A divided 2-1 federal appeals panel on Friday kept a nationwide injunction in place against using the federal SAVE citizenship database to screen state voter rolls, denying the Trump administration emergency relief less than two months before the November 3 midterm elections. Chief Judge Sri Srinivasan and Judge Robert Wilkins formed the majority, while Judge Gregory Katsas dissented, according to the new ruling report.

The decision leaves intact a June order that dismantled the expanded version of the Systematic Alien Verification for Entitlements system, known as SAVE. That lower-court judgment found that federal agencies unlawfully combined Social Security and immigration records, then exposed results to state users for election administration. The appeals panel did not finally resolve the administration's merits appeal. It refused to suspend the judgment while that appeal proceeds, preserving the status quo during a compressed election calendar.

The immediate consequence is narrower than either side's political rhetoric. States remain responsible for maintaining accurate voter lists under federal and state law, and noncitizens remain barred from voting in federal elections. What is blocked is a particular federal architecture: bulk voter checks through an expanded database that includes records on natural-born citizens and can be queried with Social Security numbers. The ruling therefore turns on how government may repurpose personal data, not on whether eligibility can ever be verified.

The Injunction Survives an Emergency Test

U.S. District Judge Sparkle Sooknanan's 75-page opinion granted summary judgment to the League of Women Voters, the Electronic Privacy Information Center and individual naturalized citizens. She concluded that the modified SAVE system violated the Social Security Act's confidentiality rule for Social Security numbers and related records. She also found violations of the Privacy Act and the Administrative Procedure Act, including defects in public notice and agency reasoning.

The government asked the D.C. Circuit to stay that judgment, a form of exceptional relief that normally requires a strong showing of likely success, irreparable harm and favorable equities. The panel's rejection means the government failed to secure permission to operate the system during appellate review; it does not prevent the Justice Department from continuing the appeal or seeking emergency relief from the Supreme Court. Nor does the order itself settle every disputed statutory interpretation for future systems built with different data or safeguards.

A second federal case complicates implementation. In July, a Florida judge ordered DHS to restore enhanced SAVE access promised in settlements with Florida, Ohio, Iowa and Indiana, expressly disagreeing with the D.C. court's reading. That conflict produced dueling commands over the same platform. Friday's appellate action strengthens the D.C. injunction but does not erase the underlying disagreement, which could accelerate Supreme Court review.

SAVE Moved From Benefits to Ballots

SAVE was built to help government agencies verify immigration or citizenship status before granting benefits and licenses. The 2025 overhaul changed its scale and purpose. It added access to Social Security Administration records, brought natural-born citizens into the searchable universe, made searches free and allowed batches based on combinations including name, date of birth and Social Security number. Those changes turned a case-by-case benefits tool into potential infrastructure for statewide election screening.

At least 25 states used the revised service after April 2025, and officials submitted at least 67 million voter-registration records, according to detailed reporting on the district ruling. A database result was not formally a cancellation order. State and local election officials made the list-maintenance decisions. Yet the system materially shaped who received demands for more proof and whose registration could be placed at risk.

The district record showed why that distinction can be thin in practice. Four naturalized citizens with inaccurate Social Security records were asked to confirm citizenship after Texas used modified SAVE; the court said they faced revocation if they did not respond. In Travis County, Texas acknowledged that an independent review found 25 percent of apparent noncitizen matches were people who had already established U.S. citizenship. Those examples do not measure a national error rate, but they establish that a match can be wrong in a consequential way.

The Administration Claims a Broader Mandate

President Donald Trump's March 2026 order directed federal agencies to assemble and provide states with data for citizenship verification, building on a 2025 election order. The administration describes the project as enforcement of the constitutional and statutory rule that only citizens may vote in federal elections. Supporters also argue that a nationwide data source can expose registrations that fragmented state records might miss.

The Justice Department developed that position in a May 12 legal opinion. The Office of Legal Counsel said the Civil Rights Division may demand statewide voter lists under the Civil Rights Act and share them with DHS to support ordinary list maintenance under the National Voter Registration Act and Help America Vote Act. The opinion acknowledged that cross-checking could yield immigration consequences, while stating that the program's represented purpose was election administration.

That theory is being pursued beyond SAVE. By February, DOJ said it had sued 29 states and the District of Columbia for refusing to provide complete voter-registration lists, a total disclosed in an official announcement. Federal law does require states to maintain computerized rolls and conduct reasonable list maintenance. The disputed step is whether those duties authorize the federal government to collect full state files and combine them with protected agency records on this scale.

Privacy and Accuracy Converge

The district court treated privacy and voting injuries as connected. Section 20507 of the Social Security Act makes specified Social Security numbers and related records confidential, and the judge found no election-law exception authorizing the challenged disclosures. She also rejected the argument that statutes establishing immigration-status verification for benefits implicitly displaced later privacy protections. The benefits provisions, she wrote, concern applicants who identify themselves as noncitizens and use immigration file numbers, not mass queries of voter rolls.

Accuracy creates a separate policy problem. Immigration databases can correctly record that a person was once a noncitizen, while a Social Security record may not promptly reflect later naturalization. A broad search can therefore return a plausible but stale result. Removing a lawful voter on that basis is a constitutional harm; leaving an ineligible record untouched is an integrity failure. A defensible system must distinguish those errors before an official notice transfers the burden to the voter.

The scale magnifies even uncommon mistakes. With tens of millions of records searched, a low false-match rate can produce thousands of cases needing individual review. Yet neither the government nor its critics have supplied a comprehensive, independently audited national result showing how many searches identified current noncitizens, how many were false positives and how many led to lawful cancellations. A new California lawsuit illustrates the gap: federal officials claim more than 250,000 possible noncitizen registrations nationwide, while California officials dispute the underlying data and methodology.

Election Timing Raises the Cost of Uncertainty

Friday's ruling arrives after primary elections but before the final stretch of registration, absentee-ballot distribution and list maintenance for November. Election officials generally need stable procedures, trained staff and time to investigate discrepancies. Deploying a disputed federal matching system now could generate notices and litigation near voting deadlines; withholding it could prevent states from using a tool they say improves their rolls. The panel left the first risk in place as the controlling legal concern.

Existing safeguards still operate. States can use death records, address changes, returned mail, motor-vehicle data and individualized eligibility investigations, subject to federal protections governing notice, uniformity and the timing of systematic removals. DOJ can enforce the NVRA, and prosecutors can pursue actual unlawful voting. The injunction does not freeze voter files; it denies agencies authority to use this disputed combination of Social Security and DHS data.

The next decisive step may come from the Supreme Court or from full appellate consideration of the merits. Congress could also clarify what voter-list data federal agencies may obtain, how citizenship records may be shared and what audit and correction process must precede state action. Until then, SAVE exposes a larger administrative-law question: whether a legitimate enforcement objective can justify turning records collected for one public program into a nationwide decision system for another. The appeals court's answer for this election is that the government has not yet made that case.