 of Division 15, all items specified in subdivision (b) of Section 17301 shall be kept by the elections official for 22 months from the date of the election or so long thereafter as any contest involving the vote at the election remains undetermined.(c) Notwithstanding any other provision of this code, the final disposition of all items specified in subdivision (b) of Section 17301 shall be determined by the elections official.(d) Sealed ballot containers shall not be opened unless the elections official determines it is necessary in a shredding or recycling process. This section shall not be construed to allow packages or containers to be opened except for purposes specified herein. The packages or containers shall otherwise remain unopened until the ballots and paper cast vote records are destroyed or recycled. |
|---|
| 258 | 269 | | |
|---|
| 259 | 270 | | SEC. 8. Section 17305 of the Elections Code is amended to read: |
|---|
| 260 | 271 | | |
|---|
| 261 | 272 | | ### SEC. 8. |
|---|
| 262 | 273 | | |
|---|
| 263 | 274 | | 17305. (a) The following provisions apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) Upon the completion of the counting of the votes as provided in Article 4 (commencing with Section 15640) of Chapter 9 of Division 15, all items specified in subdivision (b) of Section 17301 shall be kept by the elections official for 22 months from the date of the election or so long thereafter as any contest involving the vote at the election remains undetermined.(c) Notwithstanding any other provision of this code, the final disposition of all items specified in subdivision (b) of Section 17301 shall be determined by the elections official.(d) Sealed ballot containers shall not be opened unless the elections official determines it is necessary in a shredding or recycling process. This section shall not be construed to allow packages or containers to be opened except for purposes specified herein. The packages or containers shall otherwise remain unopened until the ballots and paper cast vote records are destroyed or recycled. |
|---|
| 264 | 275 | | |
|---|
| 265 | 276 | | 17305. (a) The following provisions apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) Upon the completion of the counting of the votes as provided in Article 4 (commencing with Section 15640) of Chapter 9 of Division 15, all items specified in subdivision (b) of Section 17301 shall be kept by the elections official for 22 months from the date of the election or so long thereafter as any contest involving the vote at the election remains undetermined.(c) Notwithstanding any other provision of this code, the final disposition of all items specified in subdivision (b) of Section 17301 shall be determined by the elections official.(d) Sealed ballot containers shall not be opened unless the elections official determines it is necessary in a shredding or recycling process. This section shall not be construed to allow packages or containers to be opened except for purposes specified herein. The packages or containers shall otherwise remain unopened until the ballots and paper cast vote records are destroyed or recycled. |
|---|
| 266 | 277 | | |
|---|
| 267 | 278 | | 17305. (a) The following provisions apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) Upon the completion of the counting of the votes as provided in Article 4 (commencing with Section 15640) of Chapter 9 of Division 15, all items specified in subdivision (b) of Section 17301 shall be kept by the elections official for 22 months from the date of the election or so long thereafter as any contest involving the vote at the election remains undetermined.(c) Notwithstanding any other provision of this code, the final disposition of all items specified in subdivision (b) of Section 17301 shall be determined by the elections official.(d) Sealed ballot containers shall not be opened unless the elections official determines it is necessary in a shredding or recycling process. This section shall not be construed to allow packages or containers to be opened except for purposes specified herein. The packages or containers shall otherwise remain unopened until the ballots and paper cast vote records are destroyed or recycled. |
|---|
| 268 | 279 | | |
|---|
| 269 | 280 | | |
|---|
| 270 | 281 | | |
|---|
| 271 | 282 | | 17305. (a) The following provisions apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative. |
|---|
| 272 | 283 | | |
|---|
| 273 | 284 | | (b) Upon the completion of the counting of the votes as provided in Article 4 (commencing with Section 15640) of Chapter 9 of Division 15, all items specified in subdivision (b) of Section 17301 shall be kept by the elections official for 22 months from the date of the election or so long thereafter as any contest involving the vote at the election remains undetermined. |
|---|
| 274 | 285 | | |
|---|
| 275 | 286 | | (c) Notwithstanding any other provision of this code, the final disposition of all items specified in subdivision (b) of Section 17301 shall be determined by the elections official. |
|---|
| 276 | 287 | | |
|---|
| 277 | 288 | | (d) Sealed ballot containers shall not be opened unless the elections official determines it is necessary in a shredding or recycling process. This section shall not be construed to allow packages or containers to be opened except for purposes specified herein. The packages or containers shall otherwise remain unopened until the ballots and paper cast vote records are destroyed or recycled. |
|---|
| 278 | 289 | | |
|---|
| 279 | 290 | | SEC. 9. Section 17306 of the Elections Code is amended to read:17306. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17305. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) Upon the completion of the counting of the votes as provided in Article 4 (commencing with Section 15640) of Chapter 9 of Division 15, all items specified in subdivision (b) of Section 17302 shall be kept by the elections official for six months from the date of the election or so long thereafter as any contest involving the vote at the election remains undetermined.(c) Notwithstanding any other provision of this code, the final disposition of all items specified in subdivision (b) of Section 17302 shall be determined by the elections official.(d) Sealed ballot containers shall not be opened unless the elections official determines it is necessary in a shredding or recycling process. This section shall not be construed to allow packages or containers to be opened except for purposes specified herein. The packages or containers shall otherwise remain unopened until the ballots and paper cast vote records are destroyed or recycled. |
|---|
| 280 | 291 | | |
|---|
| 281 | 292 | | SEC. 9. Section 17306 of the Elections Code is amended to read: |
|---|
| 282 | 293 | | |
|---|
| 283 | 294 | | ### SEC. 9. |
|---|
| 284 | 295 | | |
|---|
| 285 | 296 | | 17306. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17305. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) Upon the completion of the counting of the votes as provided in Article 4 (commencing with Section 15640) of Chapter 9 of Division 15, all items specified in subdivision (b) of Section 17302 shall be kept by the elections official for six months from the date of the election or so long thereafter as any contest involving the vote at the election remains undetermined.(c) Notwithstanding any other provision of this code, the final disposition of all items specified in subdivision (b) of Section 17302 shall be determined by the elections official.(d) Sealed ballot containers shall not be opened unless the elections official determines it is necessary in a shredding or recycling process. This section shall not be construed to allow packages or containers to be opened except for purposes specified herein. The packages or containers shall otherwise remain unopened until the ballots and paper cast vote records are destroyed or recycled. |
|---|
| 286 | 297 | | |
|---|
