The Government Built a National Citizenship Database. It's Already Flagging U.S. Citizens.

TL;DR: The Department of Homeland Security and DOGE took a decades-old immigration verification tool called SAVE and rebuilt it into a searchable national citizenship database. It now contains Social Security numbers, driver’s license data, passport numbers, and voter registration records. Election officials in multiple states have used it to check 47.5 million voters, and it’s already flagging U.S. citizens as noncitizens. The DOJ has sued 24 states for refusing to hand over unredacted voter rolls. The League of Women Voters is suing DHS over Privacy Act violations. This is what a voter surveillance system looks like.

What SAVE Used to Be

The Systematic Alien Verification for Entitlements (SAVE) program has been around since the 1980s. Its original job was simple: when someone applied for government benefits (Medicaid, a driver’s license, food stamps) agencies could check SAVE to verify their immigration status ^[1].

It didn’t contain data on U.S.-born citizens. It wasn’t designed for that. It held records on noncitizens, naturalized citizens, and some overseas-born children of U.S. citizens. A niche database for a specific purpose.

That’s not what SAVE is anymore.

What SAVE Became

Starting in April 2025, DHS Secretary Kristi Noem and DOGE announced a “comprehensive optimization” of SAVE. By October 31, 2025, the regulatory changes were official. Here’s what they added ^[2]:

U.S. citizens by birth: previously excluded entirely
Full and truncated Social Security numbers
U.S. passport numbers
State driver’s license numbers: DHS asked states to hand over their motor vehicle databases
Bulk voter record uploads: election officials can now submit entire state voter rolls for citizenship checks

They also eliminated all fees for state and local agencies, making it free to use. That happened on May 22, 2025 ^[3]. By August 15, the updated system was deployed to election officials across the country.

In less than six months, SAVE went from an immigration benefits tool to what the League of Women Voters calls “a searchable national citizenship database” ^[4].

47.5 Million Voters and Counting

As of December 2025, election officials have run 47.5 million voter records through SAVE ^[5]. Here’s what the results look like:

Texas: 18 million voters checked. 2,724 flagged as “potential noncitizens,” that’s 0.015% ^[6].
Louisiana: 2.9 million voters checked. 79 “likely noncitizens” who voted in at least one election since the 1980s ^[5].
Tennessee: 42 potential noncitizen voters referred to the FBI ^[5].
Indiana: “At least 21” noncitizens who voted ^[5].

After checking tens of millions of records, the system has found a handful of cases in each state. But the damage it’s doing to eligible voters is harder to count.

Flagging U.S. Citizens

Anthony Nel is a naturalized U.S. citizen who has lived in Texas since he was a teenager. He’s voted regularly for nearly a decade. In 2025, SAVE flagged him as a potential noncitizen. His county sent a single letter asking him to prove citizenship within 30 days. He didn’t get it. His voter registration was canceled ^[5].

Nel isn’t an edge case. He’s a known failure mode.

USCIS’s own fact sheet admits that “if an individual with acquired citizenship has not received a Certificate of Citizenship from USCIS…SAVE may not be able to confirm that individual’s U.S. citizenship” ^[5]. The system also “may produce inaccurate results” due to “misspellings of names, transposed numbers or incomplete information.”

In Denton County, Texas, 55 people besides Nel had their registrations canceled just for not responding to a mailed notice. Of 84 flagged voters the county contacted, only 14 proved citizenship through the process, and 14 others turned out to be legitimately registered in error ^[5]. The rest are in limbo.

The Brennan Center flags another problem: Social Security Administration data lacks comprehensive citizenship information for Americans born before 1978 ^[7]. If you’re over 48 and were born in the U.S., the database backing SAVE may not even know you’re a citizen.

DHS Wants Your Driver’s License Data

SAVE doesn’t just pull from federal databases. DHS asked states to hand over their driver’s license records through the National Law Enforcement Telecommunications System (NLETS). The request went to Texas, and reporting from ProPublica and Stateline confirmed DHS wants this data from states nationwide ^[8].

Here’s the catch: driver’s license numbers get reused. People hold licenses in multiple states. And if SAVE isn’t connected to live state databases, the information goes stale. Texas already learned this the hard way in 2019 when it claimed 95,000 noncitizens were on voter rolls. The number collapsed under scrutiny because the state was using outdated license data ^[7].

