Trump Ordered a National Voter Database. It's Wrong 81% of the Time.

Rows of voting booths set up in a gymnasium for an election — Photo via Unsplash

TL;DR: On March 31, Trump signed an executive order directing DHS to compile “State Citizenship Lists” from the SAVE database and transmit them to every state before federal elections. The order instructs the Postal Service to only deliver mail ballots to voters on the federal list. Missouri already tested SAVE against its voter rolls: 81% of the people it flagged as noncitizens were U.S. citizens. The DOJ’s chief privacy officer for its Civil Rights Division resigned over the voter data collection. The ACLU is suing four federal agencies for hiding how the system works. And 24 states have already signed up. This isn’t a policy proposal. It’s an operational surveillance program, and it’s already running.

The Executive Order: What It Actually Says

Executive Order 14339, signed March 31, does three things that should alarm anyone who votes ^[1]:

National citizenship lists: DHS, working with the Social Security Administration, will compile lists of confirmed U.S. citizens in every state. These lists pull from SAVE data, naturalization records, SSA records, and “other relevant Federal databases.” The lists get transmitted to states at least 60 days before each federal election
USPS as ballot gatekeeper: The Postal Service is directed to send mail ballots only to voters on the federally compiled list. If you’re not in the database, your ballot doesn’t get delivered
DOJ enforcement: The Department of Justice is instructed to prosecute entities that distribute ballots to anyone not on the federal list

UCLA election law expert Rick Hasen called the order “likely unconstitutional” and noted it’s “virtually impossible to implement in time for November’s elections” ^[2]. On April 1, Democratic leaders Chuck Schumer and Hakeem Jeffries filed a federal lawsuit challenging it.

That legal fight will take months. Meanwhile, the machinery is already being built.

What SAVE Is, and What DOGE Turned It Into

The Systematic Alien Verification for Entitlements (SAVE) was designed to check immigration status for benefit eligibility. You apply for food stamps; the agency checks whether you’re here legally. That’s it. That was the entire point ^[3].

After Trump’s 2025 inauguration, Elon Musk’s Department of Government Efficiency “optimized” SAVE over two weeks. Here’s what changed:

Full Social Security numbers added to the database
Bulk searches enabled: States can now upload hundreds of thousands of voter records in a single query. Before, it was one person at a time
Search parameters expanded: You can now query using just SSN, name, and date of birth (no immigration ID required)
SSA Numident database integrated: Records covering U.S.-born citizens now feed into the system
Criminal records added
Fees eliminated to encourage state adoption

A system designed to check whether immigrants qualify for benefits is now a searchable national citizenship database used to decide who gets to vote.

The Brennan Center found that DHS simultaneously shuttered its Civil Rights and Civil Liberties office and the USCIS ombudsman, eliminating roughly 600 civil rights investigations and the primary oversight mechanism for the system ^[3].

81% Wrong: The Missouri Test

Want to know how accurate this “national citizenship database” is? Missouri tested it.

Secretary of State Denny Hoskins ran the state’s voter list through SAVE in November 2025. The system flagged 691 registered voters as noncitizens ^[4].

County officials immediately identified that 35% of the flagged names were naturalized citizens they personally knew. After cross-referencing with passport data in January 2026, the list dropped from 691 to 133. At least 81% of the people SAVE called noncitizens were Americans.

Seventy Missouri county clerks, from both parties, wrote a joint letter warning that SAVE “repeatedly flags individuals we know to be U.S. citizens: our neighbors, colleagues and even voters we have personally registered at naturalization ceremonies” ^[4].

Missouri isn’t an outlier:

Georgia (2022): SAVE flagged 1,634 voters as unverified. A full audit of 8.2 million voters found just 20 actual noncitizens registered: 0.00024% of the voter roll ^[5]
Texas (Denton County): 84 voters flagged. After investigation, county officials concluded “more of these are citizens than not” ^[4]
National total: Roughly 21,000 registered voters have been flagged across all states using SAVE ^[5]

A 2018 U.S. Commission on Civil Rights report put it bluntly: “SAVE is not a comprehensive list of U.S. citizens” ^[3]. It doesn’t have reliable data on Americans born before 1978. It misses anyone whose naturalization records weren’t updated in SSA files. Twenty-one million American citizens lack ready access to citizenship documents like passports or birth certificates.

