Elec. Code, § 19205

A voting system shall comply with all of the following:

(a) No part of the voting system shall be connected to the internet at any time.

(b) No part of the voting system shall electronically receive or transmit election data through an exterior communication network, including the public telephone system, if the communication originates from or terminates at a polling place, satellite location, or counting center.

(c) (1) No part of the voting system shall receive or transmit wireless communications or wireless data transfers.

(2) A network connection to any device not directly used and necessary for voting system functions shall not be established. Communication by or with any component of the voting system by wireless or modem transmission at any time is prohibited. A component of the voting system, or any device with network connectivity to the voting system, shall not be connected to the internet, directly or indirectly, at any time.

(d) (1) The voting system shall be used in a configuration of parallel central election management systems separated by an air-gap.

(2) For purposes of this subdivision, “air-gap” includes all of the following:

(A) A permanent central system known to be running unaltered, certified software and firmware that is used solely to define elections and program voting equipment and memory cards.

(B) A physically isolated duplicate system, reformatted after every election to guard against the possibility of infection, that is used solely to read memory cards containing vote results, accumulate and tabulate those results, and produce reports.

(C) A separate computer dedicated solely to this purpose that is used to reformat all memory devices before they are connected to the permanent system again.