Revision: May 1, 2025, 5:46 p.m.
HB 626 - AS AMENDED BY THE SENATE
13Feb2025... 0217h
05/01/2025 1696s
2025 SESSION
25-0617
08/02
HOUSE BILL 626
SPONSORS: Rep. McFarlane, Graf. 18; Rep. Kuttab, Rock. 17; Rep. Spillane, Rock. 2; Rep. Popovici-Muller, Rock. 17; Sen. Murphy, Dist 16
COMMITTEE: Election Law
-----------------------------------------------------------------
AMENDED ANALYSIS
This bill directs the secretary of state to implement a vulnerability disclosure program for certain election systems.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Explanation: Matter added to current law appears in bold italics.
Matter removed from current law appears [in brackets and struckthrough.]
Matter which is either (a) all new or (b) repealed and reenacted appears in regular type.
13Feb2025... 0217h
05/01/2025 1696s 25-0617
08/02
STATE OF NEW HAMPSHIRE
In the Year of Our Lord Two Thousand Twenty Five
Be it Enacted by the Senate and House of Representatives in General Court convened:
1 Secretary of State; Chief Election Officer; Duty to Investigate System Vulnerabilities. Amend RSA 652:23 to read as follows:
652:23 Chief Election Officer.
I. The secretary of state shall be the chief election officer for the state. The secretary of state shall provide information regarding voter registration procedures and absentee ballot procedures for all voters, including absent uniformed services voters, absent voters temporarily residing outside the United States, and federal ballot only voters domiciled outside the United States. Instructional and informational materials published by the secretary of state for clerks to provide such voters shall include information on how to communicate electronically with election officials.
II. Within 180 days of the effective date of this paragraph, the secretary of state shall implement and operate a public vulnerability disclosure program which substantially meets or exceeds the recommendations contained within the publication "Guide to Vulnerability Reporting for America's Election Administrators" published by the Cybersecurity and Infrastructure Security Agency of the United States Department of Homeland Security, to make it easier for security researchers and the general public to report security vulnerabilities appropriately. The secretary shall work with the cybersecurity advisory committee established in RSA 21-R:16.
2 Effective Date. This act shall take effect upon its passage.