Who Gets to Vote? Getting Voter Identity Verification Right in Online Elections

Online elections shift identity verification from a sign-in desk to a sequence of digital controls. For company secretaries, boards, committees, unions, HR teams, associations, clubs and member organisations across Australia and the Asia-Pacific, the question is not simply whether a voter can log in. It is whether the person voting is eligible, authenticated, entitled to one vote, and supported by an audit trail that can withstand scrutiny. Good verification protects the result, reduces disputes and gives members confidence that the process is fair.

It also requires a practical balance. Too little verification invites impersonation, duplicate voting and challenges to the outcome. Too much friction can exclude genuine voters, particularly people with limited connectivity, accessibility needs or limited digital confidence. The strongest approach is risk-based: match the level of assurance to the stakes of the ballot, the size and complexity of the electorate, and the governance obligations of the organisation.

The Register Comes First: Eligibility Before Authentication

Identity verification begins with the roll, not the login screen. Before an organisation can verify that a person is who they claim to be, it must know whether that person is entitled to vote in the specific election. For a company AGM, that may mean shareholders, proxies and corporate representatives. For a union or enterprise agreement ballot, it may mean members in particular classifications or bargaining units. For an association, club or committee, it may mean financial members, life members or delegates with different voting rights.

Eligibility data should be drawn from the organisation’s authoritative source and reconciled before credentials are issued. A secure digital ballot depends on clean membership, employee or shareholder records, clear cut-off dates and a documented process for resolving exceptions. Duplicate records, shared email addresses, outdated statuses and informal membership lists are common sources of risk. Unique identifiers should be used where possible, and email alone should not be treated as proof of identity.

One member, one vote is both a rule and a data quality requirement. The system should prevent multiple credentials from being used by the same eligible voter, while allowing legitimate exceptions such as joint members, corporate representatives or proxies where the rules permit them. If a member has lost access to a registered email address, there should be a controlled recovery process that does not create a bypass. Challenge windows, provisional eligibility decisions and evidence requirements should be agreed before voting opens. For higher-stakes ballots, an independent review of the roll and rules can add assurance, especially for enterprise agreement ballots, board elections and member votes where the outcome may be contested.

Authentication in Practice: Credentials, Devices and Risk Signals

Once eligibility is confirmed, authentication proves that the person using the credential is the intended voter. Practical methods include unique voting links, one-time passcodes sent by email or SMS, member portal single sign-on, and multi-factor authentication for higher-risk ballots. Knowledge-based questions such as date of birth or postcode can provide a secondary check, but they should not be relied on alone because personal information is often widely known. The right mix depends on the electorate, the sensitivity of the vote and the support resources available.

A risk-based model is usually more effective than a one-size-fits-all rule. A club committee election may only require a unique link tied to a verified member record. A listed company AGM involving proxy lodgement, shareholder categories and live poll voting may need stronger authentication and clearer separation between registration, proxy appointment and voting. A union enterprise agreement ballot may warrant multi-factor authentication, detailed eligibility checks and independent oversight because the result affects a large workforce. Higher assurance should be applied where impersonation or duplicate voting would materially damage trust.

Session security matters as much as the initial login. Systems should support rate limiting, lockouts after repeated failed attempts, device or session controls, and monitoring for unusual patterns. Geolocation and internet address checks can be useful risk signals, but they should be interpreted carefully: members travel, use shared networks, and live across Asia-Pacific time zones. Overly rigid location rules can disenfranchise legitimate voters. Accessibility is also part of identity assurance. Clear instructions, screen-reader compatibility, assisted support channels and alternative arrangements for people who cannot use the standard process help ensure that verification does not become exclusion. Privacy must be built into the design: collect only the identity data needed, secure it appropriately, define retention periods, and ensure service providers handle data consistently with the organisation’s privacy obligations.

Audit Trails, Privacy and Voter Confidence

Verification is only defensible if it leaves reliable evidence. An online election should maintain an audit trail of credential issue, authentication events, ballot activation, successful vote submission, duplicate attempts and support interventions. This does not mean recording how each person voted. The stronger design separates identity verification from vote secrecy: the system can confirm that an eligible voter authenticated and received a voting token, while the recorded ballot remains unlinked to the voter’s identity in the results. That separation is essential for confidence, especially in board, committee, union and member elections where privacy and impartiality are expected.

Organisations should agree in advance what evidence will be available to scrutineers, candidate representatives, auditors or the returning officer. Reports may include turnout, eligibility exceptions, failed authentication trends and a reconciliation of credentials issued against votes cast, provided these do not compromise ballot secrecy. Security testing, access controls and incident response plans should also be reviewed before the election, not only after a problem occurs. For high-stakes ballots, independent conduct and certified results give the board, committee or union leadership a clear basis for announcing the outcome and responding to challenges.

Consider a union conducting an enterprise agreement ballot across multiple worksites. The organisation needs a verified member roll, clear rules for disputed eligibility, secure credentials, support for members with changed contact details, and an audit trail that can answer questions without revealing individual votes. A listed company AGM has different pressures: shareholder identity, proxy appointments, corporate representatives and live poll voting may need to be reconciled within tight timeframes. An association or club may face joint memberships, family memberships and delegates with different voting entitlements. In each case, verify identity against a defined roll, authenticate the voter securely, protect the secrecy of the vote and document the process. Voter confidence also depends on communication: explain the verification steps, the help process and the expected timing. For company secretaries, HR teams and governance professionals, a practical checklist includes documenting the eligibility rules, cleaning the roll, testing the credential journey, confirming multi-factor or risk controls, arranging accessible support, reviewing privacy and retention settings, and agreeing the audit report before the election opens.

Mei-Ling Han

Born in Taipei, based in Melbourne, Mei-Ling is a certified yoga instructor and former fintech analyst. Her writing dances between cryptocurrency explainers and mindfulness essays, often in the same week. She unwinds by painting watercolor skylines and cataloging obscure tea varieties.