AB 1259 amends Elections Code section 19288 to add an explicit requirement that the Secretary of State publish the post-examination report for remote accessible vote-by-mail systems on the Secretary of State’s internet website. The underlying statute already requires a report within 60 days after an examination; this bill removes ambiguity about one permitted publication channel.
The change is narrow but consequential for oversight and public access. By directing routine web posting, the bill makes certification outcomes immediately discoverable to voters with disabilities, advocacy groups, journalists, counties, and technical reviewers — while also raising practical questions about redaction, security, and the administrative steps the Secretary of State must adopt to implement regular online disclosures.
At a Glance
What It Does
The bill amends Elections Code section 19288 to require the Secretary of State to publish, on the office’s website, the report produced after examining a remote accessible vote-by-mail system stating whether it is certified, conditionally approved, or denied. It leaves the 60-day post-examination deadline in place.
Who It Affects
Primary stakeholders include vendors of remote accessible vote-by-mail technology, the Secretary of State’s certification staff, county election officials who choose certified systems, disability-rights organizations and voters who depend on accessible remote voting, and researchers or journalists following election security.
Why It Matters
Making the report available on the Secretary of State’s website increases routine public access and auditability of certification decisions, which can accelerate oversight and public trust efforts. At the same time, public web posting raises immediate questions about handling sensitive technical findings, proprietary information, and accessibility of the posted documents.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
California already requires the Secretary of State to examine any remote accessible vote-by-mail system proposed for use or sale in the state and to prepare a report stating whether the system is certified, conditionally approved, or not certified. AB 1259 simply specifies one clear method for making that report public: posting it on the Secretary of State’s internet website within the existing 60-day window after completing the examination.
That single-sentence addition reduces ambiguity about how the public can access the report. Previously the statute required the Secretary to make the report “publicly available” but did not expressly say that posting to the office’s website counted.
By naming the website, the bill standardizes a predictable, low-friction channel for publication that advocacy groups, counties, and the press can monitor without submitting records requests.The bill does not alter what gets tested, the certification standards, or the content that must be in the report; it only alters dissemination. Because the amendment is narrowly focused, implementation will be an operational task: the Secretary of State will need a web page or repository, a workflow to publish within 60 days, and decisions about formatting, archiving, and accessibility (e.g., machine-readable versions or accessible PDFs).Where the bill leaves holes is as important as what it requires.
AB 1259 does not set rules for redacting sensitive technical details or vendor proprietary information, does not create penalties for missed postings, and does not direct how to balance public disclosure with cybersecurity risks. Those gaps are likely to drive internal policies at the Secretary of State’s office or prompt coordination with vendors and counties on acceptable redaction and disclosure practices.
The Five Things You Need to Know
AB 1259 amends Elections Code §19288 to add publication on the Secretary of State’s internet website as an explicit method for making post-examination reports public.
The statutory 60-day deadline for making the examination report public remains unchanged: the Secretary must make the report available within 60 days after completing the examination.
The report must state whether a remote accessible vote-by-mail system has been certified, conditionally approved, or whether certification has been withheld — the bill does not expand or change that substantive content.
AB 1259 does not add new certification criteria, testing protocols, or technical requirements for the systems themselves; it addresses only how the outcome is disclosed.
The bill contains no rules on redaction, no prescribed format for web posting, and no enforcement mechanism or penalties for failure to publish — leaving practical implementation details to the Secretary of State.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Explicit web publication requirement for post-examination reports
The single textual change adds the phrase that the Secretary of State shall make the report publicly available, “including by publication on the Secretary of State’s internet website.” Practically, that turns an ambiguous obligation into an explicit duty to maintain an online posting mechanism; the office must now ensure a discoverable, maintained web location for these reports.
60‑day posting window remains in force
The bill preserves the current deadline: the Secretary must publish within 60 days after the examination is complete. That retained timeline creates a firm operational cadence for the office — examinations must be tracked to ensure web publication occurs within the statutory window.
What the report must say — certification status
This amendment does not expand the statutory content of the report: it continues to require only a statement whether the system is certified, conditionally approved, or denied. Agencies and stakeholders should not expect the law to compel technical write-ups, vulnerability disclosures, or detailed test logs unless the Secretary chooses to include them voluntarily.
No redaction rules, penalties, or format specifications
The statute is silent on critical implementation details: it does not require redaction standards for sensitive technical information, it does not specify file formats or accessibility standards for the posted report, nor does it set penalties for failing to publish. Those gaps push the burden onto the Secretary of State to develop internal policies and to coordinate with vendors and counties on how to handle proprietary and security-sensitive content.
This bill is one of many.
Codify tracks hundreds of bills on Elections across all five countries.
Explore Elections in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Voters with disabilities — They gain easier, predictable access to certification outcomes for the remote accessible systems they rely on, which can inform their confidence and choices about remote vote-by-mail tools.
- Election watchdogs, journalists, and cybersecurity researchers — Routine website posting lowers barriers to scrutiny and speeds independent review of certification decisions without needing public‑records requests.
- County election officials — Publicly posted certification decisions provide clearer procurement signals about which remote accessible systems the Secretary has approved, aiding counties in selecting compliant products.
- Vendors whose systems are certified — A public posting serves as an official, visible endorsement that vendors can reference in marketing and procurement processes.
Who Bears the Cost
- Secretary of State’s office — The office will absorb administrative costs to develop a posting workflow, maintain a public repository, ensure accessibility compliance, and establish redaction/review procedures for sensitive content.
- Vendors of remote accessible vote-by-mail systems — Public disclosure increases reputational risk; vendors may need to invest in additional documentation and legal review to protect proprietary information before public release.
- Election cybersecurity personnel — Teams may need to produce sanitized summaries or responsive redactions and perform additional vetting before publication, increasing workload and time pressures within the 60-day window.
- County election offices — Greater public visibility can trigger more constituent inquiries and local review requests about certification decisions, adding to operational burdens at the county level.
Key Issues
The Core Tension
The central dilemma is transparency versus protection: the public and oversight communities want routine, easy access to certification outcomes to evaluate election technology, while election administrators and vendors must limit publication of technical details that could disclose vulnerabilities or proprietary information. AB 1259 tilts toward transparency by naming web posting but leaves the hard questions about what to publish, how to redact, and how to do so securely unresolved.
The bill is narrowly drafted, which is both its virtue and its vulnerability. Requiring web publication improves discoverability, but it does not resolve how to handle tradeoffs between public transparency and the need to protect security-sensitive information or vendor trade secrets.
The statutory phrase does not define what material in the Secretary’s examination file must be published, so the office will likely have to develop redaction templates and legal justifications for withholding specific technical content. Those internal rules could produce inconsistent disclosures unless the Secretary adopts clear standards.
Another practical complication is format and accessibility. Posting on a website can mean anything from a single PDF to a searchable machine-readable archive; without format requirements, stakeholders might receive disclosures that are technically public but practically inaccessible.
The absence of enforcement mechanisms or penalties for missed postings also means compliance depends on administrative priorities and resources: the 60-day deadline creates a target but no statutory backstop if the office lacks staffing or policies to meet it. Finally, public posting increases the chance that partial or technical reports will be misunderstood or weaponized in public discourse unless accompanied by plain-language summaries or contextual materials.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.