Union Voting Software in Australia: Security, Fairness and Transparency

Friday, 21 August 2026, 12:33 pm

Union Voting Software in Australia: Security, Fairness and Transparency
BlogVoting

For a union, an election is more than a ballot.

It is one of the clearest tests of whether members believe their organisation is genuinely democratic. If members are unsure who was entitled to vote, whether their vote was counted correctly, or whether the ballot was properly overseen, confidence can disappear quickly.

That is why choosing union voting software in Australia should not be treated simply as an IT decision.

The voting system needs to support the organisation’s rules, protect voter privacy, prevent duplicate or unauthorised voting, produce reliable results and provide enough evidence to demonstrate that the process was conducted properly.

There is also a regulatory layer. Registered organisations, including unions covered by the Fair Work (Registered Organisations) Act 2009, have specific requirements around elections, ballots, nominations, voting eligibility and scrutiny. The Fair Work Commission states that organisation rules must provide for elections and include matters such as nominations, ballots, scrutineers and terms of office.

That makes the distinction between secure voting technology and a legally appropriate election process particularly important.

What should union voting software actually do?

Good voting software should make the election easier to administer without making the underlying governance requirements harder to manage.

At a minimum, a serious union ballot system should address five areas:

Voter eligibility
Ballot secrecy
Vote integrity
Transparent scrutiny and reporting
Information security and privacy

These are closely connected.

A system that securely authenticates members but allows administrators to see how individual members voted is not suitable for a secret ballot. Likewise, a system that keeps votes anonymous but cannot reliably establish who was entitled to participate creates a different governance problem.

The strongest systems separate these functions.

1. Voter eligibility

Before a member reaches the ballot paper, the system needs to establish that they are entitled to vote.

This can involve matching a unique identifier or other member information against the authorised voter roll.

The objective is straightforward:

The right person gets access to the ballot, and each eligible voter can vote only once.

For larger unions, this becomes particularly important where there may be multiple branches, membership categories, electorates or different voting entitlements.

A good voting platform should allow the election rules to determine who can vote rather than forcing the organisation into a generic one-member-one-vote model.

2. Secret voting

Secret ballots are fundamental to democratic elections.

The person administering an election may need to know that a particular member has voted. That does not mean they should be able to see that member’s voting choices.

This separation is one of the most important design principles in electronic voting.

The Fair Work Commission’s guidance for electronic protected action ballots, for example, requires that the ballot agent can identify who has voted while there is no way to identify how an employee voted.

The same principle is useful when assessing other union voting systems: participation needs to be verifiable without compromising ballot secrecy.

3. Preventing duplicate or unauthorised votes

A voting system should enforce the election rules rather than rely on administrators manually checking spreadsheets.

Authentication controls can prevent unauthorised access, while ballot controls can prevent a member from submitting multiple votes.

For an electronic ballot, this should be tested before the election opens.

Testing should cover questions such as:

Can an ineligible member access the ballot?
Can an eligible member vote more than once?
What happens if a member loses their connection?
Can an administrator alter a submitted vote?
Can voting records be traced to individual ballot selections?
What happens when the voting period closes?
Can the final result be independently reconciled?

These questions are more useful than simply asking whether a platform is “secure”.

Security matters because union ballots contain valuable personal information

Union voting systems may handle names, membership information, contact details, authentication information and voting records.

The privacy implications therefore deserve proper consideration.

The Office of the Australian Information Commissioner says organisations covered by the Australian Privacy Principles must take reasonable steps to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure. The OAIC’s current APP 11 guidance also emphasises both technical and organisational measures.

That means security should not be reduced to a claim such as “the website uses encryption”.

A responsible procurement process should examine the broader security environment.

Questions to ask a voting software provider

Before selecting a provider, ask:

Where is voter information stored?
Who can access voter data?
How are administrator accounts protected?
Is multi-factor authentication available?
How are votes separated from voter identity?
Are administrative actions logged?
Are audit trails retained?
How are backups protected?
What happens to voter data after the election?
How does the provider respond to a suspected data breach?
Are independent security audits or certifications available?
What controls exist around third-party service providers?

The OAIC specifically identifies access security, ICT security, third-party providers, data breaches, retention and destruction or de-identification as areas organisations should consider when protecting personal information.

For organisations that are covered by the Privacy Act, data breach planning also matters. Under the Notifiable Data Breaches scheme, certain entities must notify affected individuals and the OAIC where an eligible data breach is likely to result in serious harm.

Fairness is about more than counting votes correctly

A technically accurate count does not automatically make an election fair.

