Georgia election officials are restricting access to some ballot records and working to scramble electronic files before release as a known software flaw raises renewed concerns that a voter’s identity could be matched to a cast ballot. The vulnerability does not change votes or call reported results into question, but security researchers say it can expose how an individual voted when several public records are combined.
The issue centers on the statewide touchscreen system. Voters make selections on ballot-marking devices, review a printed paper ballot and feed it into a scanner. The scanner creates an electronic ballot image and cast-vote record. Those records appear randomized, but researchers found that predictable identifiers can be used to reconstruct the order in which ballots were scanned. When that sequence is combined with voter check-in records and other data, it can narrow or reveal which ballot belongs to which voter.
The practical risk has become more immediate because common artificial-intelligence tools can perform the technical work. Princeton researcher Max Springer tested public data from Georgia’s May primary and reported that an AI assistant could reverse the shuffling and help connect ballots with voters. The Associated Press reported that the method matched most ballots in some examined datasets after scanner audit logs and precinct check-in files were added.
Georgia law sets a stricter standard than merely making linkage difficult. The state’s requirements for electronic ballot markers say they must permit voting in “absolute secrecy” so no person can know another voter’s choices, except when legally assisting that voter. Ballot secrecy is also protected by the Georgia Constitution. The concern is privacy, coercion and potential legal exposure—not evidence that anyone altered a ballot or tabulation.
The Secretary of State’s office has told counties to refer certain open-records requests to the state. Officials plan to black out problematic information, withhold some documents and have a vendor scramble the original order of ballot images and cast-vote records before release. Gabriel Sterling, a senior official in the office, has argued that criminal penalties for disclosing a voter’s choices provide a deterrent. A proposed State Election Board rule requiring installation of the manufacturer’s software update failed in August after agency counsel said the update was not state-certified, would take months to deploy and lacked legislative funding.
Election-security advocates say access controls manage who can see traceable data but do not remove the traceability itself. In an August technical FAQ, the Coalition for Good Governance argued that redacting the record-ID column may still leave enough information to reconstruct order and that shuffling paper ballots after scanning comes too late. The group favors a tested software patch or operational changes that break the connection before scanning.
The U.S. Election Assistance Commission says its current Voluntary Voting System Guidelines 2.0 test voting systems for security, accessibility and basic functionality. Existing systems certified under older standards may remain in service unless state law requires replacement, so certification alone does not resolve Georgia’s immediate problem.
For voters, nothing about the issue changes where or how to cast a ballot. The unresolved question is institutional: whether the state’s interim controls will keep sensitive records from being reconstructed through the November election, or whether Georgia needs a software or process change that makes reconstruction impossible at the source.
