Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
DRAFT Test Assertions for VVSG 1.0 Section 3.1.7 (Tabular Format)
[Tabular Format]
April 18, 2014
| 3.1.7 The voting process shall preclude anyone else from determining the content of a voter's ballot, without the voter's cooperation. | TA 317-1 The voting process SHALL NOT allow anyone other than the voter to determine the content of his or her ballot unless the voter cooperates. |
| TA 317-2 The voting system SHALL NOT issue a receipt to the voter if that receipt is capable of being used to prove how he/she voted. | |
| 3.1.7.1 When deployed according to the installation instructions provided by the vendor, the voting station shall prevent others from observing the contents of a voter's ballot. | TA 3171-1 IF the instructions provided by the vendor are followed THEN the voting station SHALL NOT allow any other person from observing the contents of his or her ballot. |
| 3.1.7.1a The ballot and any input controls shall be visible only to the voter during the voting session and ballot submission. | TA 3171a-1 IF the voting session is performed using a visual interface THEN the voting system SHALL prevent any individual in the polling place (without the voter's consent) from perceiving any content or associated visual cues on the ballot presented to the voter during the voting session. |
| TA 3171a-2 IF the voting session is performed using a visual interface THEN the voting system SHALL prevent any individual in the polling place (without the voter's consent from perceiving any input controls (and interaction with such input controls) on the visual voting machine used by the voter during the voting session. | |
| TA 3171a-3 IF ballot submission is performed using a visual interface THEN the voting system SHALL prevent any individual in the polling place (without the voter's consent) from perceiving any content on the ballot submitted by the voter during the voting session. | |
| TA 3171a-4 IF ballot submission is performed using a visual interface THEN the voting system SHALL prevent any individual in the polling place (without the voter's consent) from perceiving any input controls (and interaction with such input controls) on the visual voting machine used by the voter during the ballot submission process. | |
| 3.1.7.1b The audio interface shall be audible only to the voter. | TA 3171b-1 IF the voting session is performed using an aural interface THEN the auditory content and associated aural cues SHALL NOT be discernible to any other individual in the polling place without the voter's consent. |
| TA 3171b-2 IF headphones are used with an aural interface THEN the headphones SHALL have low sound leakage such that the auditory content and associated aural cues are not discernible to any other individual in the polling place without the voter's consent. | |
| TA 3171b-3 IF ballot submission is performed using an aural interface THEN the voting system SHALL prevent any individual in the polling place (without the voter's consent) from perceiving any content on the ballot submitted by the voter during the voting session. | |
| TA 3171b-4 IF ballot submission is performed using an aural interface THEN the voting system SHALL prevent any individual in the polling place (without the voter's consent) from perceiving any input controls (and interaction with such input controls) on the visual voting machine used by the voter during the ballot submission process. | |
| 3.1.7.1c As mandated by HAVA 301 (a)(1)(C), the voting system shall notify the voter of an attempted overvote in a way that preserves the privacy of the voter and the confidentiality of the ballot. | TA 3171c-1 IF the voting system is notifying the voter of an attempted overvote and the voting session is performed using an aural interface THEN the auditory content and associated aural cues SHALL NOT be discernable to any other individual in the polling place without the voter's consent. |
| TA 3171c-2 IF the voting system is notifying the voter of an attempted overvote and the voting session is performed using a visual interface THEN the visual content and associated visual cues SHALL NOT be discernable to any other individual in the polling place without the voter's consent. | |
| 3.1.7.2 Voter anonymity shall be maintained for alternative format ballot presentation. | TA 3172-1 IF voters use non- typical ballot interfaces THEN only the logical contents of the ballot SHALL be recorded. |
| TA 3172-2 IF voters use non- typical ballot interfaces THEN the special formats in which they were rendered SHALL NOT be recorded. | |
| TA 3172-3 The logical contents of a cast vote record SHALL be invariant across all interfaces. | |
| 3.1.7.2a No information shall be kept within an electronic cast vote record that identifies any alternative language feature(s) used by a voter. | TA 3172a-1 The electronic cast vote record SHALL NOT record any information that identifies any alternative language feature used by the voter. |
| 3.1.7.2b No information shall be kept within an electronic cast vote record that identifies any accessibility feature(s) used by a voter. | TA 3172b-1 The electronic cast vote record SHALL NOT record any information that identifies any accessibility feature used by the voter. |
Created April 30, 2014, Updated August 25, 2016