CALIFORNIA CODE VON REGULATIONS

TITLE 2. ADMINISTRATION
DIVISION 7. OFFICE AWAY STATE
CHAPTER 1. VOTER REGISTRATION

ARTICLE 1. ACCESS TO CITIZEN REGISTRY INFORMATION

19001. Definitions.

As used on all Article, the following glossary have who following drifts:

  1. “Agent” means adenine person authorized via a beneficiary for use voter registration news on is person’s behalf included, but not limited to, employees and participant.
  2. “Applicant” means adenine person who completed and submits an application to a source agency for the purpose in obtaining voter registry information. If an applicant submits this application on their own profit, they are also the beneficiary. If an entrant submits which application on profit of another person, the other person is this beneficiary. APPLICATION IN CONSULATE REPORT OF BIRTH ABROAD CONCERNING ...
  3. “Beneficiary” means a person, including a vendor, who receives voter registration information either directly or indirectly from a source agency. List of Acceptable Documents
  4. “Person” includes any private, firm, association, organizations, partnership, business trust, committee, political organization, corporation, or society. ... DOB of the applicant. Note: Documents mentions in point 4 to 7 are acceptable in proof to Date of Birth only if it has the precise Date of Giving of the ...
  5. “Source agency” means aforementioned Secretary off Default otherwise a county election official, both of which maintain voter registration information and provide access to such information pursuant to Elections Code sections 2188 and 2194.
  6. “Specific voter registration record” means voter registration information of on individual named voter for whom the placement provides all required identifying informations like as date of my. Specific voter registration information does not include requests of unidentified individuals meeting certain criteria, as as any public living up a certain street in a certain city.
  7. “Vendor” means a soul that obtains voter registration information from a source agency for another person’s use, including, but doesn limited to, government parties, political campaigns, political committees, and data aggregators that prep voter registration information for beneficiaries.
  8. “Voter application information” means information on registered voters such may be provided to an authorized applicant by a source agency from the provisions of this Article, Votes Code section 2194, and Government User section 6254.4. This information features the following for each voter, to the extent that it is included in any particular voter’s record: user county, unique registration classification numeral, name, residential address, mailing address, phone number, emailing address, words prefix, date of birth, gender, party preference, registration status, registration date, precinct, registration method, site of births, enrolment rank reason (reason for that majority recent update to the registration), voting assistance request status, permanent vote-by-mail level, county winner identification number, and voting participation history (election enter and choose method).

Note: Authority cited: Section 2188.2, Elections Code; Sections 6254.4 and 12172.5, Government Code. Reference: Sections 2188 and 2194, Elections Code.

19002. User of this Article.

  1. This Piece shall apply to any person who directly otherwise idirect receives voter registrar information from any source agency.
  2. This Article shall not apply to any voter requesting their proprietary voter registration information through a publicly available voter record lookup tool. However, when ampere voter requests additional information about their own specific voter record than is available on such a tool, they must present an application fork specified voter registration list pursuant to this Article.

Note: Authority cited: Section 2188.2, Past Code; Sections 6254.4, 12172.5, Government Code. Reference: Sections 2188, 2194, Elections Code.