| 287 | 298 | | 17306. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17305. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) Upon the completion of the counting of the votes as provided in Article 4 (commencing with Section 15640) of Chapter 9 of Division 15, all items specified in subdivision (b) of Section 17302 shall be kept by the elections official for six months from the date of the election or so long thereafter as any contest involving the vote at the election remains undetermined.(c) Notwithstanding any other provision of this code, the final disposition of all items specified in subdivision (b) of Section 17302 shall be determined by the elections official.(d) Sealed ballot containers shall not be opened unless the elections official determines it is necessary in a shredding or recycling process. This section shall not be construed to allow packages or containers to be opened except for purposes specified herein. The packages or containers shall otherwise remain unopened until the ballots and paper cast vote records are destroyed or recycled. |
|---|
| 288 | 299 | | |
|---|
| 289 | 300 | | 17306. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17305. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) Upon the completion of the counting of the votes as provided in Article 4 (commencing with Section 15640) of Chapter 9 of Division 15, all items specified in subdivision (b) of Section 17302 shall be kept by the elections official for six months from the date of the election or so long thereafter as any contest involving the vote at the election remains undetermined.(c) Notwithstanding any other provision of this code, the final disposition of all items specified in subdivision (b) of Section 17302 shall be determined by the elections official.(d) Sealed ballot containers shall not be opened unless the elections official determines it is necessary in a shredding or recycling process. This section shall not be construed to allow packages or containers to be opened except for purposes specified herein. The packages or containers shall otherwise remain unopened until the ballots and paper cast vote records are destroyed or recycled. |
|---|
| 290 | 301 | | |
|---|
| 291 | 302 | | |
|---|
| 292 | 303 | | |
|---|
| 293 | 304 | | 17306. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17305. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office. |
|---|
| 294 | 305 | | |
|---|
| 295 | 306 | | (b) Upon the completion of the counting of the votes as provided in Article 4 (commencing with Section 15640) of Chapter 9 of Division 15, all items specified in subdivision (b) of Section 17302 shall be kept by the elections official for six months from the date of the election or so long thereafter as any contest involving the vote at the election remains undetermined. |
|---|
| 296 | 307 | | |
|---|
| 297 | 308 | | (c) Notwithstanding any other provision of this code, the final disposition of all items specified in subdivision (b) of Section 17302 shall be determined by the elections official. |
|---|
| 298 | 309 | | |
|---|
| 299 | 310 | | (d) Sealed ballot containers shall not be opened unless the elections official determines it is necessary in a shredding or recycling process. This section shall not be construed to allow packages or containers to be opened except for purposes specified herein. The packages or containers shall otherwise remain unopened until the ballots and paper cast vote records are destroyed or recycled. |
|---|
| 300 | 311 | | |
|---|
| 301 | 312 | | SEC. 10. Chapter 7 (commencing with Section 17600) is added to Division 17 of the Elections Code, to read: CHAPTER 7. Preservation of Electronic Data17600. For purposes of this chapter, the following terms have the following meanings:(a) Ballot image means an electronically captured or generated image of a ballot that is created on a voting device or machine, which contains a list of contests on the ballot, may contain the voter selections for those contests, and complies with the ballot layout requirements.(b) Certified voting technology means any certified voting technologies certified by the Secretary of State, including voting systems, ballot on demand printing systems, electronic poll book systems, or adjudication systems, and the hardware, firmware, software, proprietary intellectual property they contain, any components, and any products they generate, including ballots, ballot images, reports, logs, cast vote records, or electronic data.(c) Chain of custody means a process used to track the movement and control of certified voting technology, as defined in subdivision (b), through its lifecycle by documenting each person and organization who handles certified voting technology, the date and time it was collected or transferred, and the purpose of the transfer. A break in the chain of custody refers to a period during which control of the certified voting technology is uncertain and during which actions taken on the certified voting technology are unaccounted for or unconfirmed.(d) Electronic data includes voting technology software, operating systems, databases, firmware, drivers, and logs.(e) End of lifecycle means the secure clearing or wiping of the certified voting technology so that no software, firmware, or data remains on the equipment and the equipment becomes a nonfunctioning piece of hardware.(f) HASH means a mathematical algorithm used to create a digital fingerprint of a software program, which is used to validate software as identical to the original.(g) Lifecycle of certified voting technology means the entire lifecycle of the certified voting technology from the time of certification and trusted build creation through the end of lifecycle of the certified voting technology.17601. (a) The following provisions shall apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) The following data shall be kept by the elections official, on electronic media, stored and unaltered, for 22 months from the date of the election:(1) All voting system electronic data.(2) All ballot on demand system electronic data, if applicable.(3) All adjudication electronic data.(4) All remote accessible vote by mail system electronic data, if applicable.(5) All electronic poll book electronic data, if applicable.(6) HASH values taken from the voting technology devices, if applicable.(7) All ballot images.(c) If a contest is not commenced within the 22-month period, or if a criminal prosecution involving fraudulent use, using the ballot tally system to mark or falsify ballots, or manipulation of the ballot tally system, is not commenced within the 22-month period, either of which may involve the vote count of the precinct from which voted ballots were received, the elections official shall have the backups destroyed.17602. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17601. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) The following data shall be kept by the elections official, on electronic media, stored and unaltered, for six months from the date of the election:(1) All voting system electronic data.(2) All ballot on demand system electronic data, if applicable.(3) All adjudication electronic data.(4) All remote accessible vote by mail system electronic data, if applicable.(5) All electronic poll book electronic data, if applicable.(6) HASH values taken from the voting technology devices, if applicable.(7) All ballot images, if applicable.(c) If a contest is not commenced within the six-month period, or if a criminal prosecution involving fraudulent use, using the ballot tally system to mark or falsify ballots, or manipulation of the ballot tally system is not commenced within the six-month period, either of which may involve the vote count of the precinct from which voted ballots were received, the elections official shall have the backups destroyed.17603. (a) Certified voting technology equipment and components that are at the end of lifecycle may be securely disposed of or destroyed with the written approval of the manufacturer and the Secretary of State.(b) With respect to any part or component of certified voting technology for which the chain of custody has been compromised or the security or information has been breached or attempted to be breached, all of the following shall occur:(1) The chief elections official of the city, county, or special district and the Secretary of State shall be notified within 24 hours of discovery.(2) The equipment shall be removed from service immediately and replaced if possible.(3) The integrity and reliability of the certified voting technology system, components, and accompanying electronic data shall be evaluated to determine whether they can be restored to their original state and reinstated. |
|---|
| 302 | 313 | | |
|---|
| 303 | 314 | | SEC. 10. Chapter 7 (commencing with Section 17600) is added to Division 17 of the Elections Code, to read: |
