‘‘(B) The research and publication shall be 
exempt from the anti-circumvention rule of sec-
tion 1201 of title 17, United States Code (com-
monly known as the ‘Digital Millennium Copy-
right Act’), and the election system vendor will 
not bring a claim against a researcher for cir-
cumvention of technology controls. 
‘‘(3) RULE
OF
CONSTRUCTION.—Nothing in 
this subsection may be construed to limit or other-
wise affect any exception to the general prohibition 
against the circumvention of technological measures 
under subparagraph (A) of section 1201(a)(1) of 
title 17, United States Code, including with respect 
to any use that is excepted from that general prohi-
bition by the Librarian of Congress under subpara-
graphs (B) through (D) of such section 1201(a)(1). 
‘‘(4) EXEMPT FROM DISCLOSURE.—Cybersecu-
rity vulnerabilities discovered under the program 
shall be exempt from section 552 of title 5, United 
States Code (commonly referred to as the Freedom 
of Information Act). 
‘‘(e) DEFINITIONS.—In this section: 
‘‘(1) CYBERSECURITY
VULNERABILITY.—The 
term ‘cybersecurity vulnerability’ means, with re-
VerDate Sep 11 2014 
03:10 Dec 04, 2025
Jkt 069200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H6315.IH
H6315
kjohnson on DSK7ZCZBW3PROD with $$_JOB
spect to an election system, any security vulner-
ability that affects the election system. 
‘‘(2) ELECTION INFRASTRUCTURE.—The term 
‘election infrastructure’ means— 
‘‘(A) storage facilities, polling places, and 
centralized vote tabulation locations used to 
support the administration of elections for pub-
lic office; and 
‘‘(B) related information and communica-
tions technology, including— 
‘‘(i) voter registration databases; 
‘‘(ii) election management systems; 
‘‘(iii) voting machines; 
‘‘(iv) electronic mail and other com-
munications systems (including electronic 
mail and other systems of vendors who 
have entered into contracts with election 
agencies to support the administration of 
elections, manage the election process, and 
report and display election results); and 
‘‘(v) other systems used to manage 
the election process and to report and dis-
play election results on behalf of an elec-
tion agency. 
VerDate Sep 11 2014 
03:10 Dec 04, 2025
Jkt 069200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H6315.IH
H6315
kjohnson on DSK7ZCZBW3PROD with $$_JOB
‘‘(3) ELECTION
SYSTEM.—The term ‘election 
system’ means any information system that is part 
of an election infrastructure, including any related 
information and communications technology de-
scribed in paragraph (2)(B). 
‘‘(4) ELECTION
SYSTEM
VENDOR.—The term 
‘election system vendor’ means any person providing, 
supporting, or maintaining an election system on be-
half of a State or local election official. 
‘‘(5) INFORMATION SYSTEM.—The term ‘infor-
mation system’ has the meaning given the term in 
section 3502 of title 44, United States Code. 
‘‘(6) SECRETARY.—The term ‘Secretary’ means 
the Secretary of Homeland Security. 
‘‘(7) SECURITY
VULNERABILITY.—The term 
‘security vulnerability’ has the meaning given the 
term in section 102 of the Cybersecurity Information 
Sharing Act of 2015 (6 U.S.C. 1501).’’. 
(b) CLERICAL AMENDMENT.—The table of contents 
of such Act is amended by adding at the end of the items 
relating to subtitle D of title II the following: 
‘‘PART 7—INDEPENDENT SECURITY TESTING AND COORDINATED CYBERSE-
CURITY VULNERABILITY DISCLOSURE PROGRAM FOR ELECTION SYSTEMS 
‘‘Sec. 297. Independent security testing and coordinated cybersecurity vulner-
ability disclosure program for election systems.’’. 
Æ 
VerDate Sep 11 2014 
03:10 Dec 04, 2025
Jkt 069200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6301
E:\BILLS\H6315.IH
H6315
kjohnson on DSK7ZCZBW3PROD with $$_JOB