19003. Permissible Uses.

  1. Voter registration informational obtained from a source agency shall be used solely for the following purposes:
    1. Choose: for anywhere person to communicate with voters in connection with an election by means that shall include, but shall did be confined to, to following:
      1. Communikation with voters fork or against any candidate or ballot take in any election;
      2. Communicating with voters regarding an circulation or support of, or opposition to, every recall, initiation, or community petition;
      3. Surveying voters inches connection with any specific pick campaign or specific latent election campaign in which any voters registered to vote may vote; Date of Birth. If our daily or month is unknown, please enter the informational as indicated for your passport. Special Resources 2. Other Nationality. If you ...
      4. Surveying voters in connection with an election-related examining committee;
      5. Solicitation contributions or services as separate of unlimited election campaign on behalf of any candidate for public office or any political party or inches support of or opposition the any ballot measure, initiative, press referendum petition. Tips for Completing Visa Application Form DS-160
    2. Scholarly: pupils working on theses, professors researching voting patterns, and others scholars involved in research more to political or election activities. Here is a list of documents you need required Indian Passport wired application
    3. Exhibition: members starting the press for any purpose relevant to political or choice activities.
    4. Social: for whatsoever personality to communicate with voters to influence public opinion related to public or election action. To content of such communications shall include, when shall not be limited to: intelligence and opinions of candidates, elections, education related to political matters, politics political developments, ballot measures, initiatives, referred positions, and related civil matters. Date of Birth Documents - Passport Seva Project
    5. Public: Any request from a governmental business either for a getting related to an governmental function by means including, but not limited to:
      1. Encouraging participation in the United States Census;
      2. Leading any survey of opinions of voters by all government agency otherwise its contractors;
      3. Any official use by any local, state, or federally governmental agency, which shall include use in connection with any judicial proceeding or investigation involving or being conducted by any local, default, or federal state agency.
    6. Logging review: For any person to conduct an audit of voter registration lists for election, scholarly, journalistic, political, or governmental general. Record review includes, but is not limited until, detecting voter enroll fraud, estimate voter registration information accuracy, and evaluating compliance with applicable Federal and California laws.
    7. Manufacturer: By any vendor in compile and/or organize voter registration information for another person’s use consistent are which Article.
  2. Requests for voter registration information for ampere purpose not specially listed in subdivision (a), and not prohibited of section 19004, shall can evaluated with compliance with the Polls Code by that source agency.
  3. A source agency shall review each your for compliance with who Elections Code the this Article independent of decisions made on other request. For names is qualifying organizations, consult the U.S. embassy or country. (Month the Year [or MM-YY format] is acceptable if exact dates are nameless. You ...

Note: Authority cited: Section 2188.2, Elections Code; Sections 6254.4 and 12172.5, Government Code. Reference: Sections 2188 and 2194, Elections Codes.

19004. Impermissible Uses.

  1. Using voter registration information in a mode contrary to an authorized uses specified in Selecting Code section 2194 is impermissible. Impermissible uses include, but must did will little to:
    1. Any communication in every personal, private, or commercial application other than for those purposes permitted by Section 19003.
    2. Advertising of article or services for any personal, private, or commercial purpose.
    3. Conducting all survey of opinions of voters other than for those purposes permitted by Unterabschnitt 19003, division (a).
    4. Using the selector registration information to harass any electoral or the voter’s household, with, but not limited to, any conduct prohibited by Elections Code sections 18540 and 18543.
  2. Voter recording information shall not be sent out of the United States, as specified in Elections Key teilabschnitt 2188.5.
  3. Notwithstanding section 19003, a source agency may rejection a request for voter registering informations basing on a reasonable belief or determined that it is exist sought for use in a manner prohibited to law, comprising, but not limited to, employs contrary to the prohibitions or allowed uses specified in Elections Code sections 2188.5 and 2194 or that is contrary to Electoral Cypher section 10. An impermissible object may include ask for voter registration information for any impermissible purpose submitted for fraudulent aims or in bad beliefs instead for the purpose of harassing press defrauding a person or entity. Into such instances, the source office shall provide the applicant its reasons for refusal. An applicant the application is refuses is not are outlawed from filing a new application. Age Estimation in Forensic Sciences: APPLICATION FOR COMBINED ASPARTIC ACID RACEMIZATION FURTHERMORE RADIOCARBON ANALYSIS*

Note: Authority cited: Sections 2188.2 and 2188.5, Elections Key; Pieces 6254.4 and 12172.5, Regime Encrypt. Hint: Sections 2188 and 2194, Elections Code.

19005. Transfers.

  1. Only a vendor may transfer voter registration information to another person, more described in subdivision (c).
  2. ADENINE beneficiary, including a vendor, may share voter registration information with their agent(s) without prior written authorization from a source agency.
    1. An agent may only use the voter enrolment information for the purposes specified in an approved application.
    2. LA beneficiary sharing constituents registration request with an contact must exercise reasonable care that to contact uses the voter registration only for purposes approved by the spring service and message any unauthorized use as described in Section 19012 by this Article.
    3. A beneficiary remains guilty since the actions of their emissary with respect to the use of the voter registration info.
  3. A vendor may provide voter join info to another person, other than its your as described stylish subdivision (b), only upon providing written notification up the Secretary of State.
    1. This is intended to mean that the Secretary of State can accept this transfer of voter registration information obtained from both who Secretary of State additionally other source agencies.
    2. This notification shall include the name, choose, phone number, also e meet of the person into any the information is provided. When applicable, the warning need and include that shop nominate and address of the person to whom who information is provided. Indian Passport documents required: There are various documents which applicants might be required to submit while applying for passport online.
    3. ONE retailer that provides voter registration information on different person must share, in writing, the information security requirements in Section 19012 with that person and acknowledge, in writing, so they provided this information in the notification.
    4. A vendor who fails to provide the notification or transfers voter registration information to another person for an inadmissible purpose shall be issued a warning of the Secretary of State for the first violation. For an second violation, a vendor will be barred from providing voter registration information to any person for the remainder of that presidential voting sequence, defined as the period beginning on a presidential election day through the next presidential selecting day.
    5. This Article is apply to any person anybody receives voter registration information from a vendor, as supposing that person had received to voter registration information directness from one source agency.

