Online voting is now a practical option for many Australian organisations. Members can vote from home, employees can participate across multiple worksites, shareholders can join meetings remotely, and associations can run elections without relying entirely on paper ballots.

But there is a common misconception about online voting in Australia.

There is no single Australian law that says every organisation can—or cannot—conduct every type of vote online.

The legal position depends on what is being voted on, who is voting, the organisation’s legal structure, the applicable legislation, and the organisation’s constitution, rules or governing document.

That distinction matters.

An online vote for an association election is not necessarily governed by the same rules as an online vote on a company resolution. A protected action ballot under the Fair Work Act 2009 has its own specific requirements. A strata scheme may be subject to state legislation governing electronic voting. A charity may need to consider its governing document and the requirements of its incorporating legislation.

The technology is only one part of the equation.

The real compliance question is whether the voting process allows the organisation to conduct a valid, fair, secure and properly documented vote under the rules that apply to it.

This guide explains the key issues organisations should consider before moving a ballot, election, AGM or member vote online.

Important: This article provides general information, not legal advice. The rules applying to a particular vote depend on the organisation’s legal structure, governing documents and the subject of the ballot. Where the validity of a proposed vote is uncertain, obtain advice appropriate to your circumstances.

Is online voting legal in Australia?

Generally, yes—but the answer depends on the type of vote.

Australian legislation increasingly accommodates electronic communications, virtual meetings and electronic voting. For example, the Corporations Act 2001 allows companies to hold member meetings using virtual meeting technology in certain circumstances and requires members, as a whole, to have a reasonable opportunity to participate.

The Australian Securities and Investments Commission (ASIC) also confirms that the Corporations Act does not prescribe a particular software platform for virtual meetings. Instead, the technology used must be reasonable and provide members with a reasonable opportunity to participate, including voting.

Other types of organisations have different rules.

So the better question is not simply:

“Can we vote online?”

It is:

“What rules govern our vote, and does our proposed online voting process satisfy those rules?”

Why the legal requirements matter

A voting system does more than collect “yes” and “no” responses.

For a formal organisational vote, the process may need to establish:

That is why an ordinary online survey is not automatically an appropriate voting system.

A survey might tell you what percentage of respondents selected an option. A formal ballot may need to demonstrate who was entitled to vote, that the voting rules were followed, and that the reported result accurately reflects the votes cast.

The distinction becomes particularly important when the result affects employment conditions, corporate control, elections, member rights or substantial financial decisions.

1. Start with the organisation’s governing rules

Before selecting a voting platform, read the organisation’s constitution, rules, trust deed, bylaws or other governing document.

This is one of the most frequently overlooked steps.

A constitution may specify:

For companies, ASIC confirms that organisations must comply with the Corporations Act 2001 as well as either their constitution or applicable replaceable rules. The rules cover matters including meetings, voting, proxies and record keeping.

For charities, the ACNC similarly stresses the importance of following the organisation’s governing document. It sets out how the charity is governed, including how meetings are called and held and how members’ rights operate.

A practical example

Imagine an incorporated association’s rules say:

“Members may vote at a general meeting.”

That does not necessarily answer every question about an online ballot.

You may still need to determine:

Do not assume that because Zoom, Teams or an online voting platform is technically capable of conducting the vote, the vote is legally authorised.

2. Identify the legislation that applies to your organisation

Australia’s voting rules are spread across different pieces of Commonwealth, state and territory legislation.

There is no universal “Online Voting Act”.

Companies

For companies, the Corporations Act 2001 contains detailed rules covering company meetings and voting.

A company may hold a members’ meeting:

The Act also requires a company holding a members’ meeting to give members, as a whole, a reasonable opportunity to participate.

ASIC’s guidance makes clear that virtual participants need to be able to participate meaningfully, including asking questions and voting where applicable.

This means an organisation should not treat an online meeting as simply a livestream.

If members can watch but cannot reasonably participate or vote, there may be a governance problem.

Charities and not-for-profits

The position for charities depends partly on their legal structure.

The ACNC does not itself impose a blanket requirement that every charity hold an AGM. However, a charity’s governing document or another regulator may require one.

Governance Standard 2 requires charities with members to take reasonable steps to be accountable to those members and provide adequate opportunities for members to raise concerns about how the charity is governed. The ACNC identifies meetings where members can ask questions and vote on resolutions as one common way of meeting this standard.

For a charity considering an online meeting or ballot, the governing document should therefore be checked before the technology is selected.

Incorporated associations

Incorporated associations are particularly important because their rules vary between jurisdictions.

Victoria, for example, permits incorporated associations to use technology that allows members to clearly and simultaneously communicate during general meetings. Members participating electronically have the same rights as members who are physically present, including voting rights.

Other states and territories have their own legislation and requirements.

For that reason, an Australian association should not rely on a generic online voting policy without checking the legislation applying in its jurisdiction.

