Can Anyone Find Out Who You Voted For?

Last updated 16 hours ago. Our resources are updated regularly but please keep in mind that links, programs, policies, and contact information do change.

A Michigan voter’s ballot can carry an identifying number until just before it is counted. For ballots with numbered stubs, an official checks the number against the voter’s application, removes the stub and then the voter feeds the ballot into the counting machine.

Removing the identifier is one way officials keep a vote secret. A public voter record may show that someone voted, but it does not contain the voter’s candidate choices. Yet ballot secrecy depends on more than leaving a name off the paper: researchers have shown how clues in some released ballot records can connect voters to their selections.

What a public voter record actually shows

A voter file may include party affiliation, the elections a person participated in and the method of voting; the election-by-election participation list is called voter history. That is an attendance record, not a transcript of the selections marked on the ballot.

Access depends on state law, and some voter information is available free or for purchase for political, election, scholarly, journalistic or governmental purposes. In North Carolina, the State Board of Elections’ Voter Search tool displays registration status, party affiliation, voter history, polling place, election districts and absentee ballot information.

California takes a different approach: its registration rolls are not available to the general public, although certain information can be released to candidates, ballot-measure committees, lawmakers and people with specified election-related or other authorized purposes. The California secretary of state says Social Security numbers, driver’s license numbers and signatures remain confidential even in those releases.

A party label can suggest a political preference, but it does not establish how the person voted in a particular race.

Identity is checked before the ballot is counted

At an in-person voting site, an electronic poll book helps officials verify that a person is authorized to vote and issue a ballot, as researchers at the National Institute of Standards and Technology describe. The eligibility check needs an identity; counting the voter’s choices does not need to publish that identity alongside them.

Michigan’s voting rule illustrates the separation: where a ballot has a numbered stub, officials record that number on the application to vote and issue a secrecy sleeve that conceals the marked choices. An official checks the stub number against the application, removes the numbered stub and then the voter deposits the ballot into the tabulator. The identifying check stays with the application; the detachable identifier is removed from the ballot before counting.

The Election Assistance Commission’s Voluntary Voting System Guidelines, version 2.0, require systems not to produce information that associates a voter’s identity with the voter’s choices. The guidelines also prohibit information in or attached to ballot records, such as file creation times, that can disclose the order in which votes were cast. These are voluntary federal testing standards except where a state requires adherence under its own law.

Washington’s mail-ballot process shows how identity and choices can travel together to the election office and then separate: officials check the signature on the return envelope against the registration record and credit the person for voting. The identifying outer envelope is then separated from the inner security envelope containing the ballot.

Signing a return envelope therefore serves a different job from signing the ballot itself. The useful privacy question is not merely whether a name or number appears somewhere in the packet, but whether it remains connected to the choices after processing.

Some ballots remain retrievable under restricted rules

North Carolina illustrates why secret and impossible for officials to retrieve are not interchangeable: its State Board of Elections identifies confidential retrievable-ballot numbers used on early-voting and absentee materials. The board’s guidance says these numbers could identify a voter to a particular voted ballot and must not be copied or retained by the public when associated with voter identity.

Under that North Carolina guidance, voted ballots and individual paper or electronic ballot records are confidential and may be accessed by election officials performing their duties. A court or elections board can also order access while adjudicating an election protest or investigating an alleged irregularity or violation.

Ask the local election office how its rules handle retrievable ballots and who may use the identifying information.

Ballot images and electronic records can leave clues

A cast-vote record is a machine-readable list of selections across some or all contests on a ballot; a ballot image is a digital scan of the ballot or a ballot page. Scanners can produce both types of records. Unlike the list of selections, an image also captures other marks and notations on the paper, including marks that could identify its voter.

The federal voting-system guidelines acknowledge that equipment cannot prevent a voter from self-identifying in a write-in field or another area of a ballot. For that reason, avoid adding a name, signature or identifying message to the ballot unless the official instructions require it.

Removing names from a record is not always enough: the National Institute of Standards and Technology’s research describes a privacy risk when poll-book sign-in times or order can be combined with corresponding scanner or voting-machine records. One record identifies the person, while the other identifies the choices; the shared sequence can supply the connection.