Fairness starts before voting opens.

Members should have clear information about:

who can nominate
who can vote
the positions being contested
nomination deadlines
voting dates
voting instructions
the method used to determine the result
how questions or disputes will be handled

The Fair Work Commission specifically identifies nominations, ballot eligibility, the closing of the voter roll and scrutineers among the matters that organisation rules must address.

A voting platform should support these requirements rather than obscure them.

Accessibility matters too

A member who cannot easily access the ballot because of their device, location or technical limitations should not be placed at an unnecessary disadvantage.

Online voting can make participation easier for members who work different shifts, live remotely or cannot attend a physical meeting.

But accessibility needs to be considered alongside the organisation’s governing rules and any statutory requirements applying to the particular ballot.

Convenience alone does not determine whether electronic voting is legally available.

Transparency does not mean exposing individual votes

One of the most common misunderstandings about transparent elections is that transparency requires every part of the voting data to be visible.

It does not.

A secret ballot should remain secret.

Transparency instead means that the organisation can demonstrate that the process worked as intended.

That can include evidence showing:

the authorised voter population
when voting opened and closed
how many eligible members participated
that duplicate votes were prevented
how votes were counted
the final totals
relevant system activity
the procedures followed by election officials or scrutineers

The Fair Work Commission’s guidance on scrutiny also demonstrates the importance of protecting secrecy while allowing appropriate scrutiny of ballot material.

This is where a properly designed audit trail becomes valuable.

The audit trail should answer questions without revealing the ballot

Imagine a candidate challenges an election and asks:

“How do we know the result wasn’t altered after voting closed?”

A good system should be able to provide evidence about the process without revealing how individual members voted.

That distinction is critical.

The goal is verifiable process integrity, not identifiable voting behaviour.

The role of scrutineers

Scrutineers are another important part of election transparency.

The precise role of scrutineers depends on the applicable rules and election framework. In relevant Fair Work Commission processes, scrutineers can have rights to observe aspects of ballot scrutiny and raise concerns about the handling or counting of votes.

Voting software should therefore support the governance process around scrutiny rather than attempt to replace it.

For a union considering a digital ballot, ask how the provider handles:

access to election records
result verification
ballot reconciliation
formal and informal votes where applicable
objections or queries
reporting
retention of election records
independent review

The software is a tool. The election framework remains the authority.

A crucial distinction for Australian unions: not every union vote is the same

This is where generic “online voting for unions” advice can become misleading.

A union might need to conduct:

an election for office
a branch election
a member resolution
a plebiscite
a referendum
a constitutional or rule-change vote
an enterprise-related employee ballot
another internal member ballot

Different legal and constitutional requirements may apply.

For registered organisations covered by the RO Act, the Fair Work Commission currently states that elections must generally be conducted by the Australian Electoral Commission unless the organisation or branch has an exemption. It also states that direct voting system elections must use a secret postal ballot unless an exemption permits a different method.

That point should be front and centre when evaluating union election software.

An online voting platform does not, by itself, make an election compliant.

The organisation needs to establish first which rules apply to the particular ballot and whether electronic voting is authorised.

The Fair Work Commission’s current election process also involves the Commission and the AEC for relevant registered organisation elections.

What about rule changes?

A union considering electronic voting should also check its rule book before changing the way members vote.

The Fair Work Commission states that changes to the rules of a registered organisation do not apply until they are approved by the Commission.

The Commission published new Model Rules in 2025, including specific election material developed in collaboration with the Australian Electoral Commission.

This is useful guidance for organisations reviewing their election processes, but an organisation should always check its own current registered rules rather than assuming the Model Rules automatically apply.

Common mistakes when choosing union voting software

Choosing software based on price alone

A cheap survey tool may be perfectly adequate for collecting feedback.

An election is different.

If the result may be challenged, the organisation needs to be able to demonstrate how eligibility was controlled, how votes were protected and how the result was produced.

Treating authentication as anonymity

Knowing who has voted and knowing how someone voted are two different things.

A secret ballot system needs to preserve that distinction.

Assuming “online” means “compliant”

It doesn’t.

Compliance depends on the legislation, rules, ballot type, approvals and procedures that apply to the particular vote.

Giving administrators too much access

Election administrators should have the access they need to perform their role — and no more.

A mature system should use appropriate permissions and maintain records of significant administrative activity.

Forgetting the process around the software

Election notices, nominations, voter rolls, candidate information, voting instructions, communications, scrutiny and result declarations all matter.

Software cannot compensate for an unclear process.

