<?xml version='1.0' encoding='utf-8'?>
<chapter num="03" heading="State Board Certification — Preliminary Submissions" title_num="33" subtitle_num="09">
  <regulation prefix="Regulation" num=".01" heading="Prerequisites to Application.">
    <text>The State Board's evaluation and certification procedures are limited to voting systems:</text>
    <paragraph num="A.">
      <text>That are beyond the prototype stage and available for installation and use within the time frame specified by the State Board; and</text>
    </paragraph>
    <paragraph num="B.">
      <text>For which the qualification testing, as required by Election Law Article, §9-102(d)(2), Annotated Code of Maryland:</text>
      <paragraph num="(1)">
        <text>Has been successfully completed; or</text>
      </paragraph>
      <paragraph num="(2)">
        <text>Has not been completed, but the voting system vendor has provided:</text>
        <paragraph num="(a)">
          <text>Documentation from the U.S. Election Assistance Commission that the voting system has been submitted for qualification testing; and</text>
        </paragraph>
        <paragraph num="(b)">
          <text>A schedule that indicates completion within the time frame specified by the State Board.</text>
        </paragraph>
      </paragraph>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".02" heading="Applications.">
    <paragraph num="A.">
      <text>In General. The vendor of a voting system may apply to the State Board for evaluation and certification of the system for use in the State.</text>
    </paragraph>
    <paragraph num="B.">
      <text>Identification of System, etc.</text>
      <paragraph num="(1)">
        <text>The application shall specify clearly the specific equipment, hardware, firmware, and software for which certification is sought.</text>
      </paragraph>
      <paragraph num="(2)">
        <text>Each model or version of a voting system requires a separate application.</text>
      </paragraph>
    </paragraph>
    <paragraph num="C.">
      <text>Overview of System. The application shall provide a brief overview description of the voting system. Marketing brochures may be used for this purpose.</text>
    </paragraph>
    <paragraph num="D.">
      <text>Use in Other Jurisdictions. The application shall include a list of all jurisdictions where:</text>
      <paragraph num="(1)">
        <text>The exact system for which certification is being sought or a model or version of the system is in use, together with:</text>
        <paragraph num="(a)">
          <text>The price that was charged to the jurisdiction for the system, and</text>
        </paragraph>
        <paragraph num="(b)">
          <text>A breakdown of the per unit price and the price of any components;</text>
        </paragraph>
      </paragraph>
      <paragraph num="(2)">
        <text>The exact system for which certification is being sought or a model or version of the system has been but is no longer in use; and</text>
      </paragraph>
      <paragraph num="(3)">
        <text>A request has been made for approval of the exact system for which certification is being sought or a model or version of the system, together with a statement of whether the request was granted, was denied, was withdrawn, or is pending.</text>
      </paragraph>
    </paragraph>
    <paragraph num="E.">
      <text>Qualification Certificate. If an independent testing laboratory has completed qualification testing on the voting system, the application shall be accompanied by a:</text>
      <paragraph num="(1)">
        <text>Copy of the qualification certificate issued for the voting system; and</text>
      </paragraph>
      <paragraph num="(2)">
        <text>Signed authorization directing the independent testing laboratory that performed the qualification testing to:</text>
        <paragraph num="(a)">
          <text>Submit the results of its testing directly to the evaluation agent; and</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Allow the evaluation agent or his or her designee full access to all test records and data.</text>
        </paragraph>
      </paragraph>
    </paragraph>
    <paragraph num="F.">
      <text>Certification Testing Transfer. If the voting system has successfully completed certification testing by or for another state, the application shall be accompanied by a:</text>
      <paragraph num="(1)">
        <text>Copy of the certification issued for the voting system; and</text>
      </paragraph>
      <paragraph num="(2)">
        <text>Signed authorization directing the agency that performed the certification testing to:</text>
        <paragraph num="(a)">
          <text>Submit the results of its testing directly to the evaluation agent, and</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Allow the evaluation agent or his or her designee full access to all test records and data.</text>
        </paragraph>
      </paragraph>
    </paragraph>
    <paragraph num="G.">
      <text>Application Fee. The application shall be accompanied by a nonrefundable application fee of $5,000.</text>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".03" heading="Acknowledgment; Scheduling Start.">
    <text>On receipt of an application for certification, the State Administrator shall promptly:</text>
    <paragraph num="A.">
      <text>Acknowledge the application; and</text>
