When your voter record becomes someone else's product

In October 2020, people in Alachua County, Florida opened an email that said, “Vote for Trump or else.” The message listed names, addresses, phone numbers and voting histories, claimed to be from the Proud Boys, and threatened recipients if they didn’t comply. The Justice Department later charged two foreign contractors tied to the campaign. No state database was hacked — the attackers started with what states freely hand out.

“The file your state keeps on you is not an administrative footnote.” — Pace

What the voter file actually contains

Most people picture voter rolls as minimal. They’re not. State files typically include your name, residential address, sometimes date of birth, party registration where applicable, a voter ID number, and participation history (which elections you voted in and how — in person, absentee, early voting). What the file does not include is who you voted for. What it does include is a history of participation and contact details.

States are supposed to strip sensitive fragments like Social Security or driver’s license numbers before release. Practice varies. In some cases, redaction fails. In others, the public record is simply comprehensive by law.

How a public record turns into a dossier

The government record is the seed. Private vendors turn that seed into a commercial product in four predictable layers:

• Acquisition: brokers buy or get copies of state files (via states or party channels).

• Standardization: 51 jurisdictions arrive in 51 formats; brokers clean, dedupe, and assign persistent IDs.

• Enrichment: commercial consumer data (income estimates, purchases, home value, credit tier, phone, email) is appended — some vendors claim up to 1,800 fields per person.

• Modeling: analytics score turnout, persuasibility, likely positions on hot-button issues, and other predictions that travel with your name.

Layered together, your civic act of registering to vote becomes a scored, sold portrait of your life. The clever bits — matching logic and scoring — are proprietary. The underlying inputs are largely public or widely traded.

Who buys it, where it leaks, and why that matters

Buyers are predictable: campaigns, parties, PACs, advocacy groups, unions. Money can be opaque because bigger flows route through nonprofits and committees. Private platforms report massive reach — one claimed billions of contacts in a single cycle — and private equity now owns core infrastructure.

New and important buyer: government agencies. When a state attaches a “non-commercial use” restriction, agencies can still obtain enriched files through brokers with authorization letters. In short, commercial brokers are now a side door into government analytics.

Where the real security failures show up is at downstream vendors and subcontractors. States rarely get breached; vendors do. The deep-root analytics exposure in 2017 left nearly 198 million records on an unsecured server for days. Other incidents have exposed millions of records from multiple states. The consequence: the enriched version of your voter record is both more valuable and less protected than the original.

What the legal restrictions actually are (and aren’t)

Many states mark their files “non-commercial” or “for political use only.” That label is an attestation, not a technical control. There’s often no mechanism to audit resale, re-merging, or downstream use. Agencies and private buyers routinely bypass these nominal restrictions. Treat “restricted” as a promise without a lock.

What you can actually do (real, practical moves)

There isn’t a perfect fix. You cannot fully opt out if you’re registered. But there are practical, concrete steps that reduce how valuable the enriched file becomes.

First: check for an address confidentiality program (often called Safe at Home). Where it’s available and you qualify, it replaces your home address on public records. It was built for survivors of domestic violence and stalking, and eligibility can be narrow — but for those who qualify, it works.

Second: attack the enrichment layer. The commercial data brokers are the ones appending income, purchases, emails and phones. Many brokers offer opt-outs. You can do the removal work yourself or use a paid service and keep at it regularly. Break the enrichment and you turn a rich dossier into a thin record.

Third: stop stacking the same address everywhere. Use a PO box or commercial mailing address where legal, and avoid putting your home address on memberships, loyalty programs, and other commercial accounts. The goal is to make the voter file a dead end instead of a master key.

Fourth: adjust expectations and behavior. Assume your registration data is public, enriched, and sold. Assume it can reach government analytics through brokers. That understanding changes what you attach to your civic identity.

Why this matters and what to carry forward

You did something civic: you registered and voted. The system turned that act into a product that any buyer — campaign, private firm, or government agency — can repurchase and repurpose. That is not a reason to stop participating. It’s a reason to be deliberate about the other traces you leave.

This week, do two things: look up your state’s address confidentiality program and see if you qualify, and start or restart your data-broker opt-out work. Those moves don’t remove you from the voter file, but they make the version available to strangers less useful.

If you want the show’s links and the tools Pace mentioned, they’re in the episode notes. The sharper point to leave with is this: the state gave a public record so you could vote. Private markets and agencies turned that record into a product. You can’t erase the file, but you can make the product worse.