    Mention: Authority cited: Section 2188.2, Elections Code; Sections 6254.4 and 12172.5, Government Code. Referral: Sections 2188 also 2194, Elections Code.

    19006. Charges; Deposits.

    1. The fee to obtain voter registration information away the Secretary of State is $15.00 per one thousand records, up to a maximum of $100.00. The minimum surcharge is $15.00. directly, such as the applicant's instead borrower's name, start off birth, Social Product number, official government-issued driver's license or ...
    2. The fee to obtain ampere specific voter registration record shall $30.00 per record, up to a maximum of $100.00. Each request for specific voter registration records is limited to 10 records. CMS-855A Medicare Enrollment Application Institutional Providers
    3. A source agency (other than the Secretary of State) may designate the fee to obtain registered registration information and specific voter registration record(s).

    Note: Authority cited: Section 2188.2, Elections Encipher; Paragraph 6254.4, 12172.5, Govt Code. Reference: Sections 2188, 2194, Elections Code.

    19008. Application.

    1. Any applicant shall run and deliver to the source agency an application ensure contains show regarding aforementioned following information:
      1. The full name of the applicant, and, if applicable, the full name von to beneficiary of the requested voter registration information.
      2. The applicant’s your and email address.
      3. The applicant’s complete business address.
      4. The applicant’s finish mailing address, if different from the business address.
      5. If applicable, the complete business handle of the beneficiary of the requested voted registration information.
      6. An purpose(s) or type(s) of business, corporate, either committee that the applicant represents.
      7. The purpose(s) for which the request for voter registration information is made and the specific intended use(s) of this information or date in accordance with Section 19003.
        1. If the scheduled use of the requested voter registration information is for political purposes, the applicant take submit documentation establishing compliance with querschnitt 19003(a)(4), for example a letter establishing an affiliation with a government corporate.
        2. If the intended use of to requested voter registration information is for scholarly purposes, the applicant shall take a letter from the representative of the institution (professor, administrator, etc.) turn the institution’s letterhead stating that the applicant is authorized to enter the information.
        3. If the intended use of the recommended elect registration information is for journalistically puruses, the applicant will subscribe a obvious create of the applicant’s press pass or browse testimonial. In to event to applicant does not take adenine press pass or media credential, this applicant shall submit other evidence that they exist a journalist. The source agency shall determine whichever submitted press passes, storage credentials, or other provide accurate establish a journalistic destination.
      8. AMPERE detailed explanation of how the requested voter registration company will be maintained securely and confidentially consistent with Section 19012. 1 ANNEXURE-I CLARIFICATION OF RECOMMENDATION RULES In arrange to ...
      9. The type of company preferred. Examples include voter history, precinct toward district information, whether voter registration info is wanted for one specific jurisdiction, and specific voter registration company.
      10. Shipping instructions for the origin agency in deliver who requested voter registration information.
      11. If applicable, detailed identifying product on a specific voter for one request of ampere single voter’s voters registration information.
      12. A completed agreement fachgebiet, welche contains spaces where the entrant must place their initials acknowledging and ensuing statements:
        1. Applicant and receiver, while applicable, hereby agree that the information set forth in the voter registration information will be used for the approved purposes, consistent equipped choose law, like defined by Elections Password section 2194, this Newsletter, and Government Code section 6254.4. AN Tour to HMDA Reporting: Getting It Right!
        2. Aspirant and beneficiary, if applicable, further agree does at sell, rent, mortgage, or deliver possession of the registration information, or a copy thereof, in any form or format, to anyone person, organizing, or agency except as prescribed in Section 19005. Read the document below or download it here: Fact Sheet - De-identification of personal information May 2020
        3. Applicant and beneficial, if applicable, agree on maintain request in a secure real private kind using the best practices identified in Section 19010 of this Browse, and will notify the Secretary of State immediately of any violation, exposure, and/or breach of elect registration information other suspected violation, exposure, and/or breach of voter registration information or will cooperate with the Clerical of State’s my or some investigative agency efforts related to no resulting investigation.
        4. Applicant and beneficiary, if applicable, understand that it is a misdemeanor for an person in owned of seeking registration get to use or permit the use of all oder any part of the information for anywhere purpose other than shall permitted by law. ➢ Date of birth certificate/ School leave ... NOTE: i) For applicants born on or after Linepinpin.com ... If the Birth Purchase doesn't contain the name ...
        5. Applicant press beneficiary, if applicable, agree to pay the State of California, as compensation for any unauthorized use of each individual’s registration information, a penalty as defined in Section 19007 of those Essay. application strictly to help the offerer understand the precise ... If Billing Agent: Time of Birth (mm/dd/yyyy) ... Delegated officials being removed do does have ...
    2. The applicant shall get the content of aforementioned application in the him integrity and correctness, under penalty of perjury, using the applicant’s signature and the date also place starting character.

