Utah Closed the Network Door Around Voting Machines and Tightened the File Around Mail Ballots.

What should happen to a marked ballot after the voter lets it go?

It should stay inside a system with no live route to the internet.

House Bill 26 prohibits covered voting equipment from using wireless or internet connectivity. That removes one path an outside attacker could use to reach tabulation.

Picture election workers setting up a tabulator before polls open. A machine that contains a modem, active wireless radio, remote-support tool, or network-dependent feature creates a route that must be disabled or removed. HB26 makes the absence of that connection part of the legal standard rather than an optional security preference.

The prohibition affects purchasing and testing as well as Election Day. Counties need equipment inventories, configuration records, inspections, and vendor contracts that do not depend on remote access. Results can move through controlled physical media or paper records under documented custody without placing marked-ballot tabulation on a live network.

Air-gapping is the locked door. Physical access controls, software testing, chain-of-custody records, paper ballots, and post-election audits are the walls around it. Utah still needs all of them.

An offline machine can still be altered through unauthorized physical access or compromised removable media. Logic-and-accuracy tests, seals, bipartisan handling, access logs, paper reconciliation, and audits show whether the rest of the room stayed secure after the network door closed.

Senate Bill 194 tightens procedures for mail-ballot verification, handling, and election data. When a signature or voter record raises a problem, the eligible voter needs prompt notice and a practical way to correct it before the deadline.

Picture an older voter whose signature has changed or a younger voter signing a ballot differently from a motor-vehicle record created years earlier. The mismatch can be a useful warning and still describe a lawful voter. Notice must arrive through a channel the voter will see, identify the problem, state the deadline, and explain which evidence will cure it.

Election offices should publish how many ballots were questioned, how many voters cured them, why cures failed, and whether rejection rates differed by county. Verification earns confidence when the state can show both the suspicious ballots it stopped and the lawful ballots it restored.

Without that cure path, a verification safeguard can discard a lawful ballot because handwriting changed, a record is old, or an administrator made an error.

SB194 also places criminal restrictions around election information. The state can punish unauthorized access, alteration, and unlawful disclosure of protected data. It must keep reporting, public-record use, political criticism, and whistleblowing outside the criminal boundary.

An employee who sells protected voter data and a citizen who publishes a lawful public record are doing different things. The criminal case should identify the protected system, the unauthorized act, the defendant's mental state, and the actual disclosure or alteration. Clear definitions protect the election file without using security language to silence scrutiny.

Utah strengthened security at two places where trust can break: the machine counting the vote and the record used to accept it.

A secure election keeps the machine offline, gives the voter a correction path, and leaves lawful scrutiny in public hands.

This is our read of the laws. We encourage you to read them yourself and reach your own conclusions.