| 1 | 1 | | FIRSTREGULARSESSION |
|---|
| 2 | 2 | | HOUSEBILLNO.210 |
|---|
| 3 | 3 | | 103RDGENERALASSEMBLY |
|---|
| 4 | 4 | | INTRODUCEDBYREPRESENTATIVEVANSCHOIACK. |
|---|
| 5 | 5 | | 0985H.01I DANARADEMANMILLER,ChiefClerk |
|---|
| 6 | 6 | | ANACT |
|---|
| 7 | 7 | | Toamendchapter542,RSMo,byaddingtheretotennewsectionsrelatingtounmannedaerial |
|---|
| 8 | 8 | | systems,withpenaltyprovisions. |
|---|
| 9 | 9 | | BeitenactedbytheGeneralAssemblyofthestateofMissouri,asfollows: |
|---|
| 10 | 10 | | SectionA.Chapter542,RSMo,isamendedbyaddingtheretotennewsections,tobe |
|---|
| 11 | 11 | | 2knownassections542.550,542.552,542.554,542.556,542.558,542.560,542.562,542.564, |
|---|
| 12 | 12 | | 3542.566,and542.568,toreadasfollows: |
|---|
| 13 | 13 | | 542.550.1.Sections542.550to542.568shallbeknownandmaybecitedasthe |
|---|
| 14 | 14 | | 2"UnmannedAerialSystemsSecurityActof2025". |
|---|
| 15 | 15 | | 542.552.1.Forthepurposesofsections542.550to542.568,thefollowingterms |
|---|
| 16 | 16 | | 2mean: |
|---|
| 17 | 17 | | 3 (1)"Countryofconcern",thePeople’sRepublicofChina,theRussian |
|---|
| 18 | 18 | | 4Federation,theIslamicRepublicofIran,theDemocraticPeople'sRepublicofKorea, |
|---|
| 19 | 19 | | 5theRepublicofCuba,theVenezuelanregimeofNicolásMaduro,ortheSyrianArab |
|---|
| 20 | 20 | | 6Republic,includinganyagentoforanyotherentityundersignificantcontrolofsuch |
|---|
| 21 | 21 | | 7countryofconcern,oranyotherentitydeemedbythegovernorinconsultationwith |
|---|
| 22 | 22 | | 8appropriatefederalandstateofficials; |
|---|
| 23 | 23 | | 9 (2)"Criticalcomponent",adronecomponentrelatedtoflightcontrollers;radio; |
|---|
| 24 | 24 | | 10datatransmissiondevices;cameras;gimbals;groundcontrolsystems;operating |
|---|
| 25 | 25 | | 11software,includingcellphoneortabletapplicationsbutnotcellphoneortablet |
|---|
| 26 | 26 | | 12operatingsystems;networkconnectivity;ordatastorage.Theterm"critical |
|---|
| 27 | 27 | | 13component"shallnotmeanpassiveelectronicssuchasresistorsandnon-data- |
|---|
| 28 | 28 | | 14transmittingmotors,batteries,andwiring; |
|---|
| 29 | 29 | | EXPLANATION—Matterenclosedinbold-facedbrackets[thus] intheabovebillisnotenactedandis |
|---|
| 30 | 30 | | intendedtobeomittedfromthelaw.Matterinbold-facetypeintheabovebillisproposedlanguage. 15 (3)"Criticalinfrastructure",systemsandassets,whetherphysicalorvirtual,so |
|---|
| 31 | 31 | | 16vitaltothestateofMissouriortheUnitedStatesofAmericathattheincapacityor |
|---|
| 32 | 32 | | 17destructionofsuchsystemsandassetswouldhaveadebilitatingimpactonstateor |
|---|
| 33 | 33 | | 18nationalsecurity,stateornationaleconomicsecurity,stateornationalpublichealth,or |
|---|
| 34 | 34 | | 19anycombinationofthosematters.Criticalinfrastructuremaybepubliclyorprivately |
|---|
| 35 | 35 | | 20owned,andincludesbutisnotlimitedto: |
|---|
| 36 | 36 | | 21 (a)Gasandoilproduction,storage,ordeliverysystems; |