|---|
| 304 | 315 | | |
|---|
| 305 | 316 | | ### SEC. 10. |
|---|
| 306 | 317 | | |
|---|
| 307 | 318 | | CHAPTER 7. Preservation of Electronic Data17600. For purposes of this chapter, the following terms have the following meanings:(a) Ballot image means an electronically captured or generated image of a ballot that is created on a voting device or machine, which contains a list of contests on the ballot, may contain the voter selections for those contests, and complies with the ballot layout requirements.(b) Certified voting technology means any certified voting technologies certified by the Secretary of State, including voting systems, ballot on demand printing systems, electronic poll book systems, or adjudication systems, and the hardware, firmware, software, proprietary intellectual property they contain, any components, and any products they generate, including ballots, ballot images, reports, logs, cast vote records, or electronic data.(c) Chain of custody means a process used to track the movement and control of certified voting technology, as defined in subdivision (b), through its lifecycle by documenting each person and organization who handles certified voting technology, the date and time it was collected or transferred, and the purpose of the transfer. A break in the chain of custody refers to a period during which control of the certified voting technology is uncertain and during which actions taken on the certified voting technology are unaccounted for or unconfirmed.(d) Electronic data includes voting technology software, operating systems, databases, firmware, drivers, and logs.(e) End of lifecycle means the secure clearing or wiping of the certified voting technology so that no software, firmware, or data remains on the equipment and the equipment becomes a nonfunctioning piece of hardware.(f) HASH means a mathematical algorithm used to create a digital fingerprint of a software program, which is used to validate software as identical to the original.(g) Lifecycle of certified voting technology means the entire lifecycle of the certified voting technology from the time of certification and trusted build creation through the end of lifecycle of the certified voting technology.17601. (a) The following provisions shall apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) The following data shall be kept by the elections official, on electronic media, stored and unaltered, for 22 months from the date of the election:(1) All voting system electronic data.(2) All ballot on demand system electronic data, if applicable.(3) All adjudication electronic data.(4) All remote accessible vote by mail system electronic data, if applicable.(5) All electronic poll book electronic data, if applicable.(6) HASH values taken from the voting technology devices, if applicable.(7) All ballot images.(c) If a contest is not commenced within the 22-month period, or if a criminal prosecution involving fraudulent use, using the ballot tally system to mark or falsify ballots, or manipulation of the ballot tally system, is not commenced within the 22-month period, either of which may involve the vote count of the precinct from which voted ballots were received, the elections official shall have the backups destroyed.17602. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17601. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) The following data shall be kept by the elections official, on electronic media, stored and unaltered, for six months from the date of the election:(1) All voting system electronic data.(2) All ballot on demand system electronic data, if applicable.(3) All adjudication electronic data.(4) All remote accessible vote by mail system electronic data, if applicable.(5) All electronic poll book electronic data, if applicable.(6) HASH values taken from the voting technology devices, if applicable.(7) All ballot images, if applicable.(c) If a contest is not commenced within the six-month period, or if a criminal prosecution involving fraudulent use, using the ballot tally system to mark or falsify ballots, or manipulation of the ballot tally system is not commenced within the six-month period, either of which may involve the vote count of the precinct from which voted ballots were received, the elections official shall have the backups destroyed.17603. (a) Certified voting technology equipment and components that are at the end of lifecycle may be securely disposed of or destroyed with the written approval of the manufacturer and the Secretary of State.(b) With respect to any part or component of certified voting technology for which the chain of custody has been compromised or the security or information has been breached or attempted to be breached, all of the following shall occur:(1) The chief elections official of the city, county, or special district and the Secretary of State shall be notified within 24 hours of discovery.(2) The equipment shall be removed from service immediately and replaced if possible.(3) The integrity and reliability of the certified voting technology system, components, and accompanying electronic data shall be evaluated to determine whether they can be restored to their original state and reinstated. |
|---|
| 308 | 319 | | |
|---|
| 309 | 320 | | CHAPTER 7. Preservation of Electronic Data17600. For purposes of this chapter, the following terms have the following meanings:(a) Ballot image means an electronically captured or generated image of a ballot that is created on a voting device or machine, which contains a list of contests on the ballot, may contain the voter selections for those contests, and complies with the ballot layout requirements.(b) Certified voting technology means any certified voting technologies certified by the Secretary of State, including voting systems, ballot on demand printing systems, electronic poll book systems, or adjudication systems, and the hardware, firmware, software, proprietary intellectual property they contain, any components, and any products they generate, including ballots, ballot images, reports, logs, cast vote records, or electronic data.(c) Chain of custody means a process used to track the movement and control of certified voting technology, as defined in subdivision (b), through its lifecycle by documenting each person and organization who handles certified voting technology, the date and time it was collected or transferred, and the purpose of the transfer. A break in the chain of custody refers to a period during which control of the certified voting technology is uncertain and during which actions taken on the certified voting technology are unaccounted for or unconfirmed.(d) Electronic data includes voting technology software, operating systems, databases, firmware, drivers, and logs.(e) End of lifecycle means the secure clearing or wiping of the certified voting technology so that no software, firmware, or data remains on the equipment and the equipment becomes a nonfunctioning piece of hardware.(f) HASH means a mathematical algorithm used to create a digital fingerprint of a software program, which is used to validate software as identical to the original.(g) Lifecycle of certified voting technology means the entire lifecycle of the certified voting technology from the time of certification and trusted build creation through the end of lifecycle of the certified voting technology.17601. (a) The following provisions shall apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) The following data shall be kept by the elections official, on electronic media, stored and unaltered, for 22 months from the date of the election:(1) All voting system electronic data.(2) All ballot on demand system electronic data, if applicable.(3) All adjudication electronic data.(4) All remote accessible vote by mail system electronic data, if applicable.(5) All electronic poll book electronic data, if applicable.(6) HASH values taken from the voting technology devices, if applicable.(7) All ballot images.(c) If a contest is not commenced within the 22-month period, or if a criminal prosecution involving fraudulent use, using the ballot tally system to mark or falsify ballots, or manipulation of the ballot tally system, is not commenced within the 22-month period, either of which may involve the vote count of the precinct from which voted ballots were received, the elections official shall have the backups destroyed.17602. