,i #aafth ,,congress #ast ,session ,h4 ,r4 #cebi ,,in ,,the ,,house ,,of ,,representatives ,june #bg1 #bjai ,mrs4 ,murphy 7for herself1 ,mr4 ,waltz1 ,ms4 ,shalala1 ,mr4 ,soto1 ,mr4 ,fitzpatrick1 ,ms4 ,kendra ,s4 ,horn of ,oklahoma1 ,mr4 ,gaetz1 ,mr4 ,deutch1 ,mr4 ,spano1 ,ms4 ,mucarsel-,powell1 ,mr4 ,mast1 ,ms4 ,wasserman ,schultz1 ,mr4 ,diaz-,balart1 ,mr4 ,crist1 ,mr4 ,rutherford1 ,mr4 ,arrington1 ,mr4 ,buchanan1 and ,mr4 ,yoho7 introduced the following bill2 which was referred to the ,committee on ,house ,administration ,a ,,bill ,to require the ,secretary of ,homeland ,security to promptly notify appropriate ,state and local officials and ,members of ,congress if ,federal officials have credible evidence of an unauthorized intrusion into an election system and a basis to believe that such intrusion could have resulted in voter information being altered or otherwise affected1 to require ,state and local officials to notify potentially affected individuals of such intrusion1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,achieving ,lasting ,electoral ,reforms on ,transparency and ,security ,act or the ,,alerts ,act4 #b4 ,findings2 ,sense of ,congress 7a7 ,findings ,congress finds as follows3 7#a7 ,free and fair elections are central to our democratic system of government4 7#b7 ,an attack on election systems in the ,united ,states by a foreign government is a hostile act1 and protecting our election systems from such attacks is a critical national security objective4 7#c7 ,the ,march #bjai ,report on the ,investigation into ,russian ,interference in the #bjaf ,presidential ,election1 known as the ,mueller ,report1 concludes that ,russian military intelligence officers targeted individuals and entities involved in the administration of the ,november #bjaf elections1 including ,state boards of elections1 ,secretaries of ,state1 county governments1 and private technology firms responsible for manufacturing and administering election-related software and hardware4 7#d7 ,the ,mueller ,report states that ,russian military intelligence officers sent spearphishing emails to over #abj email accounts used by ,florida county officials responsible for administering the #bjaf elections1 and further states that the ,federal ,bureau of ,investigation believes that this operation enabled ,russian military intelligence officers to gain access to the network of at least one ,florida county government4 7#e7 ,in ,may #bjai1 it came to light that ,russian military intelligence officers had gained access to the computer network of a second ,florida county in the run-up to the #bjaf elections4 7#f7 ,to date1 government officials have not publicly disclosed or confirmed the identity of the ,florida counties whose voter registration systems were breached4 7#g7 ,as a result1 voters in affected counties do not possess the information necessary to take appropriate responsive action1 such as taking affirmative steps to confirm that their individual registration data is accurate and holding ,state and local election officials accountable for their actions or inactions4 7b7 ,sense of ,congress ,it is the sense of ,congress that the principal victim of an attack on election systems in the ,united ,states is the voting public and1 except in certain narrowly defined cases1 the voting public should be promptly informed if ,federal officials have credible evidence of an unauthorized intrusion into an election system and a basis to believe that such intrusion could have resulted in voter information systems or voter tabulation systems being altered or otherwise affected4 #c4 ,definitions ,in this ,act1 the following definitions apply3 7#a7 ,appropriate ,members of ,congress ,the term appropriate ,members of ,congress means1 with respect to a notification described in section #c7;b77#b7-- 7,a7 the ,speaker of the ,house of ,representatives1 the ,minority ,leader of the ,house of ,representatives1 the chairs and ranking minority members of the ,committees on ,house ,administration1 ,homeland ,security1 the ,judiciary1 and ,permanent ,select ,committee on ,intelligence of the ,house of ,representatives1 and each ,member of the ,house of ,representatives 7including a ,delegate or ,resident ,commissioner to the ,congress7 who represents a congressional district in which the unit of local government involved is located2 and 7,b7 the ,majority ,leader of the ,senate1 the ,minority ,leader of the ,senate1 the chairs and ranking minority members of the ,committees on ,rules and ,administration1 ,homeland ,security and ,governmental ,affairs1 the ,judiciary1 and ,select ,committee on ,intelligence of the ,senate1 and the ,senators who represent the ,state involved4 7#b7 ,department ,the term ,department