|---|
| 37 | 37 | | 22 (b)Watersupply,refinement,storage,ordeliverysystems; |
|---|
| 38 | 38 | | 23 (c)Telecommunicationsnetworks; |
|---|
| 39 | 39 | | 24 (d)Electricalpowerdeliverysystems; |
|---|
| 40 | 40 | | 25 (e)Emergencyservices; |
|---|
| 41 | 41 | | 26 (f)Transportationsystemsandservices;or |
|---|
| 42 | 42 | | 27 (g)Personaldataorotherwiseclassifiedinformationstoragesystems,including |
|---|
| 43 | 43 | | 28cybersecurity; |
|---|
| 44 | 44 | | 29 (4)"Data",anyinformation,document,media,ormachine-readablematerial |
|---|
| 45 | 45 | | 30regardlessofphysicalformorcharacteristicsthatiscreatedorobtainedbya |
|---|
| 46 | 46 | | 31governmentagencyinthecourseofofficialagencybusiness; |
|---|
| 47 | 47 | | 32 (5)"Drone",anunmannedaircraft,watercraft,orgroundvehicleorarobotic |
|---|
| 48 | 48 | | 33devicethat: |
|---|
| 49 | 49 | | 34 (a)Iscontrolledremotelybyahumanoperator;or |
|---|
| 50 | 50 | | 35 (b)Operatesautonomouslythroughcomputersoftwareorotherprogramming; |
|---|
| 51 | 51 | | 36 (6)"Flightmappingsoftware",anyprogramorgroundcontrolsystemthat |
|---|
| 52 | 52 | | 37allowsfortheuserto: |
|---|
| 53 | 53 | | 38 (a)Inputasetofcoordinatesorlocationstowhichthedronewillautonomously |
|---|
| 54 | 54 | | 39flytoinapredeterminedflightpattern;or |
|---|
| 55 | 55 | | 40 (b)Controltheflightpathordestinationofthedronefromanydeviceotherthan |
|---|
| 56 | 56 | | 41adedicatedhandheldcontrollerwithinsightofthedrone; |
|---|
| 57 | 57 | | 42 (7)"Geofence",avirtualgeographicboundarydefinedbyglobalpositioning |
|---|
| 58 | 58 | | 43system(GPS),radiofrequencyidentification(RFID),orsomeotherlocationpositioning |
|---|
| 59 | 59 | | 44technology,createdtopreventtheuseofdronedeviceswithinarestrictedgeographic |
|---|
| 60 | 60 | | 45area; |
|---|
| 61 | 61 | | 46 (8)"Governmentagency",anystate,county,local,ormunicipalgovernment |
|---|
| 62 | 62 | | 47entityoranyunitofgovernmentcreatedorestablishedbylawthatusesadroneforany |
|---|
| 63 | 63 | | 48purpose; |
|---|
| 64 | 64 | | 49 (9)"Instructionaltechnology",aninteractivedeviceusedbyaschoolthatassists |
|---|
| 65 | 65 | | 50ininstructingaclassoragroupofstudentsandincludesthenecessaryhardwareand |
|---|
| 66 | 66 | | HB210 2 51softwaretooperatetheinteractivedevice.Thetermalsoincludessupportsystemsin |
|---|
| 67 | 67 | | 52whichaninteractivedevicemaymountandisnotrequiredtobeaffixedtothefacilities; |
|---|
| 68 | 68 | | 53 (10)"Opendata",datawhicharestructuredinawaythatenablesthedatatobe |
|---|
| 69 | 69 | | 54fullydiscoverableandusablebythepublic.Thetermdoesnotincludedatathatare |
|---|
| 70 | 70 | | 55restrictedfrompublicdisclosurebasedonfederalorstatelawsandregulations |
|---|
| 71 | 71 | | 56including,butnotlimitedto,thoserelatedtoprivacy,confidentiality,security,personal |
|---|
