Kansas HB2437 - "shall only use a website that ... has been approved to accept"

[wesgarrison]

https://www.kslegislature.gov/li/b2025_26/measures/hb2437/

Ensuring you know about this and if there's anything I can do help out, please let me know.

New Sec. 8. 
(a) Any person registering to vote in this state using a
website shall only use a website that has the.gov domain as part of such
website's uniform resource locator or has been approved to accept and
transmit electronic voter registration applications by the secretary of
state. County election officials shall not accept any electronic voter
registration application that has been accepted by or transmitted from
any website that does not satisfy the requirements of this section.
(b) A website shall only be approved to accept and transmit
electronic voter registration applications by the secretary of state if
such website provides that:
  (1) All registrant data transmitted through an online voter
registration system shall be protected using encryption in transit;
  (2) encryption protocols shall comply with applicable national
institute of standards and technology (NIST) standards;
  (3) registrant data shall be transmitted directly to systems owned,
operated or contractually controlled by the applicable county election
officer;
  (4) online voter registration systems shall authenticate connections
to ensure that registrant data is transmitted only to authorized
government endpoints, which shall be provided by the secretary of
state;
  (5) the system shall provide confirmation to the registrant that the
submission has been successfully received by the applicable county
election officer;
  (6) audit logs shall be maintained documenting submission
receipt, system access and data transmission integrity;
  (7) registrant data collected through an online voter registration
system shall be used solely for voter registration and election
administration purposes as authorized by law;
  (8) registrant data shall not be sold, licensed, rented, transferred or
used for commercial or nonelection-related purposes; and
  (9) registrant data shall not be disclosed to any third party except:
    (A) As required by state or federal law;
    (B) to another county election officer or the secretary of state for
official election administration purposes; or
    (C) to a contractor acting exclusively on behalf of the county
election officer and bound by written agreements requiring compliance
with this regulation and applicable NIST standards.

... and more

[karpet]

thanks @wesgarrison yes we are aware.

the key provision is:

online voter registration systems shall authenticate connections
to ensure that registrant data is transmitted only to authorized
government endpoints, which shall be provided by the secretary of
state;

and until the SoS provides those, there is nothing for us to do.