means the ,department of ,homeland ,security4 7#c7 ,election agency ,the term election agency means any component of a ,state or any component of a unit of local government of a ,state that is responsible for administering ,federal elections4 7#d7 ,election cybersecurity incident ,the term election cybersecurity incident means any incident1 as defined in section #bbji7;a77#c7 of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fei7;a77#c771 involving an election system4 7#e7 ,election system ,the term election system means a voting system1 an election management system1 a voter registration website or database1 an electronic pollbook1 a system for tabulating or reporting election results1 an election agency communications system1 or any other information system 7as defined in section #cejb of title #dd1 ,united ,states ,code7 that the ,secretary identifies as central to the management1 support1 or administration of a ,federal election4 7#f7 ,federal election ,the term ,federal election means any election 7as defined in section #cja7a7 of the ,federal ,election ,campaign ,act of #aiga 7#eb ,u4,s4,c4 #cjaja7a777 for ,federal office 7as defined in section #cja7c7 of the ,federal ,election ,campaign ,act of #aiga 7#eb ,u4,s4,c4 #cjaja7c7774 7#g7 ,federal entity ,the term ,federal entity means any agency 7as defined in section #eea of title #e1 ,united ,states ,code74 7#h7 ,local election official ,the term local election official means the chief election official of a component of a unit of local government of a ,state that is responsible for administering ,federal elections4 7#i7 ,secretary ,the term ,secretary means the ,secretary of ,homeland ,security4 7#aj7 ,state ,the term ,state means each of the several ,states1 the ,district of ,columbia1 ,puerto ,rico1 ,guam1 ,american ,samoa1 the ,commonwealth of the ,northern ,mariana ,islands1 and the ,united ,states ,virgin ,islands4 7#aa7 ,state election official ,the term ,state election official means-- 7,a7 the chief ,state election official of a ,state designated under section #aj of the ,national ,voter ,registration ,act of #aiic 7#eb ,u4,s4,c4 #bjeji72 or 7,b7 in the case of ,puerto ,rico1 ,guam1 ,american ,samoa1 the ,northern ,mariana ,islands1 and the ,united ,states ,virgin ,islands1 a chief ,state election official designated by the ,state for purposes of this ,act4 7#ab7 ,voting system ,the term voting system has the meaning given the term in section #cja7;b7 of the ,help ,america ,vote ,act of #bjjb 7#eb ,u4,s4,c4 #bajha7;b774 #d4 ,duty of ,secretary of ,homeland ,security to notify ,state and local officials and appropriate ,members of ,congress of unauthorized intrusions into election systems 7a7 ,duty ,to share information with ,department of ,homeland ,security ,if a ,federal entity receives information about an election cybersecurity incident1 the ,federal entity shall promptly share that information with the ,department1 unless the head of the entity 7or a ,senate-confirmed official designated by the head7 makes a specific determination in writing that there is good cause to withhold the particular information4 7b7 ,response to receipt of information by ,secretary of ,homeland ,security 7#a7 ,in general ,upon receiving information about an election cybersecurity incident under subsection 7a71 the ,secretary1 in consultation with the ,attorney ,general and the ,director of ,national ,intelligence1 shall promptly 7but in no case later than #if hours after receiving the information7 review the information and make a determination whether each of the following apply3 7,a7 ,there is credible evidence that an unauthorized intrusion into an election system occurred4 7,b7 ,there is a basis to believe that the unauthorized intrusion resulted1 could have resulted1 or could result in voter information systems or voter tabulation systems being altered or otherwise affected4 7#b7 ,duty to notify ,state and local officials and appropriate ,members of ,congress 7,a7 ,duty described ,if the ,secretary makes a determination under paragraph 7#a7 that subparagraphs 7,a7 and 7,b7 of such paragraph apply with respect to an unauthorized intrusion into an election system1 not later than #dh hours after making the determination1 the ,secretary shall provide a notification of the unauthorized intrusion to each of the following3 7i7 ,the chief executive of the ,state involved4 7ii7 ,the ,state election official of the ,state involved4 7iii7 ,the local election official of the election agency involved4 7iv7 ,the appropriate ,members of ,congress4 7,b7 ,treatment of classified information 7i7 ,efforts to avoid inclusion of classified information ,in preparing a notification provided under this paragraph to an