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17601. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) The following data shall be kept by the elections official, on electronic media, stored and unaltered, for six months from the date of the election:(1) All voting system electronic data.(2) All ballot on demand system electronic data, if applicable.(3) All adjudication electronic data.(4) All remote accessible vote by mail system electronic data, if applicable.(5) All electronic poll book electronic data, if applicable.(6) HASH values taken from the voting technology devices, if applicable.(7) All ballot images, if applicable.(c) If a contest is not commenced within the six-month period, or if a criminal prosecution involving fraudulent use, using the ballot tally system to mark or falsify ballots, or manipulation of the ballot tally system is not commenced within the six-month period, either of which may involve the vote count of the precinct from which voted ballots were received, the elections official shall have the backups destroyed.17603. (a) Certified voting technology equipment and components that are at the end of lifecycle may be securely disposed of or destroyed with the written approval of the manufacturer and the Secretary of State.(b) With respect to any part or component of certified voting technology for which the chain of custody has been compromised or the security or information has been breached or attempted to be breached, all of the following shall occur:(1) The chief elections official of the city, county, or special district and the Secretary of State shall be notified within 24 hours of discovery.(2) The equipment shall be removed from service immediately and replaced if possible.(3) The integrity and reliability of the certified voting technology system, components, and accompanying electronic data shall be evaluated to determine whether they can be restored to their original state and reinstated. |
|---|
| 310 | 321 | | |
|---|
| 311 | 322 | | CHAPTER 7. Preservation of Electronic Data |
|---|
| 312 | 323 | | |
|---|
| 313 | 324 | | CHAPTER 7. Preservation of Electronic Data |
|---|
| 314 | 325 | | |
|---|
| 315 | 326 | | 17600. For purposes of this chapter, the following terms have the following meanings:(a) Ballot image means an electronically captured or generated image of a ballot that is created on a voting device or machine, which contains a list of contests on the ballot, may contain the voter selections for those contests, and complies with the ballot layout requirements.(b) Certified voting technology means any certified voting technologies certified by the Secretary of State, including voting systems, ballot on demand printing systems, electronic poll book systems, or adjudication systems, and the hardware, firmware, software, proprietary intellectual property they contain, any components, and any products they generate, including ballots, ballot images, reports, logs, cast vote records, or electronic data.(c) Chain of custody means a process used to track the movement and control of certified voting technology, as defined in subdivision (b), through its lifecycle by documenting each person and organization who handles certified voting technology, the date and time it was collected or transferred, and the purpose of the transfer. A break in the chain of custody refers to a period during which control of the certified voting technology is uncertain and during which actions taken on the certified voting technology are unaccounted for or unconfirmed.(d) Electronic data includes voting technology software, operating systems, databases, firmware, drivers, and logs.(e) End of lifecycle means the secure clearing or wiping of the certified voting technology so that no software, firmware, or data remains on the equipment and the equipment becomes a nonfunctioning piece of hardware.(f) HASH means a mathematical algorithm used to create a digital fingerprint of a software program, which is used to validate software as identical to the original.(g) Lifecycle of certified voting technology means the entire lifecycle of the certified voting technology from the time of certification and trusted build creation through the end of lifecycle of the certified voting technology. |
|---|
| 316 | 327 | | |
|---|
| 317 | 328 | | |
|---|
| 318 | 329 | | |
|---|
| 319 | 330 | | 17600. For purposes of this chapter, the following terms have the following meanings: |
|---|
| 320 | 331 | | |
|---|
| 321 | 332 | | (a) Ballot image means an electronically captured or generated image of a ballot that is created on a voting device or machine, which contains a list of contests on the ballot, may contain the voter selections for those contests, and complies with the ballot layout requirements. |
|---|
| 322 | 333 | | |
|---|
| 323 | 334 | | (b) Certified voting technology means any certified voting technologies certified by the Secretary of State, including voting systems, ballot on demand printing systems, electronic poll book systems, or adjudication systems, and the hardware, firmware, software, proprietary intellectual property they contain, any components, and any products they generate, including ballots, ballot images, reports, logs, cast vote records, or electronic data. |
|---|
| 324 | 335 | | |
|---|
| 325 | 336 | | (c) Chain of custody means a process used to track the movement and control of certified voting technology, as defined in subdivision (b), through its lifecycle by documenting each person and organization who handles certified voting technology, the date and time it was collected or transferred, and the purpose of the transfer. A break in the chain of custody refers to a period during which control of the certified voting technology is uncertain and during which actions taken on the certified voting technology are unaccounted for or unconfirmed. |
|---|
| 326 | 337 | | |
|---|
| 327 | 338 | | (d) Electronic data includes voting technology software, operating systems, databases, firmware, drivers, and logs. |
|---|
| 328 | 339 | | |
|---|
| 329 | 340 | | (e) End of lifecycle means the secure clearing or wiping of the certified voting technology so that no software, firmware, or data remains on the equipment and the equipment becomes a nonfunctioning piece of hardware. |
|---|
| 330 | 341 | | |
|---|
| 331 | 342 | | (f) HASH means a mathematical algorithm used to create a digital fingerprint of a software program, which is used to validate software as identical to the original. |
|---|
| 332 | 343 | | |
|---|
| 333 | 344 | | (g) Lifecycle of certified voting technology means the entire lifecycle of the certified voting technology from the time of certification and trusted build creation through the end of lifecycle of the certified voting technology. |
|---|
| 334 | 345 | | |
|---|
| 335 | 346 | | 17601. (a) The following provisions shall apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative.(b) The following data shall be kept by the elections official, on electronic media, stored and unaltered, for 22 months from the date of the election:(1) All voting system electronic data.(2) All ballot on demand system electronic data, if applicable.(3) All adjudication electronic data.(4) All remote accessible vote by mail system electronic data, if applicable.(5) All electronic poll book electronic data, if applicable.(6) HASH values taken from the voting technology devices, if applicable.(7) All ballot images.(c) If a contest is not commenced within the 22-month period, or if a criminal prosecution involving fraudulent use, using the ballot tally system to mark or falsify ballots, or manipulation of the ballot tally system, is not commenced within the 22-month period, either of which may involve the vote count of the precinct from which voted ballots were received, the elections official shall have the backups destroyed. |
|---|
| 336 | 347 | | |
|---|
| 337 | 348 | | |
|---|
| 338 | 349 | | |
|---|
| 339 | 350 | | 17601. (a) The following provisions shall apply to those elections where candidates for one or more of the following offices are voted upon: President, Vice President, United States Senator, and United States Representative. |
|---|
| 340 | 351 | | |
|---|
| 341 | 352 | | (b) The following data shall be kept by the elections official, on electronic media, stored and unaltered, for 22 months from the date of the election: |
|---|
| 342 | 353 | | |
|---|
| 343 | 354 | | (1) All voting system electronic data. |
