Skip to main content    

An official website of the United States government

Here’s how you know

**Official websites use .gov**              A **.gov** website belongs to an official government organization in the United States.            

**Secure .gov websites use HTTPS**              A **lock** (  LockA locked padlock) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.            

https://www.nist.gov/itl/voting/test-assertions-vvsg-11-volume-1-section-785-september-23-2016

            -  Topics  -  All Topics 
-  Advanced communications 
-  Artificial intelligence 
-  Bioscience 
-  Buildings and construction 
-  Chemistry 
-  Climate 
-  Cybersecurity 
-  Electronics 
-  Energy 
-  Environment 
-  Fire 
-  Forensic science 
-  Health 
-  Information technology 
-  Infrastructure 
-  Manufacturing 
-  Materials 
-  Mathematics and statistics 
-  Metrology 
-  Nanotechnology 
-  Neutron research 
-  Performance excellence 
-  Physics 
-  Public safety 
-  Resilience 
-  Standards 
-  Transportation 
 
            -  Publications 
            -  Labs & Major Programs  -  Laboratories    -  Communications Technology Laboratory 
  -  Engineering Laboratory 
  -  Information Technology Laboratory 
  -  Material Measurement Laboratory 
  -  Physical Measurement Laboratory 
-  User Facilities    -  NIST Center for Neutron Research 
  -  CNST NanoFab 
-  Research Test Beds 
-  Research Projects 
-  Tools & Instruments 
-  Major Programs    -  Baldrige Performance Excellence Program 
  -  CHIPS for America Initiative 
  -  Manufacturing Extension Partnership (MEP) 
  -  Office of Advanced Manufacturing 
  -  Special Programs Office 
  -  Technology Partnerships Office 
 
            -  Services & Resources  -  Standards and Measurements    -  Calibration Services 
  -  Laboratory Accreditation (NVLAP) 
  -  Quality System 
  -  Standard Reference Materials (SRMs) 
  -  Standards.gov 
  -  Time Services 
  -  Office of Weights and Measures 
-  Software 
-  Data    -  Chemistry WebBook 
  -  National Vulnerability Database 
  -  Physical Reference Data 
  -  Standard Reference Data (SRD) 
-  Storefront 
-  License & Patents 
-  Computer Security Resource Center (CSRC) 
-  NIST Research Library 
 
            -  News & Events  -  News 
-  Events 
-  Blogs 
-  Feature Stories 
-  Awards 
-  Video Gallery 
-  Image Gallery 
-  Media Contacts 
 
            -  About NIST  -  About Us    -  Leadership 
  -  Organization Structure 
  -  Budget & Planning 
-  Contact Us 
-  Visit 
-  Careers    -  Student programs 
-  Work with NIST 
-  History    -  NIST Digital Archives 
  -  NIST Museum 
  -  NIST and the Nobel 
-  Educational Resources 
 

Information Technology Laboratory

## Voting

-  Research and Projects  Expand or Collapse    -  VVSG 
  -  TGDC 
  -  Test Labs 
  -  Accessibility and Human Factors 
  -  Election Security 
  -  Interoperability 
-  Events 
-  About Us 
-  History of Voting  Expand or Collapse    -  Archived Research Papers 
-  Contact Us 

# Test Assertions for VVSG 1.1, Volume 1, Section 7.8.5, September 23, 2016

## Share

Facebook

Linkedin

Twitter

Email

**VVSG 1.1, Vol 1, Requirement 7.8.5: Preserving Voter Privacy**

VVPAT records can be printed and stored by two different methods:
                  - Printed and stored on a continuous spool-to-spool paper roll where the voter views the paper record in a window
                  - Printed on separate pieces of paper, which are deposited in a secure receptacle.

