Exempts from disclosure under the Public Records Act (PRA) continuity of operations plans for election operations, security risk assessments, and other election security records. Exempts from disclosure under the PRA portions of records that contain information related to election security, operations, and infrastructure.   Official Text and Analysis.

Removes language that specifies that security risk assessments related to information regarding the public and private infrastructure and security of computer and telecommunications networks are exempt in their entirety; clarifies that the security audits and security risk assessments that are exempt are those which relate to physical security or cybersecurity of election operations or infrastructure; and states that the new election security exemptions do not include information or records.

Limits the duration of the new election-related exemptions provided under the bill to 24 months after the creation of a record.

Specifies that the election security exemptions under the act do not prohibit an audit which is authorized or required under the elections code from being conducted.

(1) Removes the provision that exempts from public disclosure continuity of operations plans for election operations, security risk assessments, and other election security records. (2) Removes the provision that exempts from public disclosure portions of records that contain information related to election security, operations, and infrastructure. (3) Exempts from public disclosure computer software source code relating to cybersecurity protections or countermeasures of the state’s election management system.