individual described in clause 7i71 7ii71 or 7iii7 of subparagraph 7,a71 the ,secretary shall attempt to avoid the inclusion of classified information4 7ii7 ,providing guidance to ,state and local officials ,to the extent that a notification provided under this paragraph to an individual described in clause 7i71 7ii71 or 7iii7 of subparagraph 7,a7 includes classified information1 the ,secretary 7in consultation with the ,attorney ,general and the ,director of ,national ,intelligence7 shall indicate in the notification which information is classified4 7#c7 ,exception 7,a7 ,in general ,if the ,secretary1 in consultation with the ,attorney ,general and the ,director of ,national ,intelligence1 makes a determination that it is not possible to provide a notification under paragraph 7#a7 with respect to an unauthorized intrusion without compromising intelligence methods or sources or interfering with an ongoing investigation1 the ,secretary-- 7i7 shall not provide the notification under such paragraph2 and 7ii7 shall1 not later than #dh hours after making the determination under this subparagraph1 provide a classified briefing on the unauthorized intrusion to the appropriate ,members of ,congress4 7,b7 ,ongoing review ,not later than #cj days after making a determination under subparagraph 7,a7 and every #cj days thereafter1 the ,secretary shall review the determination4 ,if1 after reviewing the determination1 the ,secretary makes a revised determination that it is possible to provide a notification under paragraph 7#b7 without compromising intelligence methods or sources or interfering with an ongoing investigation1 the ,secretary shall provide the notification under paragraph 7#b7 not later than #dh hours after making such revised determination4 7c7 ,effective date ,this section shall apply with respect to information about an election cybersecurity incident which is received on or after the date of the enactment of this ,act4 #e4 ,responsibilities of ,state and local officials to notify affected individuals 7a7 ,responsibilities described ,title ,,iii of the ,help ,america ,vote ,act of #bjjb 7#eb ,u4,s4,c4 #bajha et seq47 is amended by inserting after section #cjc the following new section3 #cjc;,a4 ,responsibilities of ,state and local officials to notify individuals affected by unauthorized intrusions into election systems 7a7 ,responsibilities described ,if a ,state or unit of local government receives a notification from the ,secretary of ,homeland ,security under section #d of the ,achieving ,lasting ,electoral ,reforms on ,transparency and ,security ,act of an unauthorized intrusion described in such section1 the ,state election official and the appropriate local election official shall provide notification of the intrusion to the individuals who were affected1 could have been affected1 or may be affected by the intrusion4 7b7 ,contents and manner of notification ,the notification provided under this section shall be in such form and manner as the ,state election official may establish1 except that-- 7#a7 the notification shall not reveal classified information about the nature of the intrusion or the persons suspected of making the intrusion2 7#b7 the notification shall be provided in a manner that does not discourage any individual from voting or registering to vote2 and 7#c7 nothing in this section shall be construed to require an election official to provide a separate notification to each affected individual4 7c7 ,deadline ,the ,state election official or the appropriate election official shall provide the notification required under this section as soon as practicable after the official receives the notification from the ,secretary of ,homeland ,security under section #d of the ,achieving ,lasting ,electoral ,reforms on ,transparency and ,security ,act1 but in no event later than-- 7#a7 #dh hours before the date of the next election for public office held in the ,state or unit of local government involved2 or 7#b7 #cj days after receiving the notification1 whichever is earlier4 7d7 ,definitions ,in this section1 the terms ,state and ,state election official each have the meaning given such term in the ,achieving ,lasting ,electoral ,reforms on ,transparency and ,security ,act4 4 7b7 ,conforming amendment relating to enforcement ,section #dja of such ,act 7#eb ,u4,s4,c4 #baaaa7 is amended by striking sections #cja1 #cjb1 and #cjc and inserting subtitle ,a of title ,,iii4 7c7 ,clerical amendment ,the table of contents of such ,act is amended by inserting after the item relating to section #cjc the following new item3 #cjc;,a4 ,responsibilities of ,state and local officials to notify individuals affected by unauthorized intrusions into election systems4 4