H-4892.2
HOUSE BILL 2999
State of Washington
65th Legislature
2018 Regular Session
By Representatives Tarleton, Hudgins, Morris, and Ormsby
Read first time 02/23/18. Referred to Committee on State Govt, Elections & IT.
AN ACT Relating to security breaches of election systems or election data including by foreign entities; adding a new section to chapter 29A.12 RCW; and creating a new section.
BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF WASHINGTON:
NEW SECTION.  Sec. 1.  The legislature finds that public confidence in state elections systems and election data are of paramount consideration to the integrity of the voting process. The legislature also finds that recent events have revealed an intentional and persistent effort by foreign entities to influence election systems and other cyber networks. Therefore, the legislature intends to: Examine the state's electoral systems and processes in order to determine whether our election systems have been compromised; take appropriate measures to identify whether foreign entities were responsible for the intrusions; and restore the security and integrity of the state's digital infrastructure regarding elections.
NEW SECTION.  Sec. 2.  A new section is added to chapter 29A.12 RCW to read as follows:
(1) The secretary of state must annually consult with the attorney general, state chief information security officer, county auditors' or other designated local election officials to identify instances of security breaches of election systems or election data.
(2) To the extent possible, the secretary of state must identify whether the source of a security breach, if any, is a foreign entity, domestic entity, or both.
(3) By December 31st of each year, the secretary of state must submit a report to the governor, lieutenant governor, state chief information security officer, attorney general, a designated county auditor representative or other designated local election official, and the chairs and ranking members of the appropriate legislative committees from the senate and house of representatives that includes information on any instances of security breaches identified under subsection (1) of this section, and options to increase the security of the election systems and election data, and prevent future security breaches. The report, and any related material used to assemble the report, may only be distributed to, or otherwise shared with, the individuals specifically mentioned in this subsection.
(4) For the purposes of this section:
(a) "Security breach" means:
(i) An attempt to penetrate, access, or manipulate an election system or associated election data by an unauthorized person; or
(ii) A breach of the election system or associated data where the system or associated data has been penetrated, accessed, or manipulated by an unauthorized person.
(b) "Foreign entity" means an entity that is not organized or formed under the laws of the United States, or a person who is not domiciled in the United States or a citizen of the United States.
--- END ---