Key Takeaways
- More than half of U.S. states and territories rely on the same vendor, IDEMIA, that New Jersey says caused a software flaw leading to 6,600 non‑citizens being registered to vote.
- Several states (Mississippi, Rhode Island, Missouri, Idaho, Illinois, and others) have launched reviews of their voter‑registration systems after the New Jersey revelation.
- IDEMIA maintains that its role is limited to transmitting applicant data; it places responsibility on each state’s Secretary of State to verify accuracy.
- New Jersey Governor Phil Sherrill revealed that fewer than 400 of the mistakenly‑registered non‑citizens actually cast ballots, all of whom were entered as Democrats, Republicans, or unaffiliated.
- Federal officials have pledged to investigate and have used the incident to highlight broader concerns about non‑citizen voting and the need for tighter safeguards.
- Most states using IDEMIA’s services do not employ them for voter‑registration capture; instead, separate state processes or citizenship‑status checks filter eligibility.
- Audits and routine checks in many jurisdictions have found no irregularities, but the incident underscores the importance of independent verification before data moves from DMVs to voter rolls.
- The fallout may prompt tighter federal oversight, revisions to vendor contracts, and stronger safeguards in states that currently rely on automated data transfers for voter registration.
Overview of the New Jersey Incident
In late July 2026, New Jersey Governor Phil Sherrill announced that a software error in the state’s driver‑license and identification‑card system had mistakenly added roughly 6,600 non‑citizens to the voter‑registration database for the 2023 and 2024 election cycles. The error originated when applicants answered “no” to the citizenship question on their driver‑license application, yet the system recorded their intent to register to vote as affirmative. Although fewer than 400 of those individuals actually voted, the incident prompted immediate scrutiny of the underlying technology.
Scope of the Vendor’s Footprint
IDEMIA, a French‑based technology firm that supplies identity‑related security services—including facial‑recognition, TSA PreCheck, and mobile‑identification solutions—has contracts with at least 36 states and territories covering driver‑license issuance and related electronic processing. The company’s software is widely used to print ID cards, capture facial images, and collect applicant data. While its primary function is to facilitate the issuance of identification documents, a subset of its services includes automatic transmission of registration information to election officials in some jurisdictions.
States Initiating Reviews
Following New Jersey’s disclosure, USA TODAY reached out to every state and U.S. territory that maintains a contract with IDEMIA. Officials from Mississippi, Rhode Island, Missouri, Idaho, and several others confirmed they were conducting system reviews or requesting meetings with the vendor to verify that no similar registration errors existed. These reviews are being carried out by state election offices, motor‑vehicle departments, or joint task forces focused on data integrity.
How IDEMIA’s Software Works in DMVs
In many states, IDEMIA’s technology handles the mechanical aspects of ID production and data capture, but it does not independently decide whether an applicant is eligible to vote. Instead, the software records applicant responses and forwards them to state databases. In states where voter registration is automatically offered at the DMV, the applicant’s answers to citizenship questions determine whether the registration data are transmitted. IDEMIA simply transmits the information it receives; it does not validate citizenship status or flag anomalies.
New Jersey’s Response and the Mistaken Registrations
New Jersey’s investigation revealed that 6,600 non‑citizen applicants had inadvertently answered “yes” to the voter‑registration prompt despite indicating “no” to the citizenship question. The state’s election officials traced the discrepancy to a software bug that misinterpreted the input field. Governor Sherrill emphasized that the error persisted for an extended period, providing time for the erroneous records to be entered into the voter rolls. Although fewer than 400 of those individuals cast ballots, they were registered under various party affiliations, prompting concern about the potential impact on election outcomes.
Federal Reaction and Broader Election Concerns
The episode has attracted attention at the federal level, with the Department of Justice announcing an investigation into the New Jersey case. Assistant Attorney General Harmeet Dhillon indicated that the Justice Department’s Civil Rights Division will examine whether the mistaken registrations constitute an unlawful dilution of American votes. This development follows repeated assertions by former President Donald Trump and Homeland Security Secretary Mark Wayne Mullin that thousands of non‑citizens may be illegally registered across several states, a claim every affected state has denied.
State‑Level Safeguards and Variations
Not every state relies on IDEMIA for voter‑registration capture. Louisiana, for instance, uses the firm solely for license issuance and does not transmit registration data. Illinois and Maine similarly employ IDEMIA for ID production but have built-in safeguards that require applicants to explicitly confirm citizenship before entering the voter‑registration stream. In Idaho, which is exempt from the National Voter Registration Act because it offers same‑day voter registration, officials reached out to the vendor to verify that no registration data were being processed through the DMV system.
Findings from the States That Have Investigated
Initial examinations in Missouri and Mississippi have returned no evidence of systemic errors. Missouri’s Department of Revenue, which contracts with IDEMIA for ID printing, confirmed that the vendor merely receives a “produce these IDs” file and does not determine voter eligibility. Mississippi’s Secretary of State Michael Watson reported that his office is collaborating with the Department of Public Safety to audit the registration pipeline, yet no irregularities have been identified to date. Rhode Island’s election division noted that routine audits of randomly selected DMV records have historically caught any inconsistencies, and none have surfaced since the New Jersey incident.
Potential Implications and Next Steps
The incident highlights a critical gap in the intersection of identity‑verification technology and election integrity. While many states have robust citizen‑status checks, the reliance on a single vendor for data transmission in several jurisdictions creates a potential choke point for accidental errors. In response, federal advocates may push for stricter oversight of vendor contracts, mandatory independent audits, and enhanced data‑validation protocols before registration data are uploaded to voter rolls. States may also consider adding redundant safeguards—such as secondary citizenship verification or manual spot‑checks—to prevent similar oversights. Ultimately, the fallout could reshape how DMVs and election officials coordinate data, reinforcing the principle that technology must be paired with rigorous human oversight to protect the sanctity of the ballot.