(a) The secretary of state shall adopt rules defining classes of protected election data and establishing best practices for identifying and reducing risk to the electronic use, storage, and transmission of election data and the security of election systems.
(b) The secretary of state shall offer training on best practices:
(1) on an annual basis, to all appropriate personnel in the secretary of state's office; and
(2) on request, to county election officers in this state.
(c) If the secretary of state becomes aware of a breach of cybersecurity that impacts election data, the secretary shall immediately notify the members of the standing committees of each house of the legislature with jurisdiction over elections.