Tennessee Checked the Voter Before Registration and Cut the Voting Machine Off From the Internet.

Where can an election system fail first: in the voter record or inside the machine?

Tennessee addressed both.

Public Chapter 473 requires secure portals that county administrators can use to verify citizenship and felony eligibility before processing a voter-registration application. A rejected applicant receives written appeal instructions, and the portal information remains confidential.

Picture a county clerk receiving an application days before the registration deadline. The portal returns a citizenship mismatch or an unresolved felony record. The clerk now needs enough information to determine whether the record belongs to the applicant and enough time to send a useful notice. A rejection letter that merely says “ineligible” does not tell a citizen which record must be corrected.

Confidentiality protects immigration, criminal-history, and identity information from becoming a public voter file. Access logs should show who opened the portal record and why, while the applicant should receive the specific basis needed to challenge the result.

Public Chapter 775 allows the citizenship portal to reach the federal SAVE system when the Department of Homeland Security provides secure web-service access. That gives administrators another federal record to consult.

SAVE can confirm information held by federal immigration agencies, but it is not a complete national citizenship list. Naturalization, data-entry delays, and identity matching can produce an answer that needs follow-up. County officials should treat a nonconfirmation as the beginning of verification, then give the applicant a real chance to supply updated citizenship evidence.

Someone may receive a driver's license as a lawful permanent resident and become a citizen later. If the portal reads the older record as the final answer, an eligible voter can be rejected because the government has not caught up with the person's life.

The appeal and correction process therefore carries as much importance as the initial check. Eligibility verification protects elections only when an updated citizen can correct an outdated file quickly.

Public Chapter 394 trains poll workers to recognize temporary identification issued to noncitizens that cannot serve as voter ID. It changes neither the credential nor voter eligibility.

At the check-in table, the training should help a poll worker reject an ineligible document without making assumptions about the person holding it. A naturalized citizen may still possess an older temporary credential while also having an acceptable voter ID. The worker must evaluate the document presented under Tennessee's voter-ID rules and direct the voter to any available provisional process.

Public Chapter 371 prohibits voting machines from connecting to the internet and bars internet tabulation of marked ballots. It also revises provisional-ballot, address-confirmation, and record-maintenance procedures.

The network rule changes procurement, setup, testing, and incident response. Election officials must verify that modems, wireless radios, remote-access tools, and internet-dependent tabulation functions are absent or disabled. Results can still move through authorized physical procedures, but the marked-ballot system cannot rely on an online connection.

An air gap is only as credible as the inspection behind it. Tennessee should document equipment models, ports, configurations, logic-and-accuracy testing, chain of custody for removable media, and any exception used for maintenance. “Not connected” should be a verified condition, not a label on a box.

Tennessee put one safeguard at registration and another at tabulation. One system must correct a bad record. The other must keep a marked ballot off the internet.

Election integrity requires a clean voter file and a machine with no open network door.

This is our read of the laws. We encourage you to read them yourself and reach your own conclusions.