H.B. No. 1007 aims to enhance the security of election systems in Texas by amending the Election Code to establish comprehensive cybersecurity measures. The bill mandates the Secretary of State to adopt rules that define protected election data and best practices for securing electronic data, including methods for data encryption and access restrictions. A dedicated cybersecurity expert will be appointed to implement these measures, provide training to relevant personnel, and conduct biennial cybersecurity assessments. Additionally, the bill requires immediate notification to key state officials in the event of a cybersecurity breach, along with a structured investigation process and communication to affected individuals if personal data is compromised.

The legislation also introduces new provisions regarding the maintenance and storage of voting equipment, ensuring that such equipment has a documented chain of custody and is stored securely. It restricts the use of election systems capable of internet connectivity, allowing only isolated local area network connections. The bill emphasizes the importance of compliance verification by the appointed cybersecurity expert and outlines consequences for employees found to have intentionally breached election systems. The act is set to take effect on September 1, 2025, with the Secretary of State required to adopt necessary rules and appoint the cybersecurity expert as soon as practicable after the effective date.

Statutes affected:
Introduced: Election Code 123.034 (Election Code 123)