| 72 | 72 | | 57health,businessortradesecretinformation,andexemptionsfromstatepublicrecords |
|---|
| 73 | 73 | | 58lawsordataforwhichagovernmentagencyisstatutorilyauthorizedtoassessafeefor |
|---|
| 74 | 74 | | 59itsdistribution; |
|---|
| 75 | 75 | | 60 (11)"Researchandaccountabilitypurposes",adroneusedindirectsupportof |
|---|
| 76 | 76 | | 61researchondronehardware,operatingsystems,software,communicationssystemsand |
|---|
| 77 | 77 | | 62protocols,components,anddatapracticesforthepurposeofunderstandingthe |
|---|
| 78 | 78 | | 63existenceandextentofpotentialthreatsandvulnerabilities,andmitigationsthereof. |
|---|
| 79 | 79 | | 64Thisresearchshallbeconductedatthedirectionofastategovernmentagencyora |
|---|
| 80 | 80 | | 65federalagencyorapartycontractedbyastategovernmentagencyorfederalagencyto |
|---|
| 81 | 81 | | 66conducttheresearch; |
|---|
| 82 | 82 | | 67 (12)"School",anorganizationofstudentsforinstructionalpurposesonan |
|---|
| 83 | 83 | | 68elementary,secondary,orpost-secondarylevelauthorizedunderrulesofthe |
|---|
| 84 | 84 | | 69departmentofelementaryandsecondaryeducationorthedepartmentofhigher |
|---|
| 85 | 85 | | 70educationandworkforcedevelopment; |
|---|
| 86 | 86 | | 71 (13)"Sensitivelocation",alocationinMissouriwheredroneusageisprohibited |
|---|
| 87 | 87 | | 72andthatisrequiredtobegeofencedbycompaniesthatprovideflightmappingsoftware |
|---|
| 88 | 88 | | 73inordertopreventunauthorizeduseofdrones.Theselocationsshallincludemilitary |
|---|
| 89 | 89 | | 74locations,powerstations,criticalinfrastructure,andotherlocationsdeterminedtobe |
|---|
| 90 | 90 | | 75sensitivebythedepartmentoftransportationinconsultationwithrelevantstateand |
|---|
| 91 | 91 | | 76federalauthorities. |
|---|
| 92 | 92 | | 542.554.Agovernmentagencyshallonlyuseadronefromamanufacturerthat |
|---|
| 93 | 93 | | 2meetstheminimumsecurityrequirementsspecifiedinsections542.550to542.568.A |
|---|
| 94 | 94 | | 3manufacturerthatmeetssuchrequirementsisdeemedanapprovedmanufacturerfor |
|---|
| 95 | 95 | | 4thegiventierasspecifiedinsection542.556.Notwithstandingamanufacturer’s |
|---|
| 96 | 96 | | 5designationasanapprovedmanufacturer,thegovernmentagencyisstillrequiredto |
|---|
| 97 | 97 | | 6ensurethatthedroneitintendstousecomplieswithallapplicableprovisionsofthis |
|---|
| 98 | 98 | | 7rule. |
|---|
| 99 | 99 | | 542.556.1.Dronesshallbeclassifiedasfollows: |
|---|
| 100 | 100 | | 2 (1)"Tierone",adronethatdoesnotcollect,transmit,orreceivedataduring |
|---|
| 101 | 101 | | 3flight.Examplesofsuchdronesincludedronesthatnavigatealongpre-programmed |
|---|
| 102 | 102 | | HB210 3 4waypointsandtethereddrones.Adroneusedbyaschoolexclusivelyasinstructional |
|---|
| 103 | 103 | | 5technologyshallbeclassifiedastieronedroneusage; |
|---|
| 104 | 104 | | 6 (2)"Tiertwo",adronethatmaycollect,transmit,orreceiveonlyflightcontrol |
|---|
| 105 | 105 | | 7data,excludingvisualandauditorydata;or |
