Schedule A1A, Part 1, paragraph 8

The scrutineer must store such of the information specified in sub-paragraph (2) as the scrutineer possesses— in secure databases, and in a manner which enables the accurate counting of votes and the calculation of the result of the ballot. The information is— the unique identifiers generated in accordance with paragraph 4, relevant personal information, voting information, and voting access method information. The scrutineer must maintain two separate databases as follows— a database which contains— the unique identifiers generated in accordance with paragraph 4, and such of the relevant personal information as is necessary for administering the ballot; a database which contains— the unique identifiers generated in accordance with paragraph 4, such of the voting information as the scrutineer possesses, and such of the voting access method information as the scrutineer possesses. The scrutineer must not store relevant personal information and voting information together in one database, except where— necessary in response to a request for support under paragraph 6(6); required by a court order; required for the purposes of the investigation of crime or criminal proceedings; required under a request or order made by the Certification Officer; required under another enactment. In this paragraph— “multi-factor authentication” means a method of electronic authentication in which a person is granted access to a database or application only after successfully presenting two or more distinct types of evidence of identity; “personal information” means information relating to a person whose identity— is specified in the information, or can be deduced from it; “relevant personal information” means, in relation to relevant persons— names; email addresses; mobile telephone numbers; home addresses; any other personal information provided to the scrutineer by the trade union; “secure database” means a database— access to which requires multi-factor authentication, and all data stored in which is encrypted to a standard which provides a reasonable level of protection to ensure its confidentiality, integrity, and availability; “voting access method information” means, in relation to relevant persons— voting access methods; whether a person received their voting access method by email, mobile telephone message, internet message via a qualifying internet messaging service or post; “voting information” means, in relation to relevant persons— votes cast in the ballot; timestamps showing when each electronic voting form was submitted; IP addresses from which electronic voting forms have been submitted; whether a person cast their vote by returning a voting paper or submitting an electronic voting form.

← 7 · All articles · 1 →

Source: legislation.gov.uk · retrieved 2026-09-04