|---|
| 344 | 355 | | |
|---|
| 345 | 356 | | (2) All ballot on demand system electronic data, if applicable. |
|---|
| 346 | 357 | | |
|---|
| 347 | 358 | | (3) All adjudication electronic data. |
|---|
| 348 | 359 | | |
|---|
| 349 | 360 | | (4) All remote accessible vote by mail system electronic data, if applicable. |
|---|
| 350 | 361 | | |
|---|
| 351 | 362 | | (5) All electronic poll book electronic data, if applicable. |
|---|
| 352 | 363 | | |
|---|
| 353 | 364 | | (6) HASH values taken from the voting technology devices, if applicable. |
|---|
| 354 | 365 | | |
|---|
| 355 | 366 | | (7) All ballot images. |
|---|
| 356 | 367 | | |
|---|
| 357 | 368 | | (c) If a contest is not commenced within the 22-month period, or if a criminal prosecution involving fraudulent use, using the ballot tally system to mark or falsify ballots, or manipulation of the ballot tally system, is not commenced within the 22-month period, either of which may involve the vote count of the precinct from which voted ballots were received, the elections official shall have the backups destroyed. |
|---|
| 358 | 369 | | |
|---|
| 359 | 370 | | 17602. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17601. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office.(b) The following data shall be kept by the elections official, on electronic media, stored and unaltered, for six months from the date of the election:(1) All voting system electronic data.(2) All ballot on demand system electronic data, if applicable.(3) All adjudication electronic data.(4) All remote accessible vote by mail system electronic data, if applicable.(5) All electronic poll book electronic data, if applicable.(6) HASH values taken from the voting technology devices, if applicable.(7) All ballot images, if applicable.(c) If a contest is not commenced within the six-month period, or if a criminal prosecution involving fraudulent use, using the ballot tally system to mark or falsify ballots, or manipulation of the ballot tally system is not commenced within the six-month period, either of which may involve the vote count of the precinct from which voted ballots were received, the elections official shall have the backups destroyed. |
|---|
| 360 | 371 | | |
|---|
| 361 | 372 | | |
|---|
| 362 | 373 | | |
|---|
| 363 | 374 | | 17602. (a) The following provisions shall apply to all state or local elections not provided for in subdivision (a) of Section 17601. An election is not deemed a state or local election if votes for candidates for federal office may be cast on the same ballot as votes for candidates for state or local office. |
|---|
| 364 | 375 | | |
|---|
| 365 | 376 | | (b) The following data shall be kept by the elections official, on electronic media, stored and unaltered, for six months from the date of the election: |
|---|
| 366 | 377 | | |
|---|
| 367 | 378 | | (1) All voting system electronic data. |
|---|
| 368 | 379 | | |
|---|
| 369 | 380 | | (2) All ballot on demand system electronic data, if applicable. |
|---|
| 370 | 381 | | |
|---|
| 371 | 382 | | (3) All adjudication electronic data. |
|---|
| 372 | 383 | | |
|---|
| 373 | 384 | | (4) All remote accessible vote by mail system electronic data, if applicable. |
|---|
| 374 | 385 | | |
|---|
| 375 | 386 | | (5) All electronic poll book electronic data, if applicable. |
|---|
| 376 | 387 | | |
|---|
| 377 | 388 | | (6) HASH values taken from the voting technology devices, if applicable. |
|---|
| 378 | 389 | | |
|---|
| 379 | 390 | | (7) All ballot images, if applicable. |
|---|
| 380 | 391 | | |
|---|
| 381 | 392 | | (c) If a contest is not commenced within the six-month period, or if a criminal prosecution involving fraudulent use, using the ballot tally system to mark or falsify ballots, or manipulation of the ballot tally system is not commenced within the six-month period, either of which may involve the vote count of the precinct from which voted ballots were received, the elections official shall have the backups destroyed. |
|---|
| 382 | 393 | | |
|---|
| 383 | 394 | | 17603. (a) Certified voting technology equipment and components that are at the end of lifecycle may be securely disposed of or destroyed with the written approval of the manufacturer and the Secretary of State.(b) With respect to any part or component of certified voting technology for which the chain of custody has been compromised or the security or information has been breached or attempted to be breached, all of the following shall occur:(1) The chief elections official of the city, county, or special district and the Secretary of State shall be notified within 24 hours of discovery.(2) The equipment shall be removed from service immediately and replaced if possible.(3) The integrity and reliability of the certified voting technology system, components, and accompanying electronic data shall be evaluated to determine whether they can be restored to their original state and reinstated. |
|---|
| 384 | 395 | | |
|---|
| 385 | 396 | | |
|---|
| 386 | 397 | | |
|---|
| 387 | 398 | | 17603. (a) Certified voting technology equipment and components that are at the end of lifecycle may be securely disposed of or destroyed with the written approval of the manufacturer and the Secretary of State. |
|---|
| 388 | 399 | | |
|---|
| 389 | 400 | | (b) With respect to any part or component of certified voting technology for which the chain of custody has been compromised or the security or information has been breached or attempted to be breached, all of the following shall occur: |
|---|
| 390 | 401 | | |
|---|
| 391 | 402 | | (1) The chief elections official of the city, county, or special district and the Secretary of State shall be notified within 24 hours of discovery. |
|---|
| 392 | 403 | | |
|---|
| 393 | 404 | | (2) The equipment shall be removed from service immediately and replaced if possible. |
|---|
| 394 | 405 | | |
|---|
| 395 | 406 | | (3) The integrity and reliability of the certified voting technology system, components, and accompanying electronic data shall be evaluated to determine whether they can be restored to their original state and reinstated. |
|---|
| 396 | 407 | | |
|---|
| 397 | 408 | | SEC. 11. Section 18564 of the Elections Code is amended to read:18564. (a) Any person is guilty of a felony, punishable by imprisonment pursuant to subdivision (h) of Section 1170 of the Penal Code for two, three, or four years who, before or during an election:(1) Tampers with, interferes with, or attempts to interfere with, the correct operation of, or willfully damages in order to prevent the use of, any voting machine, voting device, voting system, vote tabulating device, or ballot tally software program source codes.(2) (A) Interferes or attempts to interfere with the secrecy of voting or ballot tally software program source codes.(B) For purposes of this paragraph, interferes or attempts to interfere with includes knowingly, and without authorization, providing unauthorized access to, or breaking the chain of custody to, either of the following:(i) Certified voting technology during the lifecycle of that certified voting technology.(ii) Any finished or unfinished ballot cards.(3) Knowingly, and without authorization, makes or has in the persons possession credentials, passwords, or access keys to a voting machine that has been adopted and will be used in elections in this state.(4) Willfully substitutes or attempts to substitute forged or counterfeit ballot tally software program source codes.(b) The definitions in Section 17600 apply for purposes of this section. |
|---|
| 398 | 409 | | |
|---|
| 399 | 410 | | SEC. 11. Section 18564 of the Elections Code is amended to read: |
|---|
| 400 | 411 | | |
|---|
| 401 | 412 | | ### SEC. 11. |
|---|
| 402 | 413 | | |
|---|
