FIRSTREGULARSESSION
HOUSEBILLNO.210
103RDGENERALASSEMBLY
INTRODUCEDBYREPRESENTATIVEVANSCHOIACK.
0985H.01I DANARADEMANMILLER,ChiefClerk
ANACT
Toamendchapter542,RSMo,byaddingtheretotennewsectionsrelatingtounmannedaerial
systems,withpenaltyprovisions.
BeitenactedbytheGeneralAssemblyofthestateofMissouri,asfollows:
SectionA.Chapter542,RSMo,isamendedbyaddingtheretotennewsections,tobe
2knownassections542.550,542.552,542.554,542.556,542.558,542.560,542.562,542.564,
3542.566,and542.568,toreadasfollows:
542.550.1.Sections542.550to542.568shallbeknownandmaybecitedasthe
2"UnmannedAerialSystemsSecurityActof2025".
542.552.1.Forthepurposesofsections542.550to542.568,thefollowingterms
2mean:
3 (1)"Countryofconcern",thePeople’sRepublicofChina,theRussian
4Federation,theIslamicRepublicofIran,theDemocraticPeople'sRepublicofKorea,
5theRepublicofCuba,theVenezuelanregimeofNicolásMaduro,ortheSyrianArab
6Republic,includinganyagentoforanyotherentityundersignificantcontrolofsuch
7countryofconcern,oranyotherentitydeemedbythegovernorinconsultationwith
8appropriatefederalandstateofficials;
9 (2)"Criticalcomponent",adronecomponentrelatedtoflightcontrollers;radio;
10datatransmissiondevices;cameras;gimbals;groundcontrolsystems;operating
11software,includingcellphoneortabletapplicationsbutnotcellphoneortablet
12operatingsystems;networkconnectivity;ordatastorage.Theterm"critical
13component"shallnotmeanpassiveelectronicssuchasresistorsandnon-data-
14transmittingmotors,batteries,andwiring;
EXPLANATION—Matterenclosedinbold-facedbrackets[thus] intheabovebillisnotenactedandis
intendedtobeomittedfromthelaw.Matterinbold-facetypeintheabovebillisproposedlanguage. 15 (3)"Criticalinfrastructure",systemsandassets,whetherphysicalorvirtual,so
16vitaltothestateofMissouriortheUnitedStatesofAmericathattheincapacityor
17destructionofsuchsystemsandassetswouldhaveadebilitatingimpactonstateor
18nationalsecurity,stateornationaleconomicsecurity,stateornationalpublichealth,or
19anycombinationofthosematters.Criticalinfrastructuremaybepubliclyorprivately
20owned,andincludesbutisnotlimitedto:
21 (a)Gasandoilproduction,storage,ordeliverysystems;
22 (b)Watersupply,refinement,storage,ordeliverysystems;
23 (c)Telecommunicationsnetworks;
24 (d)Electricalpowerdeliverysystems;
25 (e)Emergencyservices;
26 (f)Transportationsystemsandservices;or
27 (g)Personaldataorotherwiseclassifiedinformationstoragesystems,including
28cybersecurity;
29 (4)"Data",anyinformation,document,media,ormachine-readablematerial
30regardlessofphysicalformorcharacteristicsthatiscreatedorobtainedbya
31governmentagencyinthecourseofofficialagencybusiness;
32 (5)"Drone",anunmannedaircraft,watercraft,orgroundvehicleorarobotic
33devicethat:
34 (a)Iscontrolledremotelybyahumanoperator;or
35 (b)Operatesautonomouslythroughcomputersoftwareorotherprogramming;
36 (6)"Flightmappingsoftware",anyprogramorgroundcontrolsystemthat
37allowsfortheuserto:
38 (a)Inputasetofcoordinatesorlocationstowhichthedronewillautonomously
39flytoinapredeterminedflightpattern;or
40 (b)Controltheflightpathordestinationofthedronefromanydeviceotherthan
41adedicatedhandheldcontrollerwithinsightofthedrone;
42 (7)"Geofence",avirtualgeographicboundarydefinedbyglobalpositioning
43system(GPS),radiofrequencyidentification(RFID),orsomeotherlocationpositioning
44technology,createdtopreventtheuseofdronedeviceswithinarestrictedgeographic
45area;
46 (8)"Governmentagency",anystate,county,local,ormunicipalgovernment
47entityoranyunitofgovernmentcreatedorestablishedbylawthatusesadroneforany
48purpose;
49 (9)"Instructionaltechnology",aninteractivedeviceusedbyaschoolthatassists
50ininstructingaclassoragroupofstudentsandincludesthenecessaryhardwareand
HB210 2 51softwaretooperatetheinteractivedevice.Thetermalsoincludessupportsystemsin
52whichaninteractivedevicemaymountandisnotrequiredtobeaffixedtothefacilities;
53 (10)"Opendata",datawhicharestructuredinawaythatenablesthedatatobe
54fullydiscoverableandusablebythepublic.Thetermdoesnotincludedatathatare
55restrictedfrompublicdisclosurebasedonfederalorstatelawsandregulations
56including,butnotlimitedto,thoserelatedtoprivacy,confidentiality,security,personal
57health,businessortradesecretinformation,andexemptionsfromstatepublicrecords
58lawsordataforwhichagovernmentagencyisstatutorilyauthorizedtoassessafeefor
59itsdistribution;
60 (11)"Researchandaccountabilitypurposes",adroneusedindirectsupportof
61researchondronehardware,operatingsystems,software,communicationssystemsand
62protocols,components,anddatapracticesforthepurposeofunderstandingthe
63existenceandextentofpotentialthreatsandvulnerabilities,andmitigationsthereof.
