Can Anyone Find Out Who You Voted For?

Last updated 2 weeks ago. Our resources are updated regularly but please keep in mind that links, programs, policies, and contact information do change.

A public voter record can show that a person voted, but never who the person voted for. The record may also list the voter’s party and the method of voting, and who can see it depends on state law.

Procedures in states such as Michigan and Washington separate a voter’s identity from the ballot before it is counted. Small gaps remain. A study of Maricopa County, Arizona’s 2020 election shows why. Anonymous ballot records can share a precinct, ballot type and voting method with public voter records; if every voter in that group chose the same candidate, the choice can be linked to each voter. The Maricopa study estimated that releasing those records would reveal no vote choice for 99.83 percent of voters, leaving a small minority whose choices could be deduced. Separately, researchers found a flaw in some ballot scanners that could, under some circumstances, let members of the public identify other people’s ballots.

What a public voter record actually shows

A voter file may include party affiliation, the elections a person participated in and the method of voting; the election-by-election participation list is called voter history. That is an attendance record, not a transcript of the selections marked on the ballot.

Access depends on state law, and some voter information is available free or for purchase for political, election, scholarly, journalistic or governmental purposes. In North Carolina, the State Board of Elections’ Voter Search tool displays registration status, party affiliation, voter history, polling place, election districts and absentee ballot information.

California takes a different approach: its registration rolls are not available to the general public, although certain information can be released to candidates, ballot-measure committees, lawmakers and people with specified election-related or other authorized purposes. The California secretary of state says Social Security numbers, driver’s license numbers and signatures remain confidential even in those releases.

A party label can suggest a political preference, but it does not establish how the person voted in a particular race.

Identity is checked before the ballot is counted

At an in-person voting site, an electronic poll book, where voters sign in, helps officials verify that a person is authorized to vote and issue a ballot, as researchers at the National Institute of Standards and Technology describe. Checking eligibility requires knowing who the voter is; counting the ballot does not.

Michigan’s voting rule illustrates the separation: where a ballot has a numbered stub, officials record that number on the application to vote and issue a secrecy sleeve that conceals the marked choices. An official checks the stub number against the application, removes the numbered stub and then the voter deposits the ballot into the tabulator, the machine that counts it. The number that could tie the ballot to the voter is gone before the ballot is counted.

Washington’s mail-ballot process shows how identity and choices can travel together to the election office and then separate: officials check the signature on the return envelope against the registration record and credit the person for voting. The identifying outer envelope is then separated from the inner security envelope containing the ballot.

What matters for privacy is not whether a name or number appears somewhere in the packet, but whether it stays connected to the choices after processing.

The Election Assistance Commission’s Voluntary Voting System Guidelines, version 2.0, require systems not to produce information that associates a voter’s identity with the voter’s choices. The guidelines also prohibit information in or attached to ballot records, such as file creation times, that can disclose the order in which votes were cast. These are voluntary federal testing standards except where a state requires adherence under its own law.

Some ballots remain retrievable under restricted rules

North Carolina uses numbers that can tie a voted ballot to its voter: its State Board of Elections describes retrievable-ballot ID numbers that appear on early-voting applications and absentee voting materials. For that reason, the board’s guidance says, the numbers must not be copied or retained by the public when associated with a voter’s identity.

The North Carolina board says those numbers let officials retrieve a ballot and leave it uncounted after a voter challenge, such as when a voter dies before Election Day or votes twice; they also allow retrieval after a successful election protest.

Under that North Carolina guidance, voted ballots and individual paper or electronic ballot records are confidential and may be accessed by election officials performing their duties. A court or elections board can also order access while adjudicating an election protest or investigating an alleged irregularity or violation.

Ballot images and electronic records can leave clues

A cast-vote record is a machine-readable list of selections across some or all contests on a ballot; a ballot image is a digital scan of the ballot or a ballot page. Scanners can produce both types of records. Unlike the list of selections, an image also captures other marks and notations on the paper, including marks that could identify its voter.

The federal voting-system guidelines acknowledge that equipment cannot prevent a voter from self-identifying in a write-in field or another area of a ballot. For that reason, avoid adding a name, signature or identifying message to the ballot unless the official instructions require it.

Removing names from a record is not always enough: the National Institute of Standards and Technology’s research describes a privacy risk when poll-book sign-in times or order can be combined with corresponding scanner or voting-machine records. One record names the person and the other holds the choices; the matching order can connect them.

There is also a different risk when results are reported for very small groups, such as the in-person voters in one precinct: if everyone in a group made the same choice, a public voter file identifying the group’s members can reveal each person’s choice.

Researchers studying Maricopa County, Arizona’s 2020 election found that releasing a copy of each anonymous ballot would reveal no vote choice for 99.83 percent of voters, compared with 99.95 percent under the county’s existing practice of reporting totals by precinct and voting method. The exposure was overwhelmingly concentrated among a few voters who cast provisional or federal-only ballots.