| 403 | 414 | | 18564. (a) Any person is guilty of a felony, punishable by imprisonment pursuant to subdivision (h) of Section 1170 of the Penal Code for two, three, or four years who, before or during an election:(1) Tampers with, interferes with, or attempts to interfere with, the correct operation of, or willfully damages in order to prevent the use of, any voting machine, voting device, voting system, vote tabulating device, or ballot tally software program source codes.(2) (A) Interferes or attempts to interfere with the secrecy of voting or ballot tally software program source codes.(B) For purposes of this paragraph, interferes or attempts to interfere with includes knowingly, and without authorization, providing unauthorized access to, or breaking the chain of custody to, either of the following:(i) Certified voting technology during the lifecycle of that certified voting technology.(ii) Any finished or unfinished ballot cards.(3) Knowingly, and without authorization, makes or has in the persons possession credentials, passwords, or access keys to a voting machine that has been adopted and will be used in elections in this state.(4) Willfully substitutes or attempts to substitute forged or counterfeit ballot tally software program source codes.(b) The definitions in Section 17600 apply for purposes of this section. |
|---|
| 404 | 415 | | |
|---|
| 405 | 416 | | 18564. (a) Any person is guilty of a felony, punishable by imprisonment pursuant to subdivision (h) of Section 1170 of the Penal Code for two, three, or four years who, before or during an election:(1) Tampers with, interferes with, or attempts to interfere with, the correct operation of, or willfully damages in order to prevent the use of, any voting machine, voting device, voting system, vote tabulating device, or ballot tally software program source codes.(2) (A) Interferes or attempts to interfere with the secrecy of voting or ballot tally software program source codes.(B) For purposes of this paragraph, interferes or attempts to interfere with includes knowingly, and without authorization, providing unauthorized access to, or breaking the chain of custody to, either of the following:(i) Certified voting technology during the lifecycle of that certified voting technology.(ii) Any finished or unfinished ballot cards.(3) Knowingly, and without authorization, makes or has in the persons possession credentials, passwords, or access keys to a voting machine that has been adopted and will be used in elections in this state.(4) Willfully substitutes or attempts to substitute forged or counterfeit ballot tally software program source codes.(b) The definitions in Section 17600 apply for purposes of this section. |
|---|
| 406 | 417 | | |
|---|
| 407 | 418 | | 18564. (a) Any person is guilty of a felony, punishable by imprisonment pursuant to subdivision (h) of Section 1170 of the Penal Code for two, three, or four years who, before or during an election:(1) Tampers with, interferes with, or attempts to interfere with, the correct operation of, or willfully damages in order to prevent the use of, any voting machine, voting device, voting system, vote tabulating device, or ballot tally software program source codes.(2) (A) Interferes or attempts to interfere with the secrecy of voting or ballot tally software program source codes.(B) For purposes of this paragraph, interferes or attempts to interfere with includes knowingly, and without authorization, providing unauthorized access to, or breaking the chain of custody to, either of the following:(i) Certified voting technology during the lifecycle of that certified voting technology.(ii) Any finished or unfinished ballot cards.(3) Knowingly, and without authorization, makes or has in the persons possession credentials, passwords, or access keys to a voting machine that has been adopted and will be used in elections in this state.(4) Willfully substitutes or attempts to substitute forged or counterfeit ballot tally software program source codes.(b) The definitions in Section 17600 apply for purposes of this section. |
|---|
| 408 | 419 | | |
|---|
| 409 | 420 | | |
|---|
| 410 | 421 | | |
|---|
| 411 | 422 | | 18564. (a) Any person is guilty of a felony, punishable by imprisonment pursuant to subdivision (h) of Section 1170 of the Penal Code for two, three, or four years who, before or during an election: |
|---|
| 412 | 423 | | |
|---|
| 413 | 424 | | (1) Tampers with, interferes with, or attempts to interfere with, the correct operation of, or willfully damages in order to prevent the use of, any voting machine, voting device, voting system, vote tabulating device, or ballot tally software program source codes. |
|---|
| 414 | 425 | | |
|---|
| 415 | 426 | | (2) (A) Interferes or attempts to interfere with the secrecy of voting or ballot tally software program source codes. |
|---|
| 416 | 427 | | |
|---|
| 417 | 428 | | (B) For purposes of this paragraph, interferes or attempts to interfere with includes knowingly, and without authorization, providing unauthorized access to, or breaking the chain of custody to, either of the following: |
|---|
| 418 | 429 | | |
|---|
| 419 | 430 | | (i) Certified voting technology during the lifecycle of that certified voting technology. |
|---|
| 420 | 431 | | |
|---|
| 421 | 432 | | (ii) Any finished or unfinished ballot cards. |
|---|
| 422 | 433 | | |
|---|
| 423 | 434 | | (3) Knowingly, and without authorization, makes or has in the persons possession credentials, passwords, or access keys to a voting machine that has been adopted and will be used in elections in this state. |
|---|
| 424 | 435 | | |
|---|
| 425 | 436 | | (4) Willfully substitutes or attempts to substitute forged or counterfeit ballot tally software program source codes. |
|---|
| 426 | 437 | | |
|---|
| 427 | 438 | | (b) The definitions in Section 17600 apply for purposes of this section. |
|---|
| 428 | 439 | | |
|---|
| 429 | 440 | | SEC. 12. Section 19201 of the Elections Code is amended to read:19201. (a) (1) The Secretary of State may grant conditional approval to a voting system or part of a voting system under either of the following circumstances:(A) A voting system or part of a voting system was decertified as a result of a review by the Secretary of State pursuant to Section 19232.(B) A certified voting system or part of that voting system is modified to comply with voting system standards or changes in statute.(2) For purposes of granting conditional approval to a voting system or part of a voting system pursuant to paragraph (1), the Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.(b) The Secretary of State may withdraw conditional approval at any time pursuant to Section 19232. |
|---|
| 430 | 441 | | |
|---|
| 431 | 442 | | SEC. 12. Section 19201 of the Elections Code is amended to read: |
|---|
| 432 | 443 | | |
|---|
| 433 | 444 | | ### SEC. 12. |
|---|
| 434 | 445 | | |
|---|
| 435 | 446 | | 19201. (a) (1) The Secretary of State may grant conditional approval to a voting system or part of a voting system under either of the following circumstances:(A) A voting system or part of a voting system was decertified as a result of a review by the Secretary of State pursuant to Section 19232.(B) A certified voting system or part of that voting system is modified to comply with voting system standards or changes in statute.(2) For purposes of granting conditional approval to a voting system or part of a voting system pursuant to paragraph (1), the Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.(b) The Secretary of State may withdraw conditional approval at any time pursuant to Section 19232. |
|---|
| 436 | 447 | | |
|---|
| 437 | 448 | | 19201. (a) (1) The Secretary of State may grant conditional approval to a voting system or part of a voting system under either of the following circumstances:(A) A voting system or part of a voting system was decertified as a result of a review by the Secretary of State pursuant to Section 19232.(B) A certified voting system or part of that voting system is modified to comply with voting system standards or changes in statute.(2) For purposes of granting conditional approval to a voting system or part of a voting system pursuant to paragraph (1), the Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.(b) The Secretary of State may withdraw conditional approval at any time pursuant to Section 19232. |
|---|
| 438 | 449 | | |
|---|
| 439 | 450 | | 19201. (a) (1) The Secretary of State may grant conditional approval to a voting system or part of a voting system under either of the following circumstances:(A) A voting system or part of a voting system was decertified as a result of a review by the Secretary of State pursuant to Section 19232.(B) A certified voting system or part of that voting system is modified to comply with voting system standards or changes in statute.(2) For purposes of granting conditional approval to a voting system or part of a voting system pursuant to paragraph (1), the Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State.(b) The Secretary of State may withdraw conditional approval at any time pursuant to Section 19232. |
