Schedule A1A, Part 1, paragraph 6

In relation to the electronic voting system, the scrutineer must— ensure that the system complies with the security requirements, and take such measures as are appropriate for achieving the security standards. The security requirements are— that a person cannot access— the electronic voting platform without a voting access method or the scrutineer’s authorisation; any other aspect of the electronic voting system without the scrutineer’s authorisation; that a person who is authorised to access the electronic voting system can only access the system so far as is necessary for the person’s role in relation to the ballot; that a person cannot modify data stored as part of the electronic voting system without the scrutineer’s authorisation; that copies of the data stored as part of the electronic voting system are regularly made. The security standards are— that the electronic voting system is equipped with up-to-date software which protects against malware; that the electronic voting system is resistant to commonly-used methods for breaking encryption or forcing access to the system; that the electronic voting system is operating throughout the duration of the ballot. Throughout the duration of the ballot— the scrutineer must ensure that the electronic voting system is monitored for instances of— unauthorised access; unauthorised modification of data; unusual voting patterns; other security compromises, and any such instances must be recorded by the scrutineer. The scrutineer must ensure that the following requirements are satisfied in relation to the server which hosts the electronic voting platform— the server must be protected at all times by physical security; a person must not be able to access the server without the authorisation of the owner of the server; there must be a timestamped record of physical and digital attempts to access the server. The scrutineer must, throughout the duration of the ballot, ensure that support in relation to the operation of the electronic voting platform is made available for persons who are entitled to vote in the ballot. In this paragraph— “electronic voting system” means— the electronic voting platform, the databases referred to in paragraph 8(3), and any other software which the scrutineer intends to use for the purpose of carrying out the ballot; “malware” means software designed to disrupt, damage, or gain unauthorised access to computer networks and systems.

← 2 · All articles · 1 →

Source: legislation.gov.uk · retrieved 2026-09-04