3. Online AGM voting has different considerations from a standalone ballot

An online vote can take place in several different ways.

Voting during a virtual meeting

Members attend an online AGM or general meeting and cast their vote while the resolution is being considered.

This raises questions about:

For companies, ASIC expects virtual meeting technology to provide members with a reasonable opportunity to participate.

Pre-meeting voting

Some organisations allow members to vote before the meeting.

This can be useful, but it cannot simply be assumed to be legally interchangeable with voting during the meeting.

NSW strata legislation provides a good illustration. In NSW, pre-meeting electronic voting is subject to specific requirements and cannot be used for elections of the strata committee. Electronic voting arrangements also need to be identified in the meeting notice.

The lesson is straightforward:

“Online voting” is not one single process.

The legal treatment can change depending on when and how the vote takes place.

4. Voter eligibility must be controlled

A compliant online ballot needs a reliable method of establishing who can vote.

This sounds obvious, but it is one of the most important parts of the process.

Depending on the ballot, eligibility might be based on:

The voting platform should receive an accurate voter roll before voting opens.

Common mistake: treating an email list as a voter roll

An email distribution list is not necessarily an eligibility register.

For example, an organisation might have:

If the wrong people receive voting credentials, the problem is not merely administrative. It can affect the integrity and potentially the validity of the ballot.

For formal elections and ballots, voter eligibility should therefore be confirmed before credentials are issued.

5. A secret ballot needs genuine ballot secrecy

A secret ballot is more than hiding the final results from voters.

The system should prevent the organisation or other unauthorised parties from determining how a particular person voted.

This distinction is particularly important for workplace voting.

The Fair Work Commission’s Statement of Principles on Genuine Agreement says an enterprise agreement voting process should ensure that an employee’s vote is not disclosed to, or ascertainable by, the employer.

Protected action ballots have an even more explicit requirement.

Where a protected action ballot is conducted electronically, the ballot agent must ensure:

This is a useful benchmark for any organisation considering an online secret ballot.

Knowing that someone voted is different from knowing what they voted.

A well-designed system should keep those two pieces of information appropriately separated.

6. Authentication must balance security and accessibility

Online voting requires a way to establish that the person voting is entitled to vote.

That could involve:

But stronger authentication is not automatically better if it prevents eligible people from voting.

Consider a workforce with employees who:

For an enterprise agreement vote, the Fair Work Commission specifically expects the voting process to provide employees with a fair and reasonable opportunity to cast a vote and recognises that employee circumstances and needs should be considered.

The objective is therefore secure access, not unnecessary friction.

For higher-risk ballots, organisations should also consider alternative channels where appropriate.

7. Privacy is part of online voting compliance

Online voting commonly involves personal information.

Depending on the ballot, this could include:

If the Privacy Act 1988 applies to the organisation, the Australian Privacy Principles (APPs) need to be considered.

The OAIC’s guidance includes obligations relating to:

APP 11 requires an APP entity to take reasonable steps to protect personal information from misuse, interference and loss, as well as unauthorised access, modification or disclosure.

Questions to ask your voting provider

These are sensible due-diligence questions even where a particular privacy obligation does not technically apply.

8. Keep an audit trail

A strong online voting process should produce a defensible record of what happened.

That does not mean storing a database containing every person’s voting choice indefinitely.

A good audit trail should allow the organisation to establish things such as:

The exact information that should be retained depends on the type of ballot and the applicable rules.

For protected action ballots, for example, the Fair Work Act contains specific record-keeping requirements for ballot material.

For company meetings, ASIC also highlights the importance of following the applicable rules for resolutions and keeping appropriate records.

A useful principle is:

The result should be explainable after the vote has finished.

If someone challenges the result six months later, the organisation should not have to rely solely on someone’s recollection of what happened.

9. Enterprise agreement voting has specific requirements

Workplace voting deserves separate treatment because the Fair Work framework has detailed requirements.

The Fair Work Commission allows enterprise agreement votes to be conducted using electronic methods. But an online voting platform does not replace the employer’s obligations under the Fair Work Act.

For agreements covered by the current rules, employers need to consider matters including:

The Fair Work Commission states that employees should generally receive the relevant agreement and incorporated material for at least 7 full calendar days before voting starts, subject to the circumstances and provisions described in the Statement of Principles.

The voting start date also generally needs to be at least 21 clear days after the last Notice of Employee Representational Rights for a single-enterprise agreement.

For a single-enterprise agreement that is not a greenfields agreement, the agreement is made when the relevant employees have been asked to approve it and a majority of those who cast a valid vote approve it.

This is why a simple online survey is usually a poor fit for a formal enterprise agreement vote.

The voting technology needs to support the industrial relations process around the vote—not just count responses.

10. Protected action ballots have additional safeguards

Protected action ballots are another area where organisations should not improvise.

