1. (a) A policy adopted under Section 620.003 may provide for the installation and use of a covered application to the extent necessary for:

   1. (1) providing law enforcement; or
   2. (2) developing or implementing information security measures.

2. (b) A policy allowing the installation and use of a covered application under Subsection (a) must require:

   1. (1) the use of measures to mitigate risks posed to this state during the use of the covered application; and
   2. (2) the documentation of those measures.

Added by Acts 2023, 88th Leg., R.S., Ch. 903 (S.B. 1893), Sec. 1, eff. June 14, 2023.