SB 1037 Arizona Senate · 57th Legislature - Second Regular Session

voting; equipment; internet; custody; violation

SB 1037 establishes new security requirements for voting equipment used in Arizona elections. It prohibits voting machines from having internet connectivity or remote access capabilities, mandates configuration to U.S. Department of Homeland Security cybersecurity standards, requires user tracking with unique credentials, and demands logging of all ballot changes while retaining election data for 22 months. The bill directly affects counties, cities, and voting machine vendors that operate or supply electronic voting systems for federal, state, or local elections. These provisions apply to all certified voting equipment used in Arizona’s election processes.

Issues: ✓ Technology

Bill status vetoed 4 of 5 stages cleared

Introduction

Dec 2025

Committee Review

Jan 2026

Senate Passage

Jun 2026

House Passage

May 2026

Vetoed

Jun 2026

Introduced Dec 19, 2025 Vetoed Jun 19, 2026

Maddy AI version diff · 2 comparisons

What changed between versions

House Engrossed Version (05/05/2026) → Senate Engrossed Version (02/23/2026) · 5 edits · Feb 23, 2026

MODERATE

The bill was converted from a House version to a Senate version, which significantly altered the security requirements for election equipment. The Senate version removes broad prohibitions on internet connectivity for voting machines and counting centers, replacing them with mandates to follow federal cybersecurity standards. It also adds specific rules requiring two non-partisan observers to be present when handling removable storage devices at counting centers.

Scope change

The bill's scope shifted from a total ban on internet-connected election equipment to a framework requiring adherence to federal cybersecurity standards and stricter physical custody controls for data storage.

REQUIREMENT

Replaced a blanket ban on internet connectivity for voting machines with a requirement to configure operating systems according to U.S. Department of Homeland Security cybersecurity standards.

Removed the prohibition on indirect internet connectivity for election management systems in counting centers, replacing it with a mandate to lock and log any accessible ports.

Added a requirement that two observers from different political parties must be present at all times when inserting, removing, or transporting removable storage devices containing election data.

ENFORCEMENT

Changed the penalty for violating counting center equipment rules from a 'negligent' violation to a standard violation.

DEFINITION

Deleted the specific definition of 'indirect internet connectivity' that previously included election management system gateways.

Floor votes · House May 5, 2026

How they voted

This bill passed the Senate by voice vote (no roll call recorded).

Full legislative history

Actions timeline

Total actions

Key actions

Committee

Amendments

Jun 19, 2026

Vetoed

Vetoed by Governor

executive

Jun 11, 2026

Upper · Passed

PASSED

upper

May 5, 2026

Lower · Passed

PASSED

lower

Apr 21, 2026

Lower · Passed

DPA

lower

Mar 18, 2026

Lower · Passed

DPA

lower

Feb 23, 2026

Upper · Passed

PASSED

upper

Feb 23, 2026

Upper · Passed

upper

Jan 14, 2026

Upper · Passed

upper

1 primary · 1 co-sponsor