|---|
| 106 | 106 | | 8 (3)"Tierthree",adronethatmaycollect,transmit,orreceiveanydata, |
|---|
| 107 | 107 | | 9includingvisualorauditorydata. |
|---|
| 108 | 108 | | 10 2.(1)Dronesusedforresearchandaccountabilitypurposesshallbeexempt |
|---|
| 109 | 109 | | 11fromtherequirementsinsections542.558,542.562,and542.564.Ifusingotherwise |
|---|
| 110 | 110 | | 12prohibiteddronesforresearchandaccountabilitypurposes,agovernmentagencyshall |
|---|
| 111 | 111 | | 13weighthegoalsoftheresearchagainsttherisktonetworksanddata. |
|---|
| 112 | 112 | | 14 (2)Agovernmentagencyusingotherwiseprohibiteddronesundertheexception |
|---|
| 113 | 113 | | 15establishedundersubdivision(1)ofthissubsectionshallprovidewrittennoticetothe |
|---|
| 114 | 114 | | 16departmentoftransportationofsuchusenolaterthanthirtydayspriortoutilizingthe |
|---|
| 115 | 115 | | 17exception.Suchnoticeshallstatetheintendedpurpose,participants,andultimate |
|---|
| 116 | 116 | | 18beneficiariesoftheresearch. |
|---|
| 117 | 117 | | 19 (3)Totheextentallowedbylawandexistingagreementbetweenthepartiesto |
|---|
| 118 | 118 | | 20theresearch,thegovernmentagencyconductingresearchundertheexception |
|---|
| 119 | 119 | | 21establishedundersubdivision(1)ofthissubsectionshall,upontherequestofthe |
|---|
| 120 | 120 | | 22department,provideaccesstotheresearchfindings. |
|---|
| 121 | 121 | | 542.558.Agovernmentagencyshallnotpurchase,acquire,orotherwiseusea |
|---|
| 122 | 122 | | 2droneoranyrelatedservicesorequipmentproducedbyamanufacturerdomiciledina |
|---|
| 123 | 123 | | 3countryofconcernorproducedbyamanufacturerthegovernmentagencyreasonably |
|---|
| 124 | 124 | | 4believestobeownedorcontrolled,inwholeorinpart,byacountryofconcernora |
|---|
| 125 | 125 | | 5companydomiciledinacountryofconcern. |
|---|
| 126 | 126 | | 542.560.1.Adroneoritssoftwareinusebyagovernmentagencyshallconnect |
|---|
| 127 | 127 | | 2totheinternetonlyforpurposesofcommandandcontrol,coordination,orother |
|---|
| 128 | 128 | | 3communicationtogroundcontrolstationsorsystemsrelatedtothemissionofthedrone. |
|---|
| 129 | 129 | | 4Ifconnectingtotheinternetunderthissection,agovernmentagencyshall: |
|---|
| 130 | 130 | | 5 (1)Requirethecommandandcontrol,coordination,orothergroundcontrol |
|---|
| 131 | 131 | | 6stationsorsystemstobesecuredandmonitored;or |
|---|
| 132 | 132 | | 7 (2)Requirethecommandandcontrol,coordination,orothergroundcontrol |
|---|
| 133 | 133 | | 8stationsorsystemstobeisolatedfromnetworkswherethedataofagovernmentagency |
|---|
| 134 | 134 | | 9isheld. |
|---|
| 135 | 135 | | 10 2.(1)Adroneoritssoftwareinusebyagovernmentagencyshallconnecttoa |
|---|
| 136 | 136 | | 11computerorthenetworkofagovernmentagencyonlyif: |
|---|
| 137 | 137 | | 12 (a)Thedroneoritssoftwareisisolatedinawaythatpreventsaccesstothe |
|---|
| 138 | 138 | | 13internetandanynetworkwherethedataofagovernmentagencyisheld; |