    </paragraph>
    <paragraph num="B.">
      <text>Notify the applicant and local boards of when the evaluation will begin.</text>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".04" heading="Notice and Package Submissions.">
    <paragraph num="A.">
      <text>Notice of Evaluation Agent. When the evaluation is ready to begin, the State Administrator shall notify the applicant of the name, address, and telephone number of the evaluation agent assigned to the application.</text>
    </paragraph>
    <paragraph num="B.">
      <text>Submissions to Agent. The applicant shall submit to the evaluation agent the:</text>
      <paragraph num="(1)">
        <text>Technical data package required by Regulation .05 of this chapter;</text>
      </paragraph>
      <paragraph num="(2)">
        <text>Business information package required by Regulation .06 of this chapter; and</text>
      </paragraph>
      <paragraph num="(3)">
        <text>Voting system equipment required by Regulation .08 of this chapter.</text>
      </paragraph>
    </paragraph>
    <paragraph num="C.">
      <text>Notice of Deficiency.</text>
      <paragraph num="(1)">
        <text>The evaluation agent shall review the submissions and notify the applicant of any deficiency.</text>
      </paragraph>
      <paragraph num="(2)">
        <text>The applicant shall correct all deficiencies before the certification process may proceed.</text>
      </paragraph>
    </paragraph>
    <paragraph num="D.">
      <text>Disposition of Submissions.</text>
      <paragraph num="(1)">
        <text>If the application is denied or withdrawn or the system is not selected for use as the Statewide voting system, the technical data, business information packages, and voting system equipment submitted under this chapter shall be returned to the applicant.</text>
      </paragraph>
      <paragraph num="(2)">
        <text>If the application is approved and the voting system certified and selected for use as the Statewide voting system, the technical data, business information packages, and voting system equipment shall be retained by the State Board for as long as the voting system is used in this State.</text>
      </paragraph>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".05" heading="Technical Data Package.">
    <paragraph num="A.">
      <text>Required Information — In General. The technical data package shall contain all documentation previously submitted for the qualification testing of the system, including each of the following:</text>
      <paragraph num="(1)">
        <text>Hardware schematic diagrams;</text>
      </paragraph>
      <paragraph num="(2)">
        <text>Hardware theory of operation;</text>
      </paragraph>
      <paragraph num="(3)">
        <text>Customer maintenance documentation;</text>
      </paragraph>
      <paragraph num="(4)">
        <text>Operations manual;</text>
      </paragraph>
      <paragraph num="(5)">
        <text>Software source code (both in the form of a listing and in a machine-readable form on media acceptable to the evaluation agent);</text>
      </paragraph>
      <paragraph num="(6)">
        <text>Software system design;</text>
      </paragraph>
      <paragraph num="(7)">
        <text>Customer documentation;</text>
      </paragraph>
      <paragraph num="(8)">
        <text>Any known and unresolved system problems;</text>
      </paragraph>
      <paragraph num="(9)">
        <text>When available, the report and test results of the independent testing laboratory; and</text>
      </paragraph>
      <paragraph num="(10)">
        <text>Any capability for the system to conduct a risk limiting audit of its tabulated results.</text>
      </paragraph>
    </paragraph>
    <paragraph num="B.">
      <text>Required Information — License and Warranty. The package also shall include:</text>
      <paragraph num="(1)">
        <text>A list of all third-party software required to install or operate the system; and</text>
      </paragraph>
      <paragraph num="(2)">
        <text>The terms of the license agreements for all software identified under §B(1) of this regulation.</text>
      </paragraph>
    </paragraph>
    <paragraph num="C.">
      <text>Identification of Submissions. Each item in the package shall be clearly identified.</text>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".06" heading="Business Information Package.">
    <paragraph num="A.">
      <text>Scope. The information required by this regulation shall be provided separately for:</text>
      <paragraph num="(1)">
        <text>The applicant's business; and</text>
      </paragraph>
      <paragraph num="(2)">
        <text>If the applicant is not the manufacturer of the voting system, the manufacturer's business.</text>
      </paragraph>
    </paragraph>
    <paragraph num="B.">
      <text>Required Information. The business information package shall include:</text>
      <paragraph num="(1)">
        <text>History and description of the business, including:</text>
        <paragraph num="(a)">
          <text>Year established;</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Products and services offered;</text>
        </paragraph>
        <paragraph num="(c)">
          <text>Areas served;</text>
        </paragraph>
        <paragraph num="(d)">
          <text>Branch offices;</text>