|---|
| 440 | 451 | | |
|---|
| 441 | 452 | | |
|---|
| 442 | 453 | | |
|---|
| 443 | 454 | | 19201. (a) (1) The Secretary of State may grant conditional approval to a voting system or part of a voting system under either of the following circumstances: |
|---|
| 444 | 455 | | |
|---|
| 445 | 456 | | (A) A voting system or part of a voting system was decertified as a result of a review by the Secretary of State pursuant to Section 19232. |
|---|
| 446 | 457 | | |
|---|
| 447 | 458 | | (B) A certified voting system or part of that voting system is modified to comply with voting system standards or changes in statute. |
|---|
| 448 | 459 | | |
|---|
| 449 | 460 | | (2) For purposes of granting conditional approval to a voting system or part of a voting system pursuant to paragraph (1), the Secretary of State may impose additional conditions of approval as deemed necessary by the Secretary of State. |
|---|
| 450 | 461 | | |
|---|
| 451 | 462 | | (b) The Secretary of State may withdraw conditional approval at any time pursuant to Section 19232. |
|---|
| 452 | 463 | | |
|---|
| 453 | 464 | | SEC. 13. Section 19205 of the Elections Code is amended to read:19205. A voting system shall comply with all of the following:(a) No part of the voting system shall be connected to the internet at any time.(b) No part of the voting system shall electronically receive or transmit election data through an exterior communication network, including the public telephone system, if the communication originates from or terminates at a polling place, satellite location, or counting center.(c) (1) No part of the voting system shall receive or transmit wireless communications or wireless data transfers.(2) A network connection to any device not directly used and necessary for voting system functions shall not be established. Communication by or with any component of the voting system by wireless or modem transmission at any time is prohibited. A component of the voting system, or any device with network connectivity to the voting system, shall not be connected to the internet, directly or indirectly, at any time.(d) (1) The voting system shall be used in a configuration of parallel central election management systems separated by an air-gap.(2) For purposes of this subdivision, air-gap includes all of the following:(A) A permanent central system known to be running unaltered, certified software and firmware that is used solely to define elections and program voting equipment and memory cards.(B) A physically isolated duplicate system, reformatted after every election to guard against the possibility of infection, that is used solely to read memory cards containing vote results, accumulate and tabulate those results, and produce reports.(C) A separate computer dedicated solely to this purpose that is used to reformat all memory devices before they are connected to the permanent system again. |
|---|
| 454 | 465 | | |
|---|
| 455 | 466 | | SEC. 13. Section 19205 of the Elections Code is amended to read: |
|---|
| 456 | 467 | | |
|---|
| 457 | 468 | | ### SEC. 13. |
|---|
| 458 | 469 | | |
|---|
| 459 | 470 | | 19205. A voting system shall comply with all of the following:(a) No part of the voting system shall be connected to the internet at any time.(b) No part of the voting system shall electronically receive or transmit election data through an exterior communication network, including the public telephone system, if the communication originates from or terminates at a polling place, satellite location, or counting center.(c) (1) No part of the voting system shall receive or transmit wireless communications or wireless data transfers.(2) A network connection to any device not directly used and necessary for voting system functions shall not be established. Communication by or with any component of the voting system by wireless or modem transmission at any time is prohibited. A component of the voting system, or any device with network connectivity to the voting system, shall not be connected to the internet, directly or indirectly, at any time.(d) (1) The voting system shall be used in a configuration of parallel central election management systems separated by an air-gap.(2) For purposes of this subdivision, air-gap includes all of the following:(A) A permanent central system known to be running unaltered, certified software and firmware that is used solely to define elections and program voting equipment and memory cards.(B) A physically isolated duplicate system, reformatted after every election to guard against the possibility of infection, that is used solely to read memory cards containing vote results, accumulate and tabulate those results, and produce reports.(C) A separate computer dedicated solely to this purpose that is used to reformat all memory devices before they are connected to the permanent system again. |
|---|
| 460 | 471 | | |
|---|
| 461 | 472 | | 19205. A voting system shall comply with all of the following:(a) No part of the voting system shall be connected to the internet at any time.(b) No part of the voting system shall electronically receive or transmit election data through an exterior communication network, including the public telephone system, if the communication originates from or terminates at a polling place, satellite location, or counting center.(c) (1) No part of the voting system shall receive or transmit wireless communications or wireless data transfers.(2) A network connection to any device not directly used and necessary for voting system functions shall not be established. Communication by or with any component of the voting system by wireless or modem transmission at any time is prohibited. A component of the voting system, or any device with network connectivity to the voting system, shall not be connected to the internet, directly or indirectly, at any time.(d) (1) The voting system shall be used in a configuration of parallel central election management systems separated by an air-gap.(2) For purposes of this subdivision, air-gap includes all of the following:(A) A permanent central system known to be running unaltered, certified software and firmware that is used solely to define elections and program voting equipment and memory cards.(B) A physically isolated duplicate system, reformatted after every election to guard against the possibility of infection, that is used solely to read memory cards containing vote results, accumulate and tabulate those results, and produce reports.(C) A separate computer dedicated solely to this purpose that is used to reformat all memory devices before they are connected to the permanent system again. |
|---|
| 462 | 473 | | |
|---|
| 463 | 474 | | 19205. A voting system shall comply with all of the following:(a) No part of the voting system shall be connected to the internet at any time.(b) No part of the voting system shall electronically receive or transmit election data through an exterior communication network, including the public telephone system, if the communication originates from or terminates at a polling place, satellite location, or counting center.(c) (1) No part of the voting system shall receive or transmit wireless communications or wireless data transfers.(2) A network connection to any device not directly used and necessary for voting system functions shall not be established. Communication by or with any component of the voting system by wireless or modem transmission at any time is prohibited. A component of the voting system, or any device with network connectivity to the voting system, shall not be connected to the internet, directly or indirectly, at any time.(d) (1) The voting system shall be used in a configuration of parallel central election management systems separated by an air-gap.(2) For purposes of this subdivision, air-gap includes all of the following:(A) A permanent central system known to be running unaltered, certified software and firmware that is used solely to define elections and program voting equipment and memory cards.(B) A physically isolated duplicate system, reformatted after every election to guard against the possibility of infection, that is used solely to read memory cards containing vote results, accumulate and tabulate those results, and produce reports.(C) A separate computer dedicated solely to this purpose that is used to reformat all memory devices before they are connected to the permanent system again. |