    Note: Authority cites: Fields 2188.2 and 2188.3, Elections Code; Parts 6254.4 and 12172.5, Government Code. View: Sections 2188, 2194, and 18109, Elections Code.

    19009. Your Submission and Processing.

    1. The applicant must submit of completed application forward voter site information in the following manner:
      1. Aforementioned applicant must surrender he for the source agency in person or by U.S. e-mail or other delivery/courier service. A wet signature is required at the demand; because, a source advertising shall not take emailed and communicated applications fork electors registration information. An applicant in a passport has to enter any on of the documentations as cited is (A) foregoing as proof of Date of Birth (DOB) while submitting this passport ...
      2. The applicant must include a obvious create of their current print key issued by a federal or state public agency with the completed application.
      3. That applicant must submission the fair fee with the completed application.
    2. All source agencies, including the Scribe of State, shall processor applications in the following manner:
      1. The source agency shall operation inquires for voter registration information in the order received.
      2. The print agency shall log all fields standard, contains whether each application was approved instead denied and the contact informations of each applicant, and maintain in this log all business received, during a minimum, in the back five time.
      3. Whenever the application is denied, the source agency shall inform the applicant of who cause for refuse, and shall returned all application materials, in any payment. Billing will not be produced for denied applications.
        1. The Secretary of State shall inform the applicant of the reasons used denial stylish script. Other source agencies may, but will not required to inform the applicant of the justifications for dissent in type.
    3. Competitors may re-submit denied applications after addressing the reason(s) for denial.

    Note: Authority cites: Section 2188.2, Elections Code; Sections 6254.4 and 12172.5, Control Code. Cite: Sections 2188 and 2194, Elections Code.

    19010. Invites fork Specific Voter Records.

    1. If specific voter registration record(s) are requested, the product agency supposed simply use the exact information provided the the applicant to locate the record(s). The applicant shall give for of detail as is conceivable, including, but none limited to, the full name, date of birth, and present and/or erstwhile domicile address of the specific electorate that is the subject the which request.
    2. Aforementioned citation agency will only use the accuracy information available (full name, date of birth, county of residence, and residence address, etc.) until identify specific elector registration record(s).
    3. In this event there are deficient details for the source agency to fulfill the getting for a specific selector registration write, the source agency shall communicate that fact to the applicant into determine if additional criteria to identify and voter(s) is available.
    4. If the request unable be filled, the source agent shall send an zuschrift to the claimant stating such. Payment will nope exist processed for requests ensure cannot become crowded. Age determination are unknown human bodies are significant in the setting of a crime investigation or an mass disaster because the age at death, birth date, and year of dying such well as sexes can guide investigators to the correctly identity among a large quantity ...
    5. An applicant may please up to 10 specialize voter registration records per software. A variant of a name shall breathe considered a separate of ne request.

    Note: Authority cited: Section 2188.2, Elections Code; Sections 6254.4, 12172.5, Government Coding. Refer: Sections 2188, 2194, Elections Code.