        </paragraph>
        <paragraph num="(e)">
          <text>Subsidiaries;</text>
        </paragraph>
        <paragraph num="(f)">
          <text>Parent companies; and</text>
        </paragraph>
        <paragraph num="(g)">
          <text>Subsidiaries of parent companies;</text>
        </paragraph>
      </paragraph>
      <paragraph num="(2)">
        <text>Management and staff organization, including:</text>
        <paragraph num="(a)">
          <text>Number of full-time employees by category; and</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Number of part-time employees by category;</text>
        </paragraph>
      </paragraph>
      <paragraph num="(3)">
        <text>The name and address of each:</text>
        <paragraph num="(a)">
          <text>Officer of the business;</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Person who is known to have a beneficial interest (as defined in State Finance and Procurement Article, §13-221, Annotated Code of Maryland) in the business or any parent company;</text>
        </paragraph>
      </paragraph>
      <paragraph num="(4)">
        <text>Financial history of business, including:</text>
        <paragraph num="(a)">
          <text>A financial statement for each of the past 3 fiscal years;</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Gross sales in voting products and voting services for the past 3 fiscal years; and</text>
        </paragraph>
        <paragraph num="(c)">
          <text>The percentage those sales represent of all sales of the business and its subsidiaries;</text>
        </paragraph>
      </paragraph>
      <paragraph num="(5)">
        <text>Location and manufacturing capability of each facility that is or will be used to fabricate and assemble all or any part of the voting system for which certification is being sought;</text>
      </paragraph>
      <paragraph num="(6)">
        <text>Location and servicing capability, including any service limitations, of each facility that is or will be used to serve the voting system for which certification is being sought; and</text>
      </paragraph>
      <paragraph num="(7)">
        <text>The legal and financial relationship among all vendors and manufacturers of the voting system and its various components.</text>
      </paragraph>
    </paragraph>
    <paragraph num="C.">
      <text>Required Affidavit. The package also shall include the affidavits required by Regulation .07 of this chapter.</text>
    </paragraph>
    <paragraph num="D.">
      <text>Identification of Submissions. Each item in the package shall be clearly identified.</text>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".07" heading="Anti-Bribery and Anti-Debarment Affidavits.">
    <paragraph num="A.">
      <text>Definitions.</text>
      <paragraph num="(1)">
        <text>In this regulation, the following terms have the meanings indicated.</text>
      </paragraph>
      <paragraph num="(2)">
        <text>Terms Defined.</text>
        <paragraph num="(a)">
          <text>“Controlling stockholder” means a stockholder who:</text>
          <paragraph num="(i)">
            <text>Owns more than 25 percent of the voting stock of a corporation; or</text>
          </paragraph>
          <paragraph num="(ii)">
            <text>Notwithstanding the number of shares that the stockholder owns, has the power to direct or control the direction of the management or policies of a corporation.</text>
          </paragraph>
        </paragraph>
        <paragraph num="(b)">
          <text>“Convicted” includes an accepted plea of nolo contendere.</text>
        </paragraph>
        <paragraph num="(c)">
          <text>“Principal” means:</text>
          <paragraph num="(i)">
            <text>A sole proprietor;</text>
          </paragraph>
          <paragraph num="(ii)">
            <text>A partner, officer, director, or controlling stockholder; or</text>
          </paragraph>
          <paragraph num="(iii)">
            <text>An employee directly involved in the process of obtaining contracts with public bodies.</text>
          </paragraph>
        </paragraph>
        <paragraph num="(d)">
          <text>“Public body” means:</text>
          <paragraph num="(i)">
            <text>The United States;</text>
          </paragraph>
          <paragraph num="(ii)">
            <text>Any state, territory, or possession of the United States; or</text>
          </paragraph>
          <paragraph num="(iii)">
            <text>Any political subdivision of a state, territory, or possession of the United States.</text>
          </paragraph>
        </paragraph>
      </paragraph>
    </paragraph>
    <paragraph num="B.">
      <text>Scope. An affidavit shall be submitted under this regulation separately for:</text>
      <paragraph num="(1)">
        <text>The applicant; and</text>
      </paragraph>
      <paragraph num="(2)">
        <text>If the applicant is not the manufacturer of the voting system, the manufacturer.</text>
      </paragraph>
    </paragraph>
    <paragraph num="C.">
      <text>Contents. The affidavit shall state whether, to the best of the vendor's/manufacturer's knowledge, the vendor/manufacturer or any principal in the vendor's/manufacturer's business:</text>
      <paragraph num="(1)">
        <text>Has been convicted under the laws of any public body of bribery, attempted bribery, or conspiracy to bribe;</text>
