Voter Registration Data, Privacy, and Security
Domain 8 covers voter registration data: what is public, what must be withheld, and how records must be handled. Questions test redaction categories, confidentiality tied to agency registration, and security expectations for statewide lists.
Public, but not everything
Voter registration lists are public records available to candidates, parties, researchers, and the press for electoral and political purposes. States routinely withhold or redact full or partial Social Security numbers, driver's license numbers, dates of birth, signatures, personal contact information, and - under the NVRA - the identity of the agency through which a person registered. Many states restrict commercial use or require a request form and affidavit.
NVRA-specific confidentiality
Section 5 requires the registering agency's identity to stay confidential and information about a declination to be used only for registration purposes. Information collected by public assistance offices for eligibility purposes may not be repurposed into a voter file, and the Driver's Privacy Protection Act (18 U.S.C. §2721) separately limits reuse of motor-vehicle data, including data flowing from DMV registration transactions.
Security expectations
Statewide databases under HAVA need controlled access, audit trails, and role-based permissions; only authorized election officials may alter records. Voter records are retained while the voter remains on the rolls, while list-maintenance documentation must remain available for at least two years. Breach notification and vendor contracts fall to state law.
Worked example
A clerk emails a full extract - names, addresses, dates of birth, license numbers, and a column showing which voters registered at the SNAP office - to a campaign vendor. Analysis: over-disclosure. License numbers are DPPA-protected, the birth dates and agency column should be redacted under state law and Section 5, and the vendor should receive only the fields the state publishes.
Traps
Equating 'public record' with 'no redactions'; assuming the NVRA mandates full public disclosure; forgetting the agency-identity protection; ignoring state commercial-use limits on voter files.