There is also a different risk in very small reporting groups: if everyone in a group made the same choice, a public voter file identifying the group’s members can reveal each person’s choice. A name need not appear on a ballot for unanimous results to disclose something about a named voter.

Researchers studying vote revelation in Maricopa County’s 2020 election found that releasing individual ballot records would reveal no vote choice for 99.83 percent of voters, compared with 99.95 percent under reporting by precinct and voting method.

That study excluded voluntary disclosure and possible identifying clues such as timestamps from its analysis. Its result therefore cannot be treated as a nationwide estimate of every way a vote might become known.

Georgia shows why ballot order matters

Braden Crimmins, Dhanya Narayanan and J. Alex Halderman of the University of Michigan, and Drew Springall of Auburn University, documented a flaw called DVSorder in Dominion’s ImageCast Precinct and ImageCast Evolution ballot scanners that could restore ballot order from random-looking identifiers.

Their 2024 paper reported that Dominion released a software update, but some localities continued publishing vulnerable data. That historical finding does not establish a particular locality’s present software or release practices.

The researchers describe DVSorder as a privacy flaw that cannot directly change votes or modify election results.

At the Georgia State Election Board meeting covered by an October 1, 2026 Associated Press report, the board adjourned without voting on a ballot-shuffling proposal from the Republican National Committee and Georgia Republican Party. The report described how restoring ballot order and combining it with other public information could match voters to specific ballots.

The DVSorder researchers say affected jurisdictions can prevent public exploitation by processing ballot-level records to remove clues to ballot order before releasing them, and that jurisdictions using other scanner models do not need to reduce transparency because of this flaw. The exposure depends on the equipment and the records released, so a problem documented in one system is not a claim that every voter’s ballot is publicly identifiable. The privacy safeguard needs to target the clues that identify voters, while preserving the public’s ability to examine how an election was counted.

Sharing a ballot and getting assistance change the situation

A voter can voluntarily disclose a ballot in California if doing so violates no other law, and the secretary of state’s guidance permits photographing and sharing a voter’s own ballot. California officials can still respond when ballot photography disrupts voting.

Other states have different rules: the National Conference of State Legislatures distinguishes bans on revealing a marked ballot from restrictions on using cameras inside polling places. Check the state’s rules before taking or posting a ballot photograph, including when voting by mail. A photo deliberately shared with another person also gives that person information that an ordinary voter-history file leaves out.

Under federal law, a voter who needs assistance because of blindness, disability or inability to read or write can choose a helper, except for the voter’s employer, an employer’s agent, or an officer or agent of the voter’s union. California law separately prohibits a person assisting a voter from disclosing information about how the ballot was marked.

Assistance is therefore not the same as permission to take over a voter’s decision or publicize the choices. If privacy while marking a ballot at home is a concern, ask the election office about private in-person voting or accessible ways to mark and return a ballot.

Where to turn about exposure or pressure

Federal voting law prohibits intimidation, threats, coercion and attempts at those acts against a person for voting or attempting to vote, and also protects people urging or helping someone vote. The Justice Department directs reports of threats against voters to the Federal Bureau of Investigation at tips.fbi.gov or 800-CALL-FBI. Its civil-rights reporting portal also accepts voting-rights concerns such as obstacles to casting a ballot or inadequate voting assistance.

USA.gov’s directory provides state and local election-office contacts. Ask what the public voter record shows, whether any ballot identifiers are retained and what rules protect those records.

People worried about exposure of their address may have a separate confidentiality option: California’s Safe at Home participants who meet eligibility requirements can register as confidential voters. California’s 15-day voter-registration deadline applies to confidential registration too: for the November 3, 2026 election, the cutoff is October 19, 2026, and later registration will not be confidential. California directs enrolled Safe at Home participants to contact the program at 877-322-5227 rather than use the ordinary online registration application.

If someone claims to have found a candidate choice, ask what record the claim rests on. A participation entry, a party label and an actual ballot require different explanations, and different responses when privacy is at stake.