Centralised citizenship databases for voter verification: benefits and risks to federal democracy.

Centralised citizenship databases — such as the U.S. SAVE (Systematic Alien Verification for Entitlements) service, administered by USCIS under the Department of Homeland Security to verify immigration status and citizenship of applicants [1] — promise purer electoral rolls, but in federal polities they redistribute power over the franchise itself. Their worth depends less on the data than on the safeguards around it.

Benefits for electoral integrity

• Authenticated verification replaces self-declaration: SAVE lets federal, state, tribal and local agencies check status electronically against immigration records [2], reducing reliance on unverified forms.
• Serves a constitutional duty: Article 324 vests superintendence, direction and control of roll preparation in the Election Commission [3], and Section 21, Representation of the People Act, 1950 mandates preparation and revision of rolls [4] — purity of rolls is a legal obligation, not a political choice.
• Interoperability and economy: a single dataset curbs duplicate entries of migrant electors across districts and States, and shortens verification of genuine claimants.

Risks to federal democracy

• Privacy and proportionality: K.S. Puttaswamy v. Union of India (2017) made privacy a fundamental right, subject to tests of legality, necessity and proportionality [5]; bulk matching of citizenship data for electoral use strains all three.
• Wrongful exclusion: immigration databases hold records of entrants, not of the native-born. SAVE itself states that it does not determine eligibility [1], yet a "no match" read as "non-citizen" can delete a genuine voter.
• Weak data footing: in June 2026 a federal court invalidated the underlying systems-of-records notices, forcing SAVE to suspend SSN-based and bulk verification [1].
• Federal balance: rolls are administered locally; a Union-held database lets central executive data steer State practice.

Centralised verification is therefore legitimate as a checking tool, illegitimate as a deletion engine. The Indian model points the way: phased revision with house-to-house enumeration, a wide documentary basis and a claims-and-objections window with multiple safeguards for eligible electors [6]. Reasoned, name-wise notice before deletion, with the burden on the State rather than the voter, keeps such databases aligned with Article 324's promise of free and fair elections.