Ensuring secrecy of elections
[RT I, 24.05.2024, 1 – entry into force 03.06.2024]
(1) Electronic voting must be organised in such a manner that the principle of secrecy of the vote is respected atevery stage of the voting process, including after the electronic vote has been annulled.
(2) The voter application must encrypt the vote of a voter in such a manner that when the vote is transmitted itis not possible to see for whom the voter voted.
(3) The electronic voting system must ensure that, before electronic votes are counted, the personal data of thevoter are separated from the electronic vote in such a manner that it is not possible to identify the manifestation of intention of the voter.
(4) The electronic voting system processes and stores only the personal data necessary for the organisation ofthe elections.
(5) At least the following operations are logged in the electronic voting system during the electronic voting:
1) voter identification: the name and personal identification code of the voter, date and time of the start of voting, the internet protocol address, the electoral district of the voter, and the country of habitual residence corresponding to the internet protocol address;
2) when confirming and recording an electronic vote: the date and time of completion of voting, the issuer of the certificates and information on the validity of the certificates;
3) when verifying the validity of the electronic vote: the date and time of completion of the verification, the internet protocol address and the country of habitual residence corresponding to the internet protocol address.
(6) Logs are anonymised after the end of the electronic voting.
(7) Unanonymised logs are destroyed by the State Electoral Office, together with the electronic votes, the personal data of the voters contained in the electronic voting system and the vote-opening key for the electronic votes, within the time limit specified in subsection 2 of § 771of this Act.
(8) Anonymous logs are retained by the State Electoral Office. Anonymous logs may be used for scientific purposes.
(9) The electronic voting system must ensure that, if a voter has voted more than once, it is not possible for the voter to prove to anyone which electronic vote cast by them was taken into account.
(10) Electronic voting and vote counting must be organised in such a manner that it is not possible to establish a link between the voter and the opened vote.
(11) An information systems auditor must be present at the electronic vote count and integrity verification. [RT I, 24.05.2024, 1 – entry into force 03.06.2024]