64Thisresearchshallbeconductedatthedirectionofastategovernmentagencyora
65federalagencyorapartycontractedbyastategovernmentagencyorfederalagencyto
66conducttheresearch;
67 (12)"School",anorganizationofstudentsforinstructionalpurposesonan
68elementary,secondary,orpost-secondarylevelauthorizedunderrulesofthe
69departmentofelementaryandsecondaryeducationorthedepartmentofhigher
70educationandworkforcedevelopment;
71 (13)"Sensitivelocation",alocationinMissouriwheredroneusageisprohibited
72andthatisrequiredtobegeofencedbycompaniesthatprovideflightmappingsoftware
73inordertopreventunauthorizeduseofdrones.Theselocationsshallincludemilitary
74locations,powerstations,criticalinfrastructure,andotherlocationsdeterminedtobe
75sensitivebythedepartmentoftransportationinconsultationwithrelevantstateand
76federalauthorities.
542.554.Agovernmentagencyshallonlyuseadronefromamanufacturerthat
2meetstheminimumsecurityrequirementsspecifiedinsections542.550to542.568.A
3manufacturerthatmeetssuchrequirementsisdeemedanapprovedmanufacturerfor
4thegiventierasspecifiedinsection542.556.Notwithstandingamanufacturer’s
5designationasanapprovedmanufacturer,thegovernmentagencyisstillrequiredto
6ensurethatthedroneitintendstousecomplieswithallapplicableprovisionsofthis
7rule.
542.556.1.Dronesshallbeclassifiedasfollows:
2 (1)"Tierone",adronethatdoesnotcollect,transmit,orreceivedataduring
3flight.Examplesofsuchdronesincludedronesthatnavigatealongpre-programmed
HB210 3 4waypointsandtethereddrones.Adroneusedbyaschoolexclusivelyasinstructional
5technologyshallbeclassifiedastieronedroneusage;
6 (2)"Tiertwo",adronethatmaycollect,transmit,orreceiveonlyflightcontrol
7data,excludingvisualandauditorydata;or
8 (3)"Tierthree",adronethatmaycollect,transmit,orreceiveanydata,
9includingvisualorauditorydata.
10 2.(1)Dronesusedforresearchandaccountabilitypurposesshallbeexempt
11fromtherequirementsinsections542.558,542.562,and542.564.Ifusingotherwise
12prohibiteddronesforresearchandaccountabilitypurposes,agovernmentagencyshall
13weighthegoalsoftheresearchagainsttherisktonetworksanddata.
14 (2)Agovernmentagencyusingotherwiseprohibiteddronesundertheexception
15establishedundersubdivision(1)ofthissubsectionshallprovidewrittennoticetothe
16departmentoftransportationofsuchusenolaterthanthirtydayspriortoutilizingthe
17exception.Suchnoticeshallstatetheintendedpurpose,participants,andultimate
18beneficiariesoftheresearch.
19 (3)Totheextentallowedbylawandexistingagreementbetweenthepartiesto
20theresearch,thegovernmentagencyconductingresearchundertheexception
21establishedundersubdivision(1)ofthissubsectionshall,upontherequestofthe
22department,provideaccesstotheresearchfindings.
542.558.Agovernmentagencyshallnotpurchase,acquire,orotherwiseusea
2droneoranyrelatedservicesorequipmentproducedbyamanufacturerdomiciledina
3countryofconcernorproducedbyamanufacturerthegovernmentagencyreasonably
4believestobeownedorcontrolled,inwholeorinpart,byacountryofconcernora
5companydomiciledinacountryofconcern.
542.560.1.Adroneoritssoftwareinusebyagovernmentagencyshallconnect
2totheinternetonlyforpurposesofcommandandcontrol,coordination,orother
3communicationtogroundcontrolstationsorsystemsrelatedtothemissionofthedrone.
4Ifconnectingtotheinternetunderthissection,agovernmentagencyshall:
5 (1)Requirethecommandandcontrol,coordination,orothergroundcontrol
6stationsorsystemstobesecuredandmonitored;or
7 (2)Requirethecommandandcontrol,coordination,orothergroundcontrol
8stationsorsystemstobeisolatedfromnetworkswherethedataofagovernmentagency
9isheld.
