How did they get my voter information!?: Access and Use of Voter Registration Lists

Breakdown of UOCAVA numbers

There is a difference between general voter information that is readily available to the public in voter registration lists; and sensitive personal information that is protected by numerous safeguards.

The Help America Vote Act of 2002 requires the chief election official of each state to implement a “single, uniform, official, centralized, interactive computerized statewide voter registration list.” This list is to be “defined, maintained, and administered at the State level.”[1] The goal is to allow states to have a computerized list of voters. This allows state and local election officials immediate electronic access to  check the registration status of a voter. It also allows verification of voter information with other state, local and federal agencies; provides a means for list maintenance; and tracks certain appropriate voting histories.

Historically, these lists have been available for campaign purposes. But different states have different requirements for who can request a list of voters and what information that list includes.[2] Additionally, many states have specific Address Confidentiality Programs (ACP) to keep voter information confidential for certain classes of voters, such as victims of domestic violence, sexual assault or stalking. Some examples of state requirements for requesting a voter registration list include:

  • Alaska: Anyone can request a copy of the state voter registration list, which contains the names, addresses and party affiliations of all registered voters in the state. Voters may request in writing to keep their residential address confidential, if they provide a separate mailing address.[3]
  • Colorado: Voter registration lists are available to the public upon request and contain a voter’s full name, address, year of birth, political party and vote history. Information remains private for ACP participants and pre-registrants[4] (a procedure that allows individuals under 18 to register to vote so they are eligible to cast a ballot when they reach 18).
  • Massachusetts: State party committees, statewide candidate committees, state ballot question committees, the jury commissioner, adjutant general and any other individual, agency, or entity that the Secretary of State designates may request the list, which includes names and addresses. Information on ACP participants remains private.[5]
  • Idaho: Any person may request a voter registration list, which include voter name, address and precinct – excluding ACP participants.[6]

Thus far in 2020, there is no evidence that voter registration systems have been penetrated by foreign or domestic actors. The U.S. Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA), in conjunction with the FBI, has released a public alert about false claims of hacked voter information. The agencies believe the intention of these claims is to cast doubt of the legitimacy of U.S. elections.[7]

Importantly, that a voter registration system is experiencing an outage does not necessarily mean a voter registration information or other election system has been compromised.[8] In fact, there are many innocuous reasons such errors occur, including configuration errors and natural disasters. [9] Additionally, foreign and domestic cyber actors may make claims they have “hacked” these databases in order to undermine confidence in the November 3 election and U.S. election institutions. In reality, these actors merely have information that is publicly available.

Voter misinformation (false information) and disinformation (false information designed to mislead) campaigns by foreign and domestic actors have been and will continue to be an issue for U.S. election institutions. It is important that federal, state, and local election officials and voters continue to question the veracity of these campaigns and claims. State and local election officials in collaboration with federal agencies, such as CISA, work and train to conduct elections as safely, fairly and securely as possible.


[1] Help Americans Vote Act §303(a)(1)(A0(i)-§303(a)(1)(A)(viii)

[2] Access To and Use of Voter Registration Lists, National Conference of State Legislatures https://www.ncsl.org/research/elections-and-campaigns/access-to-and-use-of-voter-registration-lists.aspx

[3] AS §15.07.127 and §15.07.195

[4] Colo. Rev. Stat. §1-2-302, §24-30-2108, §1-2-227

[5] Mass. Gen. Laws Ch. 51 §47C, §37, §44

[6] Idaho Code §34-437, §34-437A, §19-5706

[7] False Claims of Hacked Voter Information Likely Intended to Cast Doubt on Legitimacy of U.S. Elections https://www.cisa.gov/publication/false-claims-hacked-voter-information-likely-intended-cast-doubt-legitimacy-us

[8] See CISA Cyber Threats to Voting Processes Could Slow but Not Prevent Voting, https://www.cisa.gov/publication/cyber-threats-voting-processes-could-slow-not-prevent-voting

[9] CISA #Protect2020 Rumor vs. Reality https://www.cisa.gov/rumorcontrol

Voter Registration Modernization in Colorado: Implications for UOCAVA voters and the EAVS Section B Data Standard Pilot

benefits of the ESB data standard

The ESB Data Standard Roundtrip Pilot

In June 2020, The Council of State Governments (CSG) Overseas Voting Initiative launched the first Elections Administration Voting Survey, Section B (ESB) Data Standard Pilot. Throughout the course of the pilot, election officials in three states — California, Colorado and Washington — will work closely with Overseas Voting Initiative staff to fully implement the ESB Data Standard in their local jurisdictions by March 2021.

