A. The State Board shall promulgate regulations and standards necessary to ensure the security and integrity of the Virginia voter registration system and the supporting technologies utilized by the counties and cities to maintain and record registrant information. The State Board shall, in consultation with representatives of local government information technology professionals and general registrars, update the security standards at least annually. Such review shall be completed by November 30 each year.

Terms Used In Virginia Code 24.2-410.2

  • Board: means the State Board of Elections. See Virginia Code 24.2-101
  • City: means an independent incorporated community which became a city as provided by law before noon on July 1, 1971, or which has within defined boundaries a population of 5,000 or more and which has become a city as provided by law. See Virginia Code 1-208
  • Department: means the state agency headed by the Commissioner of Elections. See Virginia Code 24.2-101
  • Freedom of Information Act: A federal law that mandates that all the records created and kept by federal agencies in the executive branch of government must be open for public inspection and copying. The only exceptions are those records that fall into one of nine exempted categories listed in the statute. Source: OCC
  • General registrar: means the person appointed by the electoral board of a county or city pursuant to § 24. See Virginia Code 24.2-101
  • local electoral board: means a board appointed pursuant to § 24. See Virginia Code 24.2-101
  • Process: includes subpoenas, the summons and complaint in a civil action, and process in statutory actions. See Virginia Code 1-237
  • State: when applied to a part of the United States, includes any of the 50 states, the District of Columbia, the Commonwealth of Puerto Rico, Guam, the Northern Mariana Islands, and the United States Virgin Islands. See Virginia Code 1-245
  • voter registration system: means the automated central record-keeping system for all voters registered within the Commonwealth that is maintained as provided in Article 2 (§ 24. See Virginia Code 24.2-101

B. The electoral board of each county and city that utilizes supporting technologies to maintain and record registrant information shall develop and annually update written plans and procedures to ensure the security and integrity of those supporting technologies. All plans and procedures shall be in compliance with the security standards established by the State Board pursuant to subsection A. Each electoral board shall report annually by March 1 to the Department of Elections on its security plans and procedures. The general registrar and the Department of Elections shall provide assistance to the electoral board, upon request by the electoral board.

C. In accordance with the process prescribed by the State Board, the Department of Elections may limit access to the Virginia voter registration system by any county or city that has failed to comply with the provisions of subsection B or the security standards established by the State Board pursuant to subsection A. Such access shall be limited as necessary in order to address and resolve any security risks or to enforce compliance with the provisions of subsection B or the security standards established by the State Board. Prior to restricting access to Virginia voter registration system by any county or city, the Department of Elections shall provide notice to the county or city of the failure to comply with the provisions of subsection A or B and the county or city shall have seven days to correct any deficiencies. The Department of Elections may provide technical assistance to any county or city upon request by the county or city.

D. Records of the State Board or of a local electoral board, to the extent such records describe protocols for maintaining the security of the Virginia voter registration system and the supporting technologies utilized to maintain and record registrant information, the release of which would compromise the security of the Virginia voter registration system, shall be confidential and excluded from inspection and copying under the Virginia Freedom of Information Act2.2-3700 et seq.).

E. The State Board or a local electoral board may hold a closed meeting pursuant to the provisions of the Virginia Freedom of Information Act (§ 2.2-3700 et seq.) for the purpose of discussing protocols for maintaining the security of the Virginia voter registration system and the supporting technologies utilized to maintain and record registrant information, where discussion of such matters in open meeting would compromise the security of the Virginia voter registration system. Nothing in this subsection shall be construed to authorize a closed meeting to discuss any breach of security of the Virginia voter registration system.

F. Nothing in this section shall be construed to prohibit the release of information concerning any breach of security of the Virginia voter registration system.

2019, c. 426.