E
Election ObserversElection ProtocolsElectronic Voting LawsEmail VotingEnd-to-End Encryption
Show all topics →
Legal & Compliance

Electronic Voting Laws

Content

Electronic voting laws encompass the legal regulations, directives, and standards that govern the use of digital technology in elections. From EU-level data protection requirements to national legislation permitting or restricting online voting, understanding the legal framework is essential for any organization planning to conduct elections digitally.

What are electronic voting laws?

Electronic voting laws define the conditions under which digital voting is permitted, the technical and organizational requirements that must be met, and the legal status of electronically cast votes. These laws vary significantly between jurisdictions and apply differently to public political elections, corporate governance, and organizational voting.

At the European level, several legal instruments shape the e-voting landscape:

  • EU Charter of Fundamental Rights: Establishes the right to vote and stand for election
  • General Data Protection Regulation (GDPR): Sets requirements for processing voter data in GDPR-compliant voting systems
  • eIDAS Regulation: Governs electronic identification and trust services, relevant for voter authentication
  • EU Corporate Governance Directives: Encourage shareholder participation through electronic means

Council of Europe recommendations

The Council of Europe has issued specific recommendations on e-voting, most notably Recommendation CM/Rec(2017)5 on standards for e-voting. This recommendation addresses transparency and openness of the e-voting system, verifiability of the electoral process, accountability of the system operator, reliability and security of the system, and respect for ballot secrecy and voter privacy.

While not legally binding, these recommendations serve as an important reference for national legislation.

National e-voting legislation in Europe

European countries have taken different approaches to e-voting:

  • Estonia: The most advanced e-voting system in Europe, with legally binding internet voting in national elections since 2005
  • Switzerland: Pilot programs for online voting in cantonal and federal elections, with strict security requirements
  • Germany: The Federal Constitutional Court ruled in 2009 that e-voting must meet verifiability requirements, while organizational (non-public) elections can use online voting
  • Austria: Permits electronic voting for certain organizational elections, with specific requirements for association elections
  • France: Allows electronic voting for certain professional and organizational elections
NemoVote is designed to support organizations in conducting legally valid digital elections — with GDPR compliance, EU-based data hosting, and comprehensive election documentation.

For non-public elections — such as board elections, association votes, and shareholder meetings — the legal requirements are generally more permissive than for public political elections. Key requirements typically include authorization in the organization's bylaws, adequate notice to eligible voters, protection of ballot secrecy, proper documentation and election protocols, and data protection compliance.

Data protection and privacy laws

Data protection laws intersect significantly with e-voting regulation. Organizations conducting online elections must comply with the GDPR's requirements for lawful processing of voter data, data minimization principles, data retention limitations, voter rights regarding their personal data, and technical security measures including encryption.

The legal validity of online election results depends on compliance with applicable laws and organizational rules. Key factors include whether online voting is authorized by the governing documents, proper notice and invitation procedures, quorum and majority requirements being met, adequate documentation of the election process, and absence of legitimate challenges or complaints.

Certification and compliance standards

Some jurisdictions require or encourage certification of e-voting systems. Relevant standards include Common Criteria (ISO 15408) for IT security evaluation, the Council of Europe's e-voting standards, national certification schemes for electronic voting systems, and ISO 27001 for information security management. Certification provides organizations with assurance that the voting platform meets recognized security and reliability standards.

Liability and dispute resolution

When elections are conducted electronically, questions of liability arise in case of technical failures, security breaches, or procedural errors. Organizations should ensure their contracts with voting platform providers address liability for system failures, procedures for handling election challenges, dispute resolution mechanisms, and documentation requirements for legal proceedings.

The legal landscape for electronic voting continues to evolve. Trends include increasing acceptance of online voting for organizational elections, development of EU-level standards for cross-border electronic voting, growing emphasis on accessibility requirements, integration of electronic identity (eID) systems with voting platforms, and emerging regulations around the use of blockchain technology in elections.