This is the database Trump wants to use to decide who receives a mail ballot.

The DOJ Privacy Officer Who Walked Out

On April 3, Kilian Kagle, the DOJ Civil Rights Division’s chief FOIA officer and senior privacy official, resigned. His departure wasn’t announced. OPB broke the story ^[6].

Kagle left as the DOJ was actively collecting state voter roll data to share with DHS. Seventeen states, mostly Republican-led, had already handed over voter files. The data includes:

Driver’s license numbers
Partial Social Security numbers
Dates of birth
Addresses
In California’s case: party affiliation and voting history

No public privacy notices or assessments were issued, despite legal requirements. No transparency about how the data is stored, who has access, or how long it’s retained.

“The Department of Justice has no legal authority to maintain a massive database of state voter records,” said John Davisson of the Electronic Privacy Information Center ^[6].

Justin Levitt, a Loyola Marymount University election law professor, went further: “Each of the 17 state voter rolls represents a criminal violation.”

The plan is to route all of this through SAVE and then pass the results to ICE. The agency that’s already used facial recognition 100,000 times on protesters now gets a voter database matched to immigration records.

The ACLU Sued. The Government Won’t Talk.

In August 2025, the ACLU and two Lawfare journalists (Anna Bower and Ben Wittes) filed FOIA requests with DHS, USCIS, SSA, and DOGE asking basic questions: What changes did you make to SAVE? How is personal data being shared? Which states are you working with? ^[7]

When the agencies didn’t respond, they sued (Bower v. Social Security Administration).

“While DHS and USCIS have touted the changes they made to the SAVE program, the details (such as the particular programs and databases that have been altered, the ways they have been altered, and the nature and extent of any use and sharing of individuals’ personal information) have all been kept secret,” the ACLU said ^[7].

“Americans deserve to know how their information is being used,” said Theresa J. Lee, ACLU Voting Rights Project senior attorney.

They’re not the only ones fighting back. Judges in California, Michigan, and Oregon have ruled that the DOJ can’t force states to turn over voter lists ^[8]. Voting rights groups sued Texas in March over its voter purge using SAVE data ^[9]. But 24 states have already signed memoranda of agreement with USCIS, voluntarily feeding voter rolls into a system that gets it wrong four out of five times.

This Is a Surveillance Story

Strip away the election politics and look at what’s actually being built:

A national citizenship database linking immigration records, Social Security numbers, and voter registration data
Accessible to DHS, ICE, DOJ, SSA, and DOGE: all without a warrant
Bulk search capability that allows government agencies to run mass queries against millions of citizens
No Privacy Act compliance: the new SSA data access lacks the required system of records notice ^[3]
No oversight: the civil rights offices that would catch abuses have been eliminated
ICE integration: voter data cross-referenced with immigration enforcement databases

This is the data broker loophole applied to democracy itself. The government didn’t need to buy your data from Penlink or Clearview this time. States are handing it over directly.

Expert Jasleen Singh warned that “bulk inquiries could allow states to run massive searches that return incredibly high numbers of non-matches in SAVE, creating false impressions of widespread noncitizen registration through no fault of the system’s design” ^[5]. That false impression becomes the justification for more purges. More purges feed more data into the system. The surveillance ratchets tighter.

Kabbas Azhar, a privacy fellow who studied the system, put it plainly: “Citizens’ voting rights will be undermined by system mistakes, with no clear accountability mechanisms for contesting adverse decisions” ^[5].

What You Can Do

Verify your voter registration now: Check at vote.org and your state’s election website. If your state is one of the 24 using SAVE, double-check well before any deadlines
Keep your citizenship documents accessible: Passport, birth certificate, or naturalization certificate. If you’re challenged, you’ll need proof fast
Contact your state officials: Ask whether your state signed a SAVE memorandum of agreement with USCIS and what data was shared
Support the legal challenges: The ACLU’s Bower v. SSA case is fighting for transparency on how the system works. EPIC and the Brennan Center are tracking the broader challenges
Vote early and in person if you can: The executive order targets mail ballots specifically. In-person voting bypasses the USPS checkpoint entirely

References

Published: April 12, 2026