|---|
| 139 | 139 | | HB210 4 14 (b)Thedroneoritssoftwareusesremovablememorytoconnecttoacomputer |
|---|
| 140 | 140 | | 15ornetworkthatisisolatedinawaythatpreventsaccesstoanetworkwherethedataofa |
|---|
| 141 | 141 | | 16governmentagencyisheld;and |
|---|
| 142 | 142 | | 17 (2)Anytransferofdatabetweenanisolatednetworkdescribedinparagraph(a) |
|---|
| 143 | 143 | | 18or(b)ofsubdivision(1)ofthissubsectionandanetworkwherethedataofa |
|---|
| 144 | 144 | | 19governmentagencyisheldshallrequire: |
|---|
| 145 | 145 | | 20 (a)Aninitialscanformaliciouscodeusingantivirusoranti-malwaresoftware |
|---|
| 146 | 146 | | 21onthecomputerthatconnecteddirectlyorindirectlytothedrone; |
|---|
| 147 | 147 | | 22 (b)Theuseofantivirusandanti-malwaresoftwareduringdatatransfer;and |
|---|
| 148 | 148 | | 23 (c)Ascanformaliciouscodeofthedestinationofthetransferreddatausing |
|---|
| 149 | 149 | | 24antivirusandanti-malwaresoftware. |
|---|
| 150 | 150 | | 25 3.Adroneoritssoftwareinusebyagovernmentagencyshallnotconnectwitha |
|---|
| 151 | 151 | | 26telephone,tablet,orothermobiledeviceissuedbyagovernmentagencyorthatconnects |
|---|
| 152 | 152 | | 27toagovernmentagencynetwork.Governmentagencydevicesthataresolelyusedfor |
|---|
| 153 | 153 | | 28thecommandandcontrol,coordination,orothercommunicationtogroundcontrol |
|---|
| 154 | 154 | | 29stationsorsystemsrelatedtothemissionofthedronesthatdonotconnecttothe |
|---|
| 155 | 155 | | 30governmentagency’snetworkmaybeused. |
|---|
| 156 | 156 | | 31 4.Adroneoritssoftwareinusebyagovernmentagencyshallbeusedin |
|---|
| 157 | 157 | | 32compliancewithallotherapplicabledatastandardsasrequiredbylawandthe |
|---|
| 158 | 158 | | 33governmentagency’sownpolicyandprocedure. |
|---|
| 159 | 159 | | 542.562.Adroneoranyrelatedservicesorequipmentusedinaccordancewith |
|---|
| 160 | 160 | | 2tiertwo,asdefinedinsection542.556,shall,inadditiontotherequirementsinsections |
|---|
| 161 | 161 | | 3542.558and542.560,meetthefollowingminimumsecurityrequirements: |
|---|
| 162 | 162 | | 4 (1)Regardlessofwhetherthegovernmentagencyisa"governmentagency"as |
|---|
| 163 | 163 | | 5definedinsubdivision(8)ofsection542.552,thegovernmentagencyshallcomplywith |
|---|
| 164 | 164 | | 6theportionsofsections542.550to542.568thatwouldbytheirnaturebeapplicableto |
|---|
| 165 | 165 | | 7droneuse,itssoftware,oranyrelatedservicesorinteractionwithanydataoriginating |
|---|
| 166 | 166 | | 8fromthedroneoritsuse; |
|---|
| 167 | 167 | | 9 (2)AllcommunicationtoandfromadroneshallutilizeaFederalInformation |
|---|
| 168 | 168 | | 10ProcessStandard(FIPS)140-2compliantencryptionalgorithm;and |
|---|
| 169 | 169 | | 11 (3)Criticalcomponentsshallnotbeproducedbyamanufacturerdomiciledin, |
|---|
| 170 | 170 | | 12orproducedbyamanufacturerthegovernmentagencybelievestobeowned,controlled |
|---|