Achieving full implementation will require election officials to develop an in-depth understanding of the standard’s conventions as well as the actions necessary to conform their jurisdiction’s existing data to the standard. The diversity among state processes of collecting and storing election data will bring about unique challenges as officials attempt to do so. These challenges may stem from jurisdictional variation in date formats, capitalization (e.g. some values entered as “mail” others as “Mail”) or country names (e.g. some entries spell out “Cote D’Ivoire” while others “Ivory Coast”), among others.

Colorado’s Progress Toward Full Implementation of the ESB Data Standard

Of the pilot’s participants, the Colorado Elections Division has uniquely positioned itself to overcome these challenges and fully implement the ESB Data Standard by March. This stems from the division’s previous involvement with the Federal Voting Assistance Program (FVAP) EAVS Section B Working Group as well as its efforts to modernize the state voter registration system.

In 2015, FVAP created the EAVS Section B Working Group. This group consisted of state and local election officials experienced in Uniformed and Overseas Citizens Absentee Voting Act (UOCAVA) voting who sought to both reduce the burden of EAVS, Section B reporting and enhance its overall utility. Among the Working Group’s 13 members was Hilary Rudy, Colorado deputy director of elections.

Not only was Rudy a staunch advocate of adopting the ESB Data Standard, but she was also among the first to implement the standard in her state’s election jurisdictions.* By 2018, election officials had not only established internal procedures for conforming EAVS Section B data to the standard but had also begun standardizing voters’ country codes and names according to United States Postal Service (USPS) guidelines.

Although the ESB Data Standard requires physical addresses to be formatted according to ISO 3166, Colorado’s adoption of USPS standards significantly reduces the time and effort necessary to ensure the validity of UOCAVA voters’ country data. This has, in part, allowed the state’s Elections Division to supply the CSG Overseas Voting Initiative with its first set of ESB standard-compliant data within one month of the pilot’s kickoff. As of late August 2020, this data set had passed one of two validations necessary to ensure its accuracy and validity.

Benefits of Colorado’s Address Standardization Beyond the ESB Data Standard

Colorado’s voter address standardization was initially intended to facilitate implementation of the ESB Data Standard; however, the benefits of this work have extended much further. According to Rudy, both election officials and UOCAVA voters alike have experienced significant improvements in the voting process as a result of these efforts.

Prior to standardization, the ability of local election officials to conduct outreach to UOCAVA voters was limited. If valid, active addresses could not be derived from a voter’s state records, the likelihood of an election official to successfully contact an overseas voter was slim. Upon adopting USPS address standards, the success rate of this outreach improved significantly.

With the threat of U.S. withdrawal from the Universal Postal Union in 2018 and the onset of the coronavirus pandemic in 2020, the ability of local election officials to acquire additional contact information became increasingly important. Upon obtaining this information, Colorado election officials would not only be able to successfully inform voters of any international mail delays, but also educate them on alternative voting options. Contingency plans could then be developed to help prevent disenfranchisement.

Through the Election Division’s outreach to overseas voters, Rudy and her colleagues also found that former UOCAVA voters often failed to update their registration status upon returning stateside.** In response, the Elections Division was able to add a checkbox to various state forms allowing these voters to indicate a change in their registration status. This addition has improved Colorado’s overall voter registration system as well as the accuracy of their EAVS Section B data.

Despite the demands of a tumultuous election year, Rudy and her colleagues have continued to prioritize the standardization of the voter registration system and the improvement of the overall voting experience in Colorado. Not only has the Elections Division successfully incorporated country name dropdown boxes into its online voter registration system, but it has also developed Colorado’s first statewide ballot tracking system. Officials anticipate full implementation of this system by the end of the year. Through these efforts, the Elections Division has demonstrated their commitment to both strengthening the state’s voting system and fostering confidence in its efficacy.


*For further information on the successes and impacts of these efforts, read FVAP’s 2018 research note Data Standardization and the Impact of Ballot Transmission Timing and Mode on UOCAVA Voting.

**For more information about the conduct of elections in Colorado, please visit https://www.sos.state.co.us/pubs/elections/main.html