The Fair Work Commission states that a protected action ballot can generally only be conducted by an eligible protected action ballot agent, unless exceptional circumstances apply. Eligible agents include the Australian Electoral Commission and persons approved by the Fair Work Commission.

Electronic voting is expressly recognised, but the ballot agent must comply with specific requirements around:

This is a good example of why organisations should determine the legal framework before choosing the technology.

The question is not simply whether a provider can run an electronic ballot.

It is whether the provider and ballot process can satisfy the requirements applicable to that particular ballot.

11. Strata schemes are another example of jurisdiction-specific rules

Strata voting demonstrates why Australian online voting compliance cannot be reduced to a single national checklist.

In NSW, owners can participate in meetings and vote using electronic means where the relevant requirements are satisfied. Pre-meeting electronic voting is subject to additional rules and cannot be used for elections of the strata committee. Electronic voting arrangements must also be stated in the meeting notice.

The NSW regulations also prescribe requirements for electronic ballot papers, voter declarations, instructions and access to electronic voting systems.

For strata managers and owners corporations, this means the voting process should be designed around the specific strata legislation—not around the capabilities of a generic polling application.

Common mistakes when moving a vote online

Mistake 1: Assuming “online” automatically means compliant

Technology does not override legislation, constitutions or bylaws.

Start with the rules. Then design the technology around them.

Mistake 2: Using a normal survey tool for a formal ballot

A survey platform may not provide:

Mistake 3: Ignoring the voter roll

If eligibility is wrong, the vote can be wrong.

The voter register should be reviewed before voting credentials are issued.

Mistake 4: Allowing administrators to see secret votes

An administrator being able to connect an individual voter with their voting choice can undermine a secret ballot.

The system architecture should be reviewed before the ballot.

Mistake 5: Treating cybersecurity and voting integrity as the same thing

A system can be technically secure but still produce a poorly governed vote.

For example, a highly secure system does not solve the problem of sending voting credentials to people who are not eligible to vote.

Security and governance need to work together.

Mistake 6: Forgetting accessibility

A ballot that is technically available online may still be difficult for some eligible voters to access.

Consider devices, connectivity, language, disability, shift patterns and the practical environment in which people will vote.

Mistake 7: Failing to document the process

A result should be supported by records.

If a dispute arises, “the software said 63%” is not a particularly strong governance record.

A practical online voting compliance checklist

Before launching an online vote, work through the following checklist.

Governance

Voter eligibility

Voting process

Technology

Privacy

After the vote

What should you look for in an online voting provider?

Choosing a provider should not be based solely on price or the appearance of the voting screen.

For a formal organisational ballot, ask the provider to explain how its platform handles:

Voter eligibility

Can the provider import and manage a verified voter roll?

Authentication

How does the system ensure the right person receives access?

Vote secrecy

Can the provider demonstrate that administrators cannot determine how individual voters cast secret ballots?

Duplicate voting

What prevents a voter from submitting multiple votes?

Auditability

What records are generated before, during and after the ballot?

Administration

Who has access to voter data and voting information?

Security

What information security controls and independent assessments does the provider maintain?

Data handling

Where is voting and personal information stored, and what happens to it after the ballot?

Accessibility

Can voters participate using different devices or channels where appropriate?

Support

Who assists voters and administrators if something goes wrong during the ballot?

These questions are often more useful than asking whether a provider has “secure voting”. Ask how the security and governance controls actually work.

How Vero Voting can assist

Vero Voting provides online voting and managed ballot services for organisations conducting formal votes, elections, meetings and workplace ballots.

Its solutions cover areas including enterprise agreement voting, AGM voting, elections, strata voting and custom voting processes. The platform supports online, SMS and phone voting where appropriate to the voting requirements.

For organisations dealing with complex ballots, the value is not simply having a webpage where people can click a button.

The voting process can be structured around issues such as:

Vero Voting states that its information security management system is ISO/IEC 27001:2022 certified and that it is SOC 2 Type II audited.

For organisations conducting regulated or highly scrutinised votes, independently verified security controls can form an important part of provider due diligence.

Ultimately, however, a voting provider does not make an organisation’s process legally compliant simply by supplying software.

The organisation still needs to identify the rules that apply to its vote and ensure the process is designed accordingly.

That is where good voting governance starts.

Key takeaways

The legal requirements for online voting in Australia depend on the type of vote and the organisation conducting it.

The most useful principles are:

Online voting can be a very effective way to run a modern ballot.

The key is to treat it as a governance process supported by technology, rather than a technology project that happens to involve voting.

If you are planning an AGM, election, member ballot, enterprise agreement vote or another formal online ballot and want to discuss the practical requirements, Vero Voting can help you work through the voting process and technology options.

Sources

The following are official Australian Government, regulator and legislation sources used to prepare this article: