Can the GDPR be used to obtain US voting information
<p>This grows out of a comment in the question <a href="https://law.stackexchange.com/questions/59457/who-has-the-right-to-access-state-voter-records-and-how-may-that-right-be-expedi/59458#59458">Who Has the Right to Access State Voter Records and How May That Right be Expediently Exercised?</a></p>
<p>If a US citizen is currently resident in the EU, can that person use a GDPR request to the proper government agency (state board or elections or a similar agency)  to obtain that person's own voter record and whatever other information about that person the agency may have in its files?</p>

<p>I suspect that US voting records would fall under Article 2(2)(a):</p>
<blockquote>
<p>Article 2</p>
<p>Material Scope</p>
<p>...</p>
<ol start="2">
<li><p>This Regulation does not apply to the processing of personal data:</p>
<p>(a) in the course of an activity which falls outside the scope of Union law;</p>
</li>
</ol>
</blockquote>
<p>I doubt it would be possible to argue successfully that a foreign election is anything other than &quot;an activity which falls outside the scope of Union law.&quot;</p>
<p>Even the territorial scope could be questioned.  This is set forth in the next article, on &quot;territorial scope,&quot; the second item of which says:</p>
<blockquote>
<ol start="2">
<li><p>This Regulation applies to the processing of personal data of data subjects who are in the Union by a controller or processor not established in the Union, where the processing activities are related to:</p>
<p>(a) the offering of goods or services, irrespective of whether a payment of the data subject is required, to such data subjects in the Union; or</p>
<p>(b) the monitoring of their behaviour as far as their behaviour takes place within the Union.</p>
</li>
</ol>
</blockquote>
<p>It is probably arguable whether processing absentee ballots from EU residents constitutes &quot;offering services to data subjects in the Union,&quot; but in this case it's likely to be more difficult to resolve that question than to determine whether the activity falls outside the scope of Union law.</p>

<p>In most US states, information on one's own voter information, including registration details and voting record, is available from the state without any need to invoke the GDPR, for any registered voter. For example, in Maryland one can visit <a href="https://voterservices.elections.maryland.gov/votersearch" rel="nofollow noreferrer">this web page</a> to request from the state Board of Elections one's voter registration record, and various other information. Most US states also have a state Freedom of Information law, and it can be used to request information which is a matter of public record, which voter registration information and voting history is. The exact procedures and costs will vary from state to state.</p>

<p>The Eleventh Amendment to the US Constitution has been interpreted (by the Supreme Court) as conferring a significant degree of sovereign immunity on the states. US courts will generally not award money damages or injunctive relief against US states unless they have waived immunity by state law. By itself, this already takes most of the teeth out of GDPR, since its remedies are basically all fines. While the European court system might refuse to recognize such immunity, and purport to issue judgments against individual states, such judgments would have no practical effect unless the US court system were willing to recognize the fines as valid.</p>
<p>Under <em>Ex parte Young</em>, the Supreme Court held that state officials may be enjoined from enforcing unconstitutional state laws, under the legal fiction that such enforcement is not an official act when the underlying policy is unconstitutional. One might therefore imagine trying to obtain injunctive relief indirectly. I doubt this would be successful. The US has no federal equivalent to GDPR and has not signed any sort of treaty or agreement with the EU regarding its applicability to the states. As a result, the Supremacy Clause is inapplicable, and there's no obvious line in the Constitution saying that states are required to respect extraterritorial foreign laws.</p>
<p>Such enforcement also raises significant separation of powers concerns. The US President enjoys more or less plenary power over diplomacy and foreign relations, with the sole exception of treaty ratification. If a US court were to apply a foreign law to a US state, this would interfere with the ability of the executive to negotiate a treaty to that effect. As a result, the state would likely argue that applicability of foreign laws is a political question to be resolved by treaty or federal law, and not by the court system.</p>

united-states gdpr voting personal-information