      </paragraph>
      <paragraph num="(2)">
        <text>Has been convicted under the laws of any public body of:</text>
        <paragraph num="(a)">
          <text>A criminal offense incident to obtaining, attempting to obtain, or performing a public or private contract, or</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Fraud, embezzlement, theft, forgery, falsification or destruction of records, or receiving stolen property;</text>
        </paragraph>
      </paragraph>
      <paragraph num="(3)">
        <text>Has been convicted under the laws of any public body of a criminal violation of an antitrust statute;</text>
      </paragraph>
      <paragraph num="(4)">
        <text>Has been convicted of a violation of the Racketeer Influenced and Corrupt Organization Act or of the Mail Fraud Act for acts in connection with the submission of bids or proposals for a public or private contract;</text>
      </paragraph>
      <paragraph num="(5)">
        <text>Has been convicted of conspiracy to commit any act or omission that would constitute grounds for conviction under any of the laws or statutes described in §C(1)—(4) of this regulation;</text>
      </paragraph>
      <paragraph num="(6)">
        <text>During the course of an official investigation or other proceeding, has admitted, in writing or under oath, an act or omission that would constitute bribery, attempted bribery, or conspiracy to bribe under the laws of any public body;</text>
      </paragraph>
      <paragraph num="(7)">
        <text>Has been found civilly liable under an antitrust statute of any public body for acts or omissions in connection with the submission of bids or proposals for a public or private contract;</text>
      </paragraph>
      <paragraph num="(8)">
        <text>Has ever been debarred or suspended from doing business with any public body or any agency, instrumentality, or unit of a public body; or</text>
      </paragraph>
      <paragraph num="(9)">
        <text>Is a principal, successor, assignee, subsidiary, or affiliate of any other person who has:</text>
        <paragraph num="(a)">
          <text>Been convicted under any of the laws or statutes described in §C(1)—(5) of this regulation,</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Made an admission described in §C(6) of this regulation,</text>
        </paragraph>
        <paragraph num="(c)">
          <text>Been found civilly liable for an act or omission described in §C(7) of this regulation, or</text>
        </paragraph>
        <paragraph num="(d)">
          <text>Been debarred or suspended as described in §C(8) of this regulation.</text>
        </paragraph>
      </paragraph>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".08" heading="Voting System Equipment.">
    <text>The voting system vendor shall provide all equipment that was submitted for qualification testing and is necessary for the evaluation agent to fully test all system functions. Equipment shall include:</text>
    <paragraph num="A.">
      <text>Optical scanners for precinct voting and central count optical scanners for absentee and provisional voting;</text>
    </paragraph>
    <paragraph num="B.">
      <text>Any voting equipment and assistive devices for use by voters with disabilities;</text>
    </paragraph>
    <paragraph num="C.">
      <text>Optical scan ballots for testing under COMAR 33.09.04.01C;</text>
    </paragraph>
    <paragraph num="D.">
      <text>Election management server software;</text>
    </paragraph>
    <paragraph num="E.">
      <text>All third-party software required to operate the system; and</text>
    </paragraph>
    <paragraph num="F.">
      <text>All necessary ancillary equipment.</text>
    </paragraph>
  </regulation>
  <annotations>
    <annotation type="Authority">Election Law Article, §§2-102(b)(4), 2-202(b), 9-102(b), and 11-309, Annotated Code of Maryland</annotation>
    <annotation type="History" subtype="Administrative History">Effective date:</annotation>
    <annotation type="History" subtype="Administrative History">Regulations .01—.07 adopted as an emergency provision effective February 1, 2000 (27:6 Md. R. 636); adopted permanently effective April 17, 2000 (27:7 Md. R. 708)</annotation>
    <annotation type="History" subtype="Administrative History">Regulation .01 amended effective August 19, 2013 (40:16 Md. R. 1346)</annotation>
    <annotation type="History" subtype="Administrative History">Regulation .02E amended effective August 19, 2013 (40:16 Md. R. 1346)</annotation>
    <annotation type="History" subtype="Administrative History">Regulation .04B, D amended effective August 19, 2013 (40:16 Md. R. 1346)</annotation>
    <annotation type="History" subtype="Administrative History">Regulation .05 amended effective August 19, 2013 (40:16 Md. R. 1346)</annotation>
    <annotation type="History" subtype="Administrative History">Regulation .05A amended effective December 23, 2013 (40:25 Md. R. 2073); April 27, 2026 (53:8 Md. R. 356)</annotation>
    <annotation type="History" subtype="Administrative History">Regulation .06B amended effective August 19, 2013 (40:16 Md. R. 1346)</annotation>
    <annotation type="History" subtype="Administrative History">Regulation .08 adopted effective August 19, 2013 (40:16 Md. R. 1346)</annotation>
  </annotations>
</chapter>