Privacy impact assessments play a key role in safeguarding democratic institutions. In the US case EPIC v. Presidential Advisory Commission on Election Integrity, the efforts of the Trump voter commission to obtain personal voter data came to an end after EPIC argued that the Commission had failed to complete a privacy impact assessment required by law. In fact, just a few days after EPIC filed suit, the Commission suspended data collection and the personal data that had been wrongfully obtained was deleted. This panel explores the relationship between privacy (or data protection) impact assessments and the protection of democratic institutions in the United States and around the world. What lessons can be learned from EPIC v. Commission? And what are the strategies going forward to protect the privacy of voter data?
• How Privacy Impact Assessment can be a suitable safeguard even in the electoral field?
• Is Data Protection Impact Assessment from EU a model to be exported in the US?
• Electoral privacy should be regulated as a specific sector?