|---|
| 464 | 475 | | |
|---|
| 465 | 476 | | |
|---|
| 466 | 477 | | |
|---|
| 467 | 478 | | 19205. A voting system shall comply with all of the following: |
|---|
| 468 | 479 | | |
|---|
| 469 | 480 | | (a) No part of the voting system shall be connected to the internet at any time. |
|---|
| 470 | 481 | | |
|---|
| 471 | 482 | | (b) No part of the voting system shall electronically receive or transmit election data through an exterior communication network, including the public telephone system, if the communication originates from or terminates at a polling place, satellite location, or counting center. |
|---|
| 472 | 483 | | |
|---|
| 473 | 484 | | (c) (1) No part of the voting system shall receive or transmit wireless communications or wireless data transfers. |
|---|
| 474 | 485 | | |
|---|
| 475 | 486 | | (2) A network connection to any device not directly used and necessary for voting system functions shall not be established. Communication by or with any component of the voting system by wireless or modem transmission at any time is prohibited. A component of the voting system, or any device with network connectivity to the voting system, shall not be connected to the internet, directly or indirectly, at any time. |
|---|
| 476 | 487 | | |
|---|
| 477 | 488 | | (d) (1) The voting system shall be used in a configuration of parallel central election management systems separated by an air-gap. |
|---|
| 478 | 489 | | |
|---|
| 479 | 490 | | (2) For purposes of this subdivision, air-gap includes all of the following: |
|---|
| 480 | 491 | | |
|---|
| 481 | 492 | | (A) A permanent central system known to be running unaltered, certified software and firmware that is used solely to define elections and program voting equipment and memory cards. |
|---|
| 482 | 493 | | |
|---|
| 483 | 494 | | (B) A physically isolated duplicate system, reformatted after every election to guard against the possibility of infection, that is used solely to read memory cards containing vote results, accumulate and tabulate those results, and produce reports. |
|---|
| 484 | 495 | | |
|---|
| 485 | 496 | | (C) A separate computer dedicated solely to this purpose that is used to reformat all memory devices before they are connected to the permanent system again. |
|---|
| 486 | 497 | | |
|---|
| 487 | 498 | | SEC. 14. Section 19281 of the Elections Code is amended to read:19281. (a) A remote accessible vote by mail system, in whole or in part, shall not be used unless it has been certified or conditionally approved by the Secretary of State before the election at which it is to be first used. The Secretary of State may impose additional conditions of approval as deemed necessary for the certification of the remote accessible vote by mail system.(b) All other uses of a remote accessible vote by mail system shall be subject to the provisions of Section 19202. |
|---|
| 488 | 499 | | |
|---|
| 489 | 500 | | SEC. 14. Section 19281 of the Elections Code is amended to read: |
|---|
| 490 | 501 | | |
|---|
| 491 | 502 | | ### SEC. 14. |
|---|
| 492 | 503 | | |
|---|
| 493 | 504 | | 19281. (a) A remote accessible vote by mail system, in whole or in part, shall not be used unless it has been certified or conditionally approved by the Secretary of State before the election at which it is to be first used. The Secretary of State may impose additional conditions of approval as deemed necessary for the certification of the remote accessible vote by mail system.(b) All other uses of a remote accessible vote by mail system shall be subject to the provisions of Section 19202. |
|---|
| 494 | 505 | | |
|---|
| 495 | 506 | | 19281. (a) A remote accessible vote by mail system, in whole or in part, shall not be used unless it has been certified or conditionally approved by the Secretary of State before the election at which it is to be first used. The Secretary of State may impose additional conditions of approval as deemed necessary for the certification of the remote accessible vote by mail system.(b) All other uses of a remote accessible vote by mail system shall be subject to the provisions of Section 19202. |
|---|
| 496 | 507 | | |
|---|
| 497 | 508 | | 19281. (a) A remote accessible vote by mail system, in whole or in part, shall not be used unless it has been certified or conditionally approved by the Secretary of State before the election at which it is to be first used. The Secretary of State may impose additional conditions of approval as deemed necessary for the certification of the remote accessible vote by mail system.(b) All other uses of a remote accessible vote by mail system shall be subject to the provisions of Section 19202. |
|---|
| 498 | 509 | | |
|---|
| 499 | 510 | | |
|---|
| 500 | 511 | | |
|---|
| 501 | 512 | | 19281. (a) A remote accessible vote by mail system, in whole or in part, shall not be used unless it has been certified or conditionally approved by the Secretary of State before the election at which it is to be first used. The Secretary of State may impose additional conditions of approval as deemed necessary for the certification of the remote accessible vote by mail system. |
|---|
| 502 | 513 | | |
|---|
| 503 | 514 | | (b) All other uses of a remote accessible vote by mail system shall be subject to the provisions of Section 19202. |
|---|
| 504 | 515 | | |
|---|
| 505 | 516 | | SEC. 15. No reimbursement is required by this act pursuant to Section 6 of Article XIIIB of the California Constitution for certain costs that may be incurred by a local agency or school district because, in that regard, this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIIIB of the California Constitution.However, if the Commission on State Mandates determines that this act contains other costs mandated by the state, reimbursement to local agencies and school districts for those costs shall be made pursuant to Part 7 (commencing with Section 17500) of Division 4 of Title 2 of the Government Code. |
|---|
| 506 | 517 | | |
|---|
| 507 | 518 | | SEC. 15. No reimbursement is required by this act pursuant to Section 6 of Article XIIIB of the California Constitution for certain costs that may be incurred by a local agency or school district because, in that regard, this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIIIB of the California Constitution.However, if the Commission on State Mandates determines that this act contains other costs mandated by the state, reimbursement to local agencies and school districts for those costs shall be made pursuant to Part 7 (commencing with Section 17500) of Division 4 of Title 2 of the Government Code. |
|---|
| 508 | 519 | | |
|---|
| 509 | 520 | | SEC. 15. No reimbursement is required by this act pursuant to Section 6 of Article XIIIB of the California Constitution for certain costs that may be incurred by a local agency or school district because, in that regard, this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIIIB of the California Constitution. |
|---|
| 510 | 521 | | |
|---|
| 511 | 522 | | ### SEC. 15. |
|---|
| 512 | 523 | | |
|---|
| 513 | 524 | | However, if the Commission on State Mandates determines that this act contains other costs mandated by the state, reimbursement to local agencies and school districts for those costs shall be made pursuant to Part 7 (commencing with Section 17500) of Division 4 of Title 2 of the Government Code. |
|---|
| 514 | 525 | | |
|---|
| 515 | 526 | | SEC. 16. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:To ensure that adequate protections for voting systems and voter data are implemented in time for the 2024 presidential general election, it is necessary that this act take effect immediately. |
|---|
| 516 | 527 | | |
|---|
| 517 | 528 | | SEC. 16. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:To ensure that adequate protections for voting systems and voter data are implemented in time for the 2024 presidential general election, it is necessary that this act take effect immediately. |
|---|
| 518 | 529 | | |
|---|
| 519 | 530 | | SEC. 16. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are: |
|---|
| 520 | 531 | | |
|---|
| 521 | 532 | | ### SEC. 16. |
|---|
| 522 | 533 | | |
|---|
| 523 | 534 | | To ensure that adequate protections for voting systems and voter data are implemented in time for the 2024 presidential general election, it is necessary that this act take effect immediately. |
|---|