Cybersecurity & PrivacyPublic AdministrationElections & Voting

The Postal Service Faces Voter-Data Concerns

A court stopped the front end; the data fight is separate.

Josh LynwoodFounder
Published
Read time
7 min
Updated
Share
Where Things Stand

One Order, Two Machines, Enjoined at Different Points

Executive Order 14399, signed March 31, 2026, directs two distinct machines: the Postal Service to gatekeep ballot delivery, and DHS with the Social Security Administration to compile "State Citizenship Lists" that define who is eligible. Two courts have already acted, at different points in the chain.

  • The Rulemaking. USPS published a proposed rule, "Ballot Mail for Federal Elections" (Federal Register 2026-10968), on June 2, 2026; the public comment period closes July 2, 2026, and the EO directs a final rule by late July.
  • The Scale. Roughly half of all ballots in the 2024 presidential election were cast by mail, and USPS processed more than 99 million ballots that cycle, so the rule reaches a large share of the 2026 electorate, not a niche.
  • The Data End, Contested. On June 21 a D.C. judge, Sooknanan, blocked DHS from using its expanded The Department of Homeland Security's Systematic Alien Verification for Entitlements system, a look-up tool originally built to check immigration status for benefit eligibility. system to flag and purge registered voters. On July 7 a Florida judge, Wetherell in the Northern District of Florida, ordered the same features reinstated for Florida, Ohio, Iowa and Indiana under a November 2025 settlement, writing that one of the orders has to give; DHS relaunched the database for those four states around July 13 while appealing Sooknanan’s order to the D.C. Circuit. The data end is now blocked in most of the country but running in four states, pending appeal.
  • The Delivery End, Blocked. On June 25 a Massachusetts judge blocked the USPS ballot-gatekeeping provisions for the suing jurisdictions.
  • The Framings. The litigants are predominantly Democratic-led states and voting-rights groups; the administration frames the order as citizenship verification. Both framings are attributed here rather than adjudicated.
Sources9See all 23
Is the federal voter database legal and secure?

Legality Is Geographic; Accuracy Is the Security Risk

On the first half of that question, the answer depends on where a voter is registered. A federal judge in Washington blocked DHS on June 21 from using its expanded SAVE system to screen and purge registered voters, on privacy-statute grounds. On July 7 a judge in the Northern District of Florida ordered the same features reinstated for Florida, Ohio, Iowa and Indiana under a November 2025 settlement, writing that one of the orders has to give. DHS relaunched the database for those four states around July 13 while appealing the Washington ruling to the D.C. Circuit. Two federal courts have reached opposite results on the same system, so the honest status is unlawful in most of the country and running in four states, pending appeal.

That split also leaves an operational question nobody has answered. The executive order was built as two halves that need each other: DHS and the Social Security Administration compile citizenship lists and transmit them to each state at least 60 days before a federal election, and the Postal Service enforces eligibility at the mailbox. With the delivery end enjoined for the suing jurisdictions and the data end live in four states, a state can now be handed a name marked as a potential noncitizen with no federal channel to act on it.

On security, the breach case is not the sharpest one. Merging names, dates of birth, Social Security numbers and driver's-license numbers for tens of millions of registered voters into one system does concentrate risk in a single target. The binding constraint, though, is accuracy. SAVE has a documented history of marking eligible citizens as potential noncitizens, and the court in Washington found that eligible voters had been wrongly caught. A false positive delivers the harm a breach would deliver, to the individual voter, with nobody having broken in. The paperwork that would ordinarily settle both halves is unresolved too: the system-of-records notice status is open and no privacy-impact assessment has been confirmed.

Sources4See all 23
Intersections

The ballot rule and the citizenship database are two ends of one mechanism

Elections & Voting. Section 3 of EO 14399 directs the Postmaster General to initiate rulemaking so USPS transmits ballots only to individuals enrolled on a state-specific "Mail-In and Absentee Participation List," with each ballot envelope carrying a unique Intelligent Mail barcode.

Cybersecurity & Privacy. Section 2 directs DHS and SSA to compile and transmit citizenship lists to each state at least 60 days before federal elections; the database decides eligibility, the Postal Service enforces it at the mailbox, and neither works without the other.

What would make this wrong

USPS publishes a final rule and it takes effect without any DHS or SSA citizenship transmission under section 2. The delivery end would stand on its own authority, not as one end of a shared mechanism.

Open question

On the data side: with SAVE running in four states and the postal rule enjoined, what does a state do with a citizenship flag, and under whose authority?