The same data quality problems are baked into the current system. But now they operate at national scale.

The DOJ Is Suing 24 States for Their Voter Rolls

Since May 2025, the Department of Justice has demanded full, unredacted voter rolls (including driver’s license numbers and partial Social Security numbers) from at least 44 states and the District of Columbia. When states refused, the DOJ sued ^[9].

As of December 2025, 24 states and D.C. have been sued: Arizona, California, Colorado, Connecticut, Delaware, Georgia, Hawai’i, Illinois, Maine, Maryland, Massachusetts, Michigan, Minnesota, Nevada, New Hampshire, New Mexico, New York, Oregon, Pennsylvania, Rhode Island, Vermont, Virginia, Washington, and Wisconsin ^[9].

The DOJ says it wants the data to check compliance with federal voter roll maintenance laws. But the lawsuits came in waves (four states, then six more, then more) as states refused to comply with what the Brennan Center called “an unprecedented demand for sensitive voter data” ^[10].

Oregon and California got their cases dismissed. But the rest are still fighting.

And in December, the DOJ quietly offered states a deal: hand over the data, and we’ll give you a confidential list of voters to remove. No public disclosure. No transparency about who gets flagged or why ^[11].

The Privacy Act Lawsuit

On the other side of this fight, the League of Women Voters, along with EPIC (the Electronic Privacy Information Center), sued DHS in the District of Columbia ^[4].

Their argument is straightforward: the Privacy Act of 1974 prohibits “computer matching programs” that compare data across federal agencies unless agencies disclose it to the public and Congress. Congress specifically amended the law in 1988 to prevent exactly this kind of cross-agency data pooling ^[4].

The complaint alleges DHS, DOGE, the SSA, and other agencies “secretly merged personal data from across the federal government into centralized ‘Interagency Databases’ in direct violation of the Privacy Act of 1974 and the U.S. Constitution” ^[4].

The USCIS “Data Lake” (yes, that’s what it’s called) combines records from the IRS, SSA, HHS, and the Department of Labor. Social Security numbers, tax information, medical records, children’s case files. All in one place ^[4].

The DOGE Connection

This isn’t happening in a vacuum. In January 2026, the DOJ admitted that a DOGE employee at the SSA signed an unapproved “voter data agreement” with a political advocacy group seeking to match Social Security records against state voter rolls. The group’s stated goal: “to find evidence of voter fraud and to overturn election results in certain States” ^[12].

That employee faced a Hatch Act referral. But the infrastructure they were trying to use (cross-referencing SSA data with voter rolls to flag people) is now official federal policy through SAVE.

Brookings published an analysis in June 2025 comparing DOGE’s cross-agency data consolidation to the Total Information Awareness program that Congress killed in 2003 after the post-9/11 surveillance backlash ^[13]. The Privacy Act was written specifically to prevent a government “one big beautiful database.” SAVE is becoming that database, one data source at a time.

What’s at Stake

Here’s the math. SAVE has checked 47.5 million voters and found a few hundred questionable registrations across all states that have reported results. Meanwhile:

U.S. citizens are being flagged and purged from voter rolls based on a single mailed notice
The DOJ is suing 24 states for refusing to hand over driver’s license and SSN data
DHS is building a “Data Lake” combining IRS, SSA, HHS, and DOL records
The system can’t reliably identify citizens born before 1978 or naturalized citizens without USCIS certificates
The entire operation was built without the public disclosure or congressional oversight the Privacy Act requires

The federal government has never had a national citizenship database. Now it’s building one, and using it to decide who gets to vote.

What You Can Do

Check Your Voter Registration

Verify your registration status at vote.org. Do it now, and check again before any election. If you’ve been flagged, you may not receive notice.

Respond to Any County Notices Immediately

If you receive a letter questioning your citizenship or voter eligibility, respond within the deadline. Bring your passport, naturalization certificate, or birth certificate to your local election office.

Know Your Rights

If your registration is canceled, you can re-register. In most states you can also cast a provisional ballot on Election Day. Contact the ACLU or League of Women Voters if you believe you were wrongly purged.

Support the Legal Challenges

The League of Women Voters, EPIC, and the Brennan Center are fighting SAVE in court. Their lawsuits argue the database violates the Privacy Act of 1974. These cases could determine whether the government can build a national citizenship database.