If a requirement applies to only one method, that will be specified. Otherwise, the requirement applies to both.

a.  Voter privacy **shall** be preserved during the process of recording, verifying and auditing his or her ballot selections.
                  - DISCUSSION:  The privacy requirements from Section 3 also apply to voting equipment with VVPAT.

b.  When a VVPAT with a spool-to-spool continuous paper record is used, a means **shall** be provided to preserve the secrecy of the paper record of voter selections.

c.  When a VVPAT with a spool-to-spool continuous paper record is used, no record **shall** be maintained of which voters used which voting machine or the order in which they voted.

d.  The electronic and paper records **shall** be created and stored in ways that preserve the privacy of the voter.
                  - DISCUSSION:  For VVPAT systems that use separate pieces of paper for the record, this can be accomplished in various ways including shuffling the order of the records or other methods to separate the order of stored records.

e.  The privacy of voters whose paper records contain an alternative language **shall** be maintained.

f.  Unique identifiers **shall** not be displayed in a way that is easily memorable by the voter.
                  - DISCUSSION:  Unique identifiers on the paper record are displayed or formatted in such a way that they are not memorable to voters, such as by obscuring them in other characters

g.  Both paper rolls and paper record secure receptacles **shall** be controlled, protected, and preserved with the same security as a ballot box.

**Test Assertions**

**TA785a-1:** Voter privacy SHALL be preserved during the process of recording his or her ballot selections.

**TA785a-2:** Voter privacy SHALL be preserved during the process of verifying his or her ballot selections.

**TA785a-3:** Voter privacy SHALL be preserved during the process of auditing his or her ballot selections.

**TA785a-4:** For any implementation of the VVPAT, the VVPAT SHALL conform to the usability requirements of 3.2.3.

**TA785a-4-1:** For any implementation of the VVPAT, the VVPAT SHALL conform to the usability requirements of 3.2.3 that reference the ballot interface.

**TA785a-4-2:** For any implementation of the VVPAT, the VVPAT SHALL conform to the usability requirements of 3.2.3 that reference the cast vote record.

**TA785a-5:** For any implementation of the VVPAT, the VVPAT SHALL conform to the test assertions of 3.2.3.

**TA785a-5-1:** For any implementation of the VVPAT, the VVPAT SHALL conform to the test assertions of 3.2.3 that reference the ballot interface.

**TA785a-5-2:** For any implementation of the VVPAT, the VVPAT SHALL conform to the test assertions of 3.2.3 that reference the cast vote record.

**TA785a-6:** IF the voting system produces a paper record, THEN that record SHALL be protected from physical removal by the voter.

**TA785b-1:** IF a VVPAT with a spool-to-spool continuous paper record is used AND IF a voter makes ballot selections during a voting session, THEN at the beginning of the next voting session, ballot selections SHALL have original default values, including but not limited to, empty ballot selections.

**TA785c-1:** None (requirement is operational).

**TA785d-1:** When the electronic records are created the privacy of the voter SHALL be preserved.

**TA785d-2:** When the paper records are created the privacy of the voter SHALL be preserved.

**TA785d-3:** When the electronic records are stored the privacy of the voter SHALL be preserved.

**TA785d-4:** When the paper records are stored the privacy of the voter SHALL be preserved.

**TA785d-5:** IF the VVPAT system uses separate pieces of paper for the record THEN privacy MAY be accomplished by shuffling the order of the records.

**TA785d-6:** IF the VVPAT system uses separate pieces of paper for the record THEN privacy MAY be accomplished by various methods that separate the order of stored records.

**TA785e-1:** No test assertion.  This is an operational requirement.

**TA785f-1:** Unique identifiers SHALL be displayed in a representation that is NOT easily memorable by the voter.

**TA785f-2:** Unique identifiers MAY be obscured in other characters in order to make them NOT easily memorable to the voter. (from Discussion).

**TA785g-1:** Secure receptacles SHALL be provided for both paper rolls and paper records.

Information technologyVoting systems

### HEADQUARTERS

301-975-2000

Webmaster | Contact Us | Our Other Offices

TwitterFacebookLinkedInInstagramYouTubeGiphyRSS FeedMailing List

Feedback

            -  Site Privacy 
            -  Accessibility 
            -  Privacy Program 
            -  Copyrights 
            -  Vulnerability Disclosure 
            -  No Fear Act Policy 
            -  FOIA 
            -  Environmental Policy 
            -  Scientific Integrity 
            -  Information Quality Standards 
            -  Commerce.gov 
            -  Science.gov 
            -  USA.gov 
            -  Vote.gov