Readable Is Not Auditable: The Design Choice Hidden Inside India's Voter Rolls

The Two Words That Decide Whether a Voter List Can Be Audited **Article

324 gives the Election Commission superintendence, direction and control over preparing electoral rolls. The text gives it the power; it is silent on the format**. That silence matters, because how a roll is published decides who can actually test it.

The rule as written:

everyone gets the roll Rules 11 and 22 of the Registration of Electors Rules, 1960 require the Electoral Registration Officer to give two free copies of the draft and final rolls to every party with an exclusively reserved symbol in the State.

The ECI's new Special Summary Revision directive repeats this. Each recognised party gets a hard copy and a soft copy in "readable PDF" format, without electors' photographs. The Congress calls this a victory for its demand for machine-readable rolls.

In 2025 Rahul Gandhi alleged fake entries in a segment of the Bangalore Central Lok Sabha constituency and the party argues that only searchable data can expose such patterns across hundreds of constituencies.

The rule as practised:

everyone gets the roll as a photograph Since a 4 January 2018 instruction, the ECI has shared digital rolls as image PDFs

• essentially pictures of printed pages. A person can read them. A computer cannot search them without manual typing or optical character recognition. The ECI's stated reason was to prevent bulk extraction and profiling of voters. The Supreme Court accepted that reasoning. In Kamal Nath v. ECI (2018) it held that the Election Manual's requirement of a roll "in text mode" did not mean a searchable PDF, so image PDFs were lawful. It also noted that anyone who wanted to search the rolls could convert them at their own effort. In 2025, hearing the SIR challenges, the court again raised concerns about privacy and data mining. So "readable" in the 2026 directive is ambiguous. It may mean a text-searchable file or simply a legible one. Nothing published so far settles which.

The gap:

auditability and privacy are both real The demand for searchable rolls is not frivolous. Detecting duplicate entries, mass additions or suspicious deletions across lakhs of names is practically impossible by eye. Yet a fully searchable national voter database, once shared freely, cannot be recalled.

It enables profiling by caste-linked surnames, locality and family size. Privacy law offers less cover than many assume. The DPDP Act, 2023 excludes personal data made public under a legal obligation, which arguably places published rolls outside it.

The real shield is the fundamental right to privacy recognised in Puttaswamy (2017), together with ECI policy.

The design answer The choice is not between image PDFs and open bulk downloads.

A third option exists:

• Tiered access: recognised parties get searchable data through an authenticated portal, not as freely circulating files.
• Logging and watermarking: every query traceable to a user.
• Purpose limitation: use restricted to roll verification, with penalties for misuse.
• ECI's own audit: published reports on duplicates and deletions for every constituency.