A provisional ballot is kept separate when a voter’s eligibility cannot be verified and is counted only after officials confirm eligibility and that the person has not already voted. An Arizona federal-only voter may vote for President, U.S. Senator and U.S. House members, but not in state or local elections, because the required citizenship or residency documentation was not provided or verified.

That study excluded voluntary disclosure and possible identifying clues such as timestamps from its analysis. Its result therefore cannot be treated as a nationwide estimate of every way a vote might become known.

Georgia shows why ballot order matters

Georgia’s voting equipment has a software flaw that can allow voters to be matched to their ballots after the ballots are cast, The Associated Press reported October 1, 2026. The flaw lets ballots be put back in the order they were cast, AP reported, citing researchers who discovered it in 2022. Using other public data, someone could then work out the order in which people voted and match voters to specific ballots.

For the November 2026 election, Georgia counties continue using Dominion’s ImageCast Precinct scanners, according to election-technology group Verified Voting. The researchers’ 2024 DVSorder paper identifies Georgia’s statewide use of vulnerable scanners and its decision to defer a software upgrade until after the 2024 presidential election.

The Republican National Committee and the Georgia Republican Party asked the State Election Board to require county election officials to collect and shuffle ballots at polling sites before they are cast. That, the two groups said, would keep anyone from linking voters to their ballots through the time each vote was cast. Two Republican board members criticized the proposal; one, Janelle King, said it would burden county election officials, who might have to hire more poll workers, and raised concerns that ballots could fall out during shuffling and go uncounted. The board adjourned without voting on the proposal.

AP reported September 14, 2026, that a lawyer for the secretary of state’s office said the update lacked state certification, would take months to install and had not received legislative funding. Georgia Public Broadcasting reported October 2, 2026, that the election board had sent September 30 letters asking federal officials to compel a software update before the election. The report said the secretary of state’s funding requests had not been approved; experts warned that changes close to voting could introduce risks.

In October 2022, Braden Crimmins, Dhanya Narayanan and J. Alex Halderman of the University of Michigan, and Drew Springall of Auburn University, published details of a flaw they call DVSorder in Dominion’s ImageCast Precinct and ImageCast Evolution ballot scanners, which are used in parts of 21 states. The scanners label ballots with random-looking identifiers, but the flaw lets someone work out the order in which ballots were cast. The researchers describe DVSorder as a privacy flaw that cannot directly change votes or modify election results.

The researchers’ disclosure website lists jurisdictions that appeared to publish vulnerable data in Alaska, Arizona, California, Georgia, Iowa, Michigan, New Jersey, New Mexico, Ohio, Tennessee and Wisconsin.

Their 2024 paper reported that Dominion released a software update, but some localities continued publishing vulnerable data. That finding does not show what software or release practices any particular locality uses today.

The DVSorder researchers say localities that use the two scanner models can keep the public from exploiting the flaw by taking specific steps to “sanitize” data on individual ballots before publishing it. Jurisdictions using other scanner models, they say, do not need to reduce transparency because of this flaw. The exposure depends on the equipment and the records released, so a problem documented in one system is not a claim that every voter’s ballot is publicly identifiable.

Sharing a ballot and getting assistance change the situation

A voter can voluntarily disclose a ballot in California if doing so violates no other law, and the secretary of state’s guidance permits photographing and sharing a voter’s own ballot. California officials can still respond when ballot photography disrupts voting.

Other states have different rules: the National Conference of State Legislatures distinguishes bans on revealing a marked ballot from restrictions on using cameras inside polling places. Check the state’s rules before taking or posting a ballot photograph, including when voting by mail. A shared photo shows what no voter record does: the choices themselves.

Under federal law, a voter who needs assistance because of blindness, disability or inability to read or write can choose a helper, except for the voter’s employer, an employer’s agent, or an officer or agent of the voter’s union. California law separately prohibits a person assisting a voter from disclosing information about how the ballot was marked.

If privacy while marking a ballot at home is a concern, ask the election office about private in-person voting or accessible ways to mark and return a ballot.

Where to turn about exposure or pressure

Federal voting law prohibits intimidation, threats, coercion and attempts at those acts against a person for voting or attempting to vote, and also protects people urging or helping someone vote. The Justice Department directs reports of threats against voters to the Federal Bureau of Investigation at tips.fbi.gov or 800-CALL-FBI. Its civil-rights reporting portal also accepts voting-rights concerns such as obstacles to casting a ballot or inadequate voting assistance.

USA.gov’s directory provides state and local election-office contacts. Ask what the public voter record shows, whether any ballot identifiers are retained and what rules protect those records.

People worried about exposure of their address may have a separate option: in some states, certain voters can ask that their registration information be kept confidential for safety reasons. In California, Safe at Home participants who meet eligibility requirements can register as confidential voters. California’s 15-day voter-registration deadline applies to confidential registration too: for the November 3, 2026 election, the cutoff is October 19, 2026, and later registration will not be confidential. California directs enrolled Safe at Home participants to contact the program at 877-322-5227 rather than use the ordinary online registration application.

If someone claims to have found a candidate choice, ask what record the claim rests on. A record that someone voted, or a party label, is not a ballot.