| 171 | 171 | | 13by,orotherwiseconnectedto,acountryofconcern. |
|---|
| 172 | 172 | | 542.564.Adroneoranyrelatedservicesorequipmentusedinaccordancewith |
|---|
| 173 | 173 | | 2tierthreeasdefinedinsection542.556,shall,inadditiontotherequirementsofsections |
|---|
| 174 | 174 | | 3542.558,542.560,and542.562,meetthefollowingminimumsecurityrequirements: |
|---|
| 175 | 175 | | HB210 5 4 (1)DatastorageshallberestrictedtothegeographiclocationoftheUnited |
|---|
| 176 | 176 | | 5States;and |
|---|
| 177 | 177 | | 6 (2)Remoteaccesstodatastorage,otherthanopendata,fromoutsidetheUnited |
|---|
| 178 | 178 | | 7Statesshallbeprohibitedunlessapprovedinwritingbyagovernmentagencyheador |
|---|
| 179 | 179 | | 8hisorherdesignee. |
|---|
| 180 | 180 | | 542.566.Subjecttoappropriation,anydepartmentcurrentlyusingadronethat |
|---|
| 181 | 181 | | 2doesnotmeettheminimumrequirementsforthatdrone’susagetiermayrequesta |
|---|
| 182 | 182 | | 3reimbursementuptothecostofacquiringadronethatmeetstheminimum |
|---|
| 183 | 183 | | 4requirementsforthatdrone'susagetierfromthestatetreasurer,providedthe |
|---|
| 184 | 184 | | 5requestincludespurchaseordersandastatementdescribingthedrone'susageand |
|---|
| 185 | 185 | | 6necessity. |
|---|
| 186 | 186 | | 542.568.1.Thedepartmentoftransportation,inconsultationwithotherstate, |
|---|
| 187 | 187 | | 2local,andfederalauthorities,shallidentifythegeographiccoordinatesofsensitive |
|---|
| 188 | 188 | | 3installationswithinthestateofMissouriforthepurposeofprohibitingdroneusageover |
|---|
| 189 | 189 | | 4sensitivelocations. |
|---|
| 190 | 190 | | 5 2.(1)Anyproviderofflightmappingsoftwareoranyotherprogramfor |
|---|
| 191 | 191 | | 6operatingadroneshallgeofencethestate'ssensitivelocationstopreventtheflightof |
|---|
| 192 | 192 | | 7anydroneoverthestate'ssensitivelocations. |
|---|
| 193 | 193 | | 8 (2)Dronesusedbylawenforcementagenciesshallbeexemptfromtheusage |
|---|
| 194 | 194 | | 9restrictionsofsubdivision1ofthissubsection. |
|---|
| 195 | 195 | | 10 3.ItshallbeaclassBmisdemeanorforaproviderofflightmappingsoftwareto |
|---|
| 196 | 196 | | 11allowausertoflyadroneoverasensitivelocationunlesstheuserisalawenforcement |
|---|
| 197 | 197 | | 12agencyorofficer. |
|---|
| 198 | 198 | | 13 4.(1)ItshallbeaclassBmisdemeanorforauserofadronethatdoesnothave |
|---|
| 199 | 199 | | 14flightmappingsoftwaretoflysuchadroneoverasensitivelocation. |
|---|
| 200 | 200 | | 15 (2)Lawenforcementofficersareexemptfromtheusagerestrictionsof |
|---|
| 201 | 201 | | 16subdivision(1)ofthissubsection. |
|---|
| 202 | 202 | | 17 (3)Individualswhohavethepermissionoftheauthorityinchargeofthe |
|---|
| 203 | 203 | | 18sensitivelocationtooperateadronein,on,orabovethesensitivelocationareexempt |
|---|
| 204 | 204 | | 19fromtheusagerestrictionsofsubdivision(1)ofthissubsection. |
|---|
| 205 | 205 | | ✔ |
|---|
| 206 | 206 | | HB210 6 |
|---|