10 2.(1)Adroneoritssoftwareinusebyagovernmentagencyshallconnecttoa
11computerorthenetworkofagovernmentagencyonlyif:
12 (a)Thedroneoritssoftwareisisolatedinawaythatpreventsaccesstothe
13internetandanynetworkwherethedataofagovernmentagencyisheld;
HB210 4 14 (b)Thedroneoritssoftwareusesremovablememorytoconnecttoacomputer
15ornetworkthatisisolatedinawaythatpreventsaccesstoanetworkwherethedataofa
16governmentagencyisheld;and
17 (2)Anytransferofdatabetweenanisolatednetworkdescribedinparagraph(a)
18or(b)ofsubdivision(1)ofthissubsectionandanetworkwherethedataofa
19governmentagencyisheldshallrequire:
20 (a)Aninitialscanformaliciouscodeusingantivirusoranti-malwaresoftware
21onthecomputerthatconnecteddirectlyorindirectlytothedrone;
22 (b)Theuseofantivirusandanti-malwaresoftwareduringdatatransfer;and
23 (c)Ascanformaliciouscodeofthedestinationofthetransferreddatausing
24antivirusandanti-malwaresoftware.
25 3.Adroneoritssoftwareinusebyagovernmentagencyshallnotconnectwitha
26telephone,tablet,orothermobiledeviceissuedbyagovernmentagencyorthatconnects
27toagovernmentagencynetwork.Governmentagencydevicesthataresolelyusedfor
28thecommandandcontrol,coordination,orothercommunicationtogroundcontrol
29stationsorsystemsrelatedtothemissionofthedronesthatdonotconnecttothe
30governmentagency’snetworkmaybeused.
31 4.Adroneoritssoftwareinusebyagovernmentagencyshallbeusedin
32compliancewithallotherapplicabledatastandardsasrequiredbylawandthe
33governmentagency’sownpolicyandprocedure.
542.562.Adroneoranyrelatedservicesorequipmentusedinaccordancewith
2tiertwo,asdefinedinsection542.556,shall,inadditiontotherequirementsinsections
3542.558and542.560,meetthefollowingminimumsecurityrequirements:
4 (1)Regardlessofwhetherthegovernmentagencyisa"governmentagency"as
5definedinsubdivision(8)ofsection542.552,thegovernmentagencyshallcomplywith
6theportionsofsections542.550to542.568thatwouldbytheirnaturebeapplicableto
7droneuse,itssoftware,oranyrelatedservicesorinteractionwithanydataoriginating
8fromthedroneoritsuse;
9 (2)AllcommunicationtoandfromadroneshallutilizeaFederalInformation
10ProcessStandard(FIPS)140-2compliantencryptionalgorithm;and
11 (3)Criticalcomponentsshallnotbeproducedbyamanufacturerdomiciledin,
12orproducedbyamanufacturerthegovernmentagencybelievestobeowned,controlled
13by,orotherwiseconnectedto,acountryofconcern.
542.564.Adroneoranyrelatedservicesorequipmentusedinaccordancewith
2tierthreeasdefinedinsection542.556,shall,inadditiontotherequirementsofsections
3542.558,542.560,and542.562,meetthefollowingminimumsecurityrequirements:
HB210 5 4 (1)DatastorageshallberestrictedtothegeographiclocationoftheUnited
5States;and
6 (2)Remoteaccesstodatastorage,otherthanopendata,fromoutsidetheUnited
7Statesshallbeprohibitedunlessapprovedinwritingbyagovernmentagencyheador
8hisorherdesignee.
542.566.Subjecttoappropriation,anydepartmentcurrentlyusingadronethat
2doesnotmeettheminimumrequirementsforthatdrone’susagetiermayrequesta
3reimbursementuptothecostofacquiringadronethatmeetstheminimum
4requirementsforthatdrone'susagetierfromthestatetreasurer,providedthe
5requestincludespurchaseordersandastatementdescribingthedrone'susageand
6necessity.
542.568.1.Thedepartmentoftransportation,inconsultationwithotherstate,
2local,andfederalauthorities,shallidentifythegeographiccoordinatesofsensitive
3installationswithinthestateofMissouriforthepurposeofprohibitingdroneusageover
4sensitivelocations.
5 2.(1)Anyproviderofflightmappingsoftwareoranyotherprogramfor
6operatingadroneshallgeofencethestate'ssensitivelocationstopreventtheflightof
7anydroneoverthestate'ssensitivelocations.
8 (2)Dronesusedbylawenforcementagenciesshallbeexemptfromtheusage
9restrictionsofsubdivision1ofthissubsection.
10 3.ItshallbeaclassBmisdemeanorforaproviderofflightmappingsoftwareto
11allowausertoflyadroneoverasensitivelocationunlesstheuserisalawenforcement
12agencyorofficer.
13 4.(1)ItshallbeaclassBmisdemeanorforauserofadronethatdoesnothave
14flightmappingsoftwaretoflysuchadroneoverasensitivelocation.
15 (2)Lawenforcementofficersareexemptfromtheusagerestrictionsof
16subdivision(1)ofthissubsection.
17 (3)Individualswhohavethepermissionoftheauthorityinchargeofthe
18sensitivelocationtooperateadronein,on,orabovethesensitivelocationareexempt
19fromtheusagerestrictionsofsubdivision(1)ofthissubsection.
✔
HB210 6