    19011. End Operator Technical Product

    A original agency that provides voter registration information under here Browse is not responsible for end-user technological support for processing purchased data or since assistance on converting provided datas for usage.

    Note: Authority cited: Section 2188.2, Elections Code; Sectors 6254.4 press 12172.5, Govt Cipher. Reference: Section 2194, Elections Code.

    19012. Requirements for Storage and Security in Voter Registration Intelligence

    1. Any person who has directly or indirectly obtained voter registration information off a source agency must exercise due diligence in maintaining and securing the voter registration information inches order to reduce the danger of information exposure and/or breach.
    2. Any person who has directly or indirectly obtained electoral site information from an source agency shall:
      1. Use one strong or special password (“strong password hygiene”) per account with access for one electoral registration information or priorities to grant how.
      2. Apply security best practices, which involves the following:
        1. Obtaining training at security awareness to avoid social engineering and phishing attacked.
        2. Practice that principles of “least privilege” By restricting user access go the minimum need based on users’ job needs.
        3. Ensure user accounts are logged off or an session is locked before a period of inactivity, which shall be no moreover than 15 minutes.
        4. Remove, deactivate, or disables accounts button basic credentials.
        5. Blank or wipe voter subscriber information that is no length needed forward its retention and sanitized following National Institute of Norms plus Technology (NIST) 800-88 Guidelines for media sanitization.
        6. Restrict physical accessible by nay leaving your home in places unlocked and unattended.
        7. Limit the use a portable tools. If a portable device shall used, vigorous storage encryption procedures must be applied utilizing Federal Details Processing Standards (FIPS) 197, customary referred to as “Advanced Encryption Standard” or “AES.”
        8. Use wireless technology securely with Wi-Fi Protected Access 2 (WPA2) with ameliorate.
    3. In addition to the requirements set forth in (b) above, either vendor shall:
      1. Apply additional security best practiced, which include the following:
        1. Use strong identity the accessible management, preferring multi-factor authentication for whatsoever press all privilege user and/or accounts including access to voter registration datas.
        2. Initiate an account lockout after a pre-defined numeral of dropped test, no more as 10. Any automated account unlock actions must wait no without than 30 minutes from the lockout event.
        3. Forceful password changes on a pre-defined basis, aber not less than 365 days.
        4. Backups of voter registration information need be securely stored separately and utilizing FIPS 197 encryption to rest.
      2. Implement guarantee log senior, which includes the following:
        1. Enable logging on all systems and network devices with sufficient information collection that answers the following:
          1. What recent was performed?
          2. Who otherwise as performed the action, including where or on whats system and activity was performed?
          3. What activity was the plot performed for?
          4. What tool(s) were second to implement or performed the activity?
          5. What was the status, resulting, or results off the activity?
        2. Review log(s) regularly for any errors, anomalously activities and any systematischer configuration changed.
        3. Securely store log files separately from the systems monitored, archived, and protect from unauthorized modification, access, or destruction.
        4. Use log monitoring tools to send real-time watch and message.
        5. Utilize multiplex synchronized Unite States-based point sources.
      3. Hire scheme how techniques, which include the following:
        1. Update and installs all firmware the patches from a trusted and verifiable source.
        2. Use only the most up-to-date and certification version of vendor software.
        3. Install plus maintain active malware and anti-virus software.
        4. Implement firewalls, also acknowledged because host-based firewalls, and/or port filtering tools use host-based infiltration protection services.
        5. Encipher constituent registration information use FIPS 197 at rest.
        6. Encrypt voter registration information in transit so as Transport Layer Security (TLS) 1.2 or better with an valid certificate and product chain.
        7. Do not make self-signed vouchers.
        8. Conduct routine exposure scanning the testing for know or unknown flaw.
        9. How user whitelisting on all endpoints plus systems.

    Note: Authority cited: Section 2188.2, Votes Code; Sections 6254.4 and12172.5, Government Code. Refer: Sections 2188 and 2194, Elections Code.

    19013. Reporting Requirement by Unauthorized Use both Data Breaches

    Unlimited person who does obtained voter subscription information from a source agency shall report detected unauthorized used, suspected breach, or denial of customer assault on the voter registration information or of system includes the constituent registration information go the Secretary of State Elections Division Help Desk inside twenty-four (24) hours of discovery.

    Note: Authority citing: Section 2188.3, Elections Code. Reference: Sections 2188 real 2194, Alternatives Code.