Sources3See all 23
The Weave

The Weave maps a single development across domains and across time. Each row follows one domain from where things stand now through the next eighteen months, and expands for the reasoning behind that trajectory.

Wiiver
SECTOR / DOMAINclick a domain to expand
As It Standsthe current status
Immediate0–6 months
Near-Term6–18 months
Technology + Engineering
A merged DHS and SSA database holds names, birth dates and Social Security numbers for tens of millions of voters.
Database as attack surface
Centralizing names, birth dates, Social Security and driver's-license numbers in one merged DHS/SSA/SAVE system concentrates breach risk.
Data-quality false flags
The D.C. court found eligible voters wrongly flagged among more than 67 million checked through SAVE, which has a documented history of such errors.
Government + Policy
The rule would turn USPS from a neutral carrier of election mail into the gatekeeper of who receives a ballot.
USPS role redefined
The rule would convert USPS into an eligibility gatekeeper running a national ballot-tracking portal, a role change separate from the legal merits.
Unfunded compliance burden
The rule loads new portal-registration, list-submission, and envelope-standard work onto state and local election offices without dedicated funding.
About half of 2024 presidential ballots were cast by mail. The USPS gatekeeping rule is blocked and on appeal.
Delivery rule enjoined, not dead
The USPS gatekeeping provisions are blocked for the 23 states plus D.C. that sued, but the injunction is jurisdiction-limited and the EO still orders a final rule by late July.
Compliance vs. refusal split
States divide into those submitting voter lists to the USPS portal and those refusing, producing an uneven ballot-access map heading into November.
Two courts blocked the order on different grounds: privacy statutes in D.C., separation of powers in Massachusetts.
Separation-of-powers holding
The Massachusetts court grounded its block in the Elections Clause and separation of powers, finding USPS has no congressional delegation to control mail-in voting.
Two theories, two courts
The D.C. and Massachusetts rulings rest on different bases, Privacy Act/APA versus Elections Clause, so an appeal could split, affirming one end and reversing the other.
wiiver.co · 4 impacted domains shownWiiverv1 · June 24, 2026
Looking Forward

November Turns on the Appeals, Not on Any Single Ruling

The order's status through November turns on a handful of dated, checkable events rather than on any single ruling. The delivery end is enjoined for the suing states and the data end is blocked on privacy grounds, so the next moves sit with USPS, the agencies and the appellate courts.

  • The Rulemaking Clock. Whether the USPS comment period closes July 2 as scheduled and a final rule issues by the EO's late-July deadline.
  • The Appeals. The DOJ has appealed the Talwani ruling to the First Circuit, and on July 7, 2026 Judge Talwani denied its request to stay her injunction, so the delivery-end block holds while that appeal proceeds (per Talking Points Memo); USPS has also appealed and sought a stay of Judge Sullivan's July 1 nationwide block (per Democracy Docket). What remains open is whether either appeal reaches the Supreme Court before November.
  • Injunction Scope. Whether the injunctions stay limited to the suing jurisdictions or expand.
  • The Paperwork. The status of the DHS/SSA system-of-records notice and whether any new privacy-impact assessment is published.
  • State Compliance. Whether more states comply with, or refuse, the federal voter-data requests.
Sources1See all 23

Every issue

  1. 01Intersection of the week
  2. 02Impact of the week
  3. 03The week in review

Wiiver Weekly

One free email, Saturdays at 7:00 AM ET.

Unsubscribe anytime.

Sources and Verification
6 of the 23 sources cited here are primaryfilings, opinions, statutes and agency releases read directly
Primary sources6
Secondary sources, by sector17
Government + Policy17
v2 · Reviewed by Josh Lynwood · June 24, 2026
Corrections & updates
Jul 5, 2026Update: On July 1, 2026, Judge Emmet Sullivan (D.D.C.) blocked the USPS mail-ballot rule nationwide, finding it breached a 2021 NAACP-USPS settlement, broader than Talwani's suing-states-only block.
Jul 5, 2026Update: The DOJ appealed Talwani's June 25 ruling to the 1st Circuit and asked the district court to stay the injunction (sought by early July), resolving the piece's forecast that the appeals would move.
Jul 8, 2026Update: On July 7, 2026, Judge Talwani denied the DOJ's stay of her June 25 injunction; the block holds pending 1st Circuit appeal, and USPS appealed Sullivan's block.
Errors are corrected with a visible, dated note. Nothing is quietly changed.
Back to top