A practical checklist for union voting software

Before signing up with a provider, ask the following.

Governance

Does the proposed voting method comply with the organisation’s current rules?
Does the ballot require approval, exemption or involvement from an external authority?
Who is responsible for conducting the election?
Are scrutineers required?
What counting method applies?

Security

How are voters authenticated?
Can each eligible member vote only once?
How is ballot secrecy maintained?
Is multi-factor authentication available?
Are administrator actions logged?
How are backups and access controls managed?

Transparency

Is there a complete audit trail?
Can the organisation reconcile participation and results?
Can the result be independently reviewed?
Can reports be produced without exposing individual voting choices?

Privacy

What personal information is collected?
Where is it stored?
Who can access it?
How long is it retained?
What happens when the election is finished?
What is the provider’s data breach process?

Member experience

Can members vote from mobile devices?
Are voting instructions clear?
Can the system accommodate members across different locations?
Is support available during the ballot?
Can the system handle the expected number of voters?

The Australian Signals Directorate’s Essential Eight is also a useful reference point when assessing broader cyber security maturity, although it should not be treated as a specific certification requirement for every voting provider. ASD describes the Essential Eight as prioritised mitigation strategies designed to make it harder for attackers to compromise systems.

Where Vero Voting can assist

For union and member-based organisations, the useful role of a voting provider is not simply to provide a webpage where people click a candidate’s name.

The provider should help translate the organisation’s voting rules into a controlled election process.

Vero Voting‘s election voting services support nomination and election workflows, voter management, different voting methods and election administration.

Vero’s online voting platform also separates voter authentication from the recorded ballot, provides voting receipts and is designed to prevent duplicate voting.

For organisations assessing security, Vero Voting states that its information security management system is certified to ISO/IEC 27001:2022, independently audited by Insight Assurance.

The right approach, however, is to start with the ballot — not the software.

Define the rules, determine the legal and governance requirements, establish the voting method, then select technology that can support the process.

That sequence prevents a surprisingly common problem: trying to make the governance process fit the software.

Key takeaways

Union voting software should be judged on more than whether it can count votes.

A strong solution should provide:

Secure voter authentication without compromising ballot secrecy
Reliable eligibility controls to prevent unauthorised voting
One-vote controls appropriate to the ballot
Transparent audit trails that support scrutiny
Strong privacy and security controls
Clear reporting and reconciliation
Accessible voting for members
Flexibility for different voting and counting rules
A process that aligns with the union’s constitution, rules and applicable legislation

Most importantly, Australian unions should determine the legal framework that applies to their particular ballot before selecting an electronic voting method.

For registered organisation elections, the Fair Work Commission’s current guidance should be treated as a starting point, particularly around AEC involvement, voting methods, exemptions and election procedures.

A secure voting system can strengthen member confidence. But the real measure of a good election is whether the organisation can demonstrate, after the result is declared, that the process was fair, controlled and properly conducted.

If your organisation is planning a union election, member ballot or other complex vote and wants to discuss the right voting process, contact Vero Voting or request a demonstration.

Sources


Frequently Asked Questions

Is online voting legal for Australian unions?

It depends on the type of ballot and the rules applying to the organisation. For registered organisations covered by the Fair Work (Registered Organisations) Act 2009, elections generally need to be conducted by the AEC unless an exemption applies, and direct voting system elections generally require a secret postal ballot unless an exemption permits another method.

What should union voting software include?

A suitable system should provide strong voter authentication, one-vote controls, ballot secrecy, secure data handling, audit trails, reliable counting and reporting. It should also be configurable around the organisation’s actual voting rules rather than imposing a generic voting method.

How can electronic voting remain anonymous?

A well-designed system separates voter authentication from the stored ballot choice. This allows the system to establish that an eligible member voted without allowing administrators or other parties to determine how that member voted.

How can a union make an online election transparent?

Transparency comes from a verifiable process rather than exposing individual votes. Audit trails, voter-roll controls, participation records, counting records, result reports and appropriate scrutiny procedures can provide evidence that the election was conducted correctly while preserving ballot secrecy.

What should unions ask before choosing an online voting provider?

Ask about voter authentication, ballot secrecy, audit trails, administrator access, data storage, privacy, security certifications, backups, retention, incident response, reporting and support. Also confirm that the proposed voting method is permitted under the organisation’s rules and applicable regulatory requirements.

Need support with your next Voting?

Contact Us

Subscribe to our blog

Stay up to date on the latest topics for voting solutions

[stc-subscribe]



    Subscribe

    If you want to personalise your subscription, click here