|Multi Request||Voter registration website|
|Submitted||Oct. 13, 2020|
MuckRock users can file, duplicate, track, and share public records requests like this one. Learn more.
To Whom It May Concern:
Pursuant to the Hawaii Uniform Information Practices Act, I hereby request the following records:
A series of voter registration website outages have made national news in recent weeks:
Therefore, I request the following information:
- Contracts, plans, RFPs, and underlying information about the design of online voter registration systems
- Presentations and emails regarding these systems
- Any disaster recovery / backup plans / failsafes for voter registration databases and registration websites or emails/plans/RFPs/presentations regarding this
- Disaster Recovery and Business Continuity contracts, plans, RFPs, presentations for voter registration websites and databases
- Any cybersecurity audits/penetration test reports / RFPs and contracts regarding online voter registration systems
Please search from Jan 1, 2018 until the day this request is processed.
These documents will be used for reporting on Motherboard, VICE Media's science and tech website (www.motherboard.vice.com)
The requested documents will be made available to the general public, and this request is not being made for commercial purposes.
In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.
Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 10 business days, as the statute requires.
To Whom It May Concern:
I wanted to follow up on the following Hawaii Uniform Information Practices Act request, copied below, and originally submitted on Oct. 13, 2020. Please let me know when I can expect to receive a response.
Thanks for your help, and let me know if further clarification is needed.
Dear Mr. Koebler,
This is written in response to your request for a variety of documents relating to our online voter registration system.
Elections are considered critical infrastructure and this includes the online voter registration system. In general, in order to safeguard critical infrastructure, the state's practice is to not disclose IT security methodology, activities, and data, including equipment and software employed and remediation actions, if any, because doing so could advertise vulnerabilities, promote phishing, and/or expose or impede investigation activities.
This non-disclosure of records is authorized by our state law that provides that disclosure is not required for "[g]overnment records that, by their nature, must be confidential in order for the government to avoid the frustration of a legitimate government function." HRS § 92F-13(3).
As such, we are declining the disclosure of the records you have requested.
Office of Elections