EIIElection Integrity Index
How well does the legal framework defend against vote-altering attacks?
Dimensions
Citizen Verifiability
37.5% · 3/8| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 4.1Public verification artifactDoes law mandate a downloadable public package containing certificates, device records, and result signatures? | 1/1100.0% | § 70 codifies that 'when the vote count is concluded, the result is entered in the polling book, which is signed by the valgstyrere, and the result is communicated to those present.' § 102 codifies Ministry publication of results in Statstidende (official gazette). § 73 codifies fintælling protocol entry. § 95 codifies parallel for referendums. Public verification artifacts codified. | § view source 2026-05-19 |
| 4.2End-to-end verifiability permittedDoes law permit (or require) per-voter cryptographic receipts that prove inclusion without revealing the vote? | 0/50.0% | No candidate sections returned by FTS. | no FTS match 2026-05-19 |
| 4.3Voter-verifiable paper trailIs voter-verifiable paper record (VVPAT or hand-marked paper) legally required? | 1/1100.0% | § 48 codifies that 'voting takes place in the polling booth, where only the voter may be present. On the ballot paper the voter places a cross next to a party name or candidate name.' § 69 codifies ballot-validity grounds (all referring to paper ballots). § 43 codifies that the election commission provides paper ballot papers. § 101 codifies result-establishment based on paper ballots. Denmark's regime is exclusively paper. | § view source 2026-05-19 |
| 4.4Citizen re-tally rightCan any citizen — not just parties — legally re-tally from published precinct data? | 1/1100.0% | § 104 codifies that ballot papers, polling books, electoral rolls, voter cards, and other election material are retained by the municipal council — accessible via public-records framework. § 72 codifies that the fintælling is public. § 68 codifies that the initial count is public. Citizen access to count-stage material codified. | § view source 2026-05-19 |
Custody Hardware
50.0% · 4/8| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 2.1Hardware tamper standardAre tamper-evident or tamper-responsive hardware standards mandated? | 2/540.0% | § 45(2) codifies that 'ballot boxes shall be constructed so that no ballot can be taken out without opening the ballot box. Ballot boxes shall be capable of being locked or sealed' (Stemmekasser skal kunne låses eller forsegles). Polling-station rooms must also be arranged so no one can see how the voter votes. § 74 codifies sealed packaging of ballots after count. Tamper-evident regime codified. | § view source 2026-05-19 |
| 2.2Network isolation mandateIs internet/Wi-Fi/cellular connectivity legally prohibited on vote-casting equipment? | 0/10.0% | No candidate sections returned by FTS. | no FTS match 2026-05-19 |
| 2.3Custody documentationIs full chain-of-custody documentation required and publicly available? | 1/1100.0% | § 104 codifies retention of the election book, polling books, electoral rolls, voter cards, ballots, and other election material by the municipal council. § 104(3) codifies destruction of materials after the complaint period expires. § 72 codifies that the materials are present at the fintælling (final count). § 66 codifies postal-ballot envelope custody. § 74 codifies sealed packaging. Comprehensive chain-of-custody codified. | § view source 2026-05-19 |
| 2.4Tamper criminal penaltyAre there explicit criminal penalties for unauthorized device access? | 1/1100.0% | § 106(1) codifies penalty (fine or imprisonment up to 4 months) for violations including impartiality breaches, ballot tampering, and voter-coercion provisions. § 106(2) codifies corporate criminal liability. § 106(3) codifies penalty for double-voting between mainland and Faroe/Greenland. § 4 codifies disqualification for crime. Comprehensive criminal-penalty framework codified. | § view source 2026-05-19 |
Post Election Audit
66.7% · 6/9| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 3.1Mandatory auditIs a post-election audit legally required for every election? | 1/1100.0% | § 73 codifies that 'for each polling district the election commission shall conduct a NEW count and assessment of the cast ballots under the rules of §§ 68, 69, and 74a' — every ballot is recounted by the district commission. § 72 codifies the fintælling (final recount) the day after voting. § 68 codifies the initial public count. Mandatory dual-count of every ballot codified. “For hvert afstemningsområde foretager valgbestyrelsen en ny optælling og bedømmelse af de afgivne stemmesedler efter reglerne i §§ 68, 69 og 74 a.” | § view source 2026-05-19 |
| 3.2Audit methodWhat audit method is mandated? | 2/540.0% | § 72 codifies the FINTÆLLING — final recount conducted by valgbestyrelsen the day after voting, PUBLIC. § 73 codifies that this recount is a NEW count of every cast ballot by polling district. § 68 codifies the polling-station preliminary count, also public. § 52 codifies pre-count ballot reconciliation. Ordinal level 2: 100% manual count by hand at the polling station + 100% manual recount by district commission — stronger than fixed-percentage audit. | § view source 2026-05-19 |
| 3.3Audit triggers beyond mandatoryDoes law trigger additional audits on close margins or sworn challenges? | 1/1100.0% | § 90 codifies that 'Folketinget decides to what extent and in what manner omvalg (re-election) shall be held.' § 72 codifies the mandatory fintælling. § 22 codifies error-correction procedure. § 71 codifies result-reporting chain. § 4 codifies disqualification triggers. Comprehensive escalation framework codified. | § view source 2026-05-19 |
| 3.4Public observation of auditAre parties, media, and citizens granted observer access to the audit? | 1/1100.0% | § 72 codifies that 'the fintælling is public' (Fintællingen er offentlig). § 68 codifies that 'the vote count is public' (Stemmeoptællingen er offentlig). Every count stage is statutorily public. § 107 codifies order rules. § 124 codifies parallel for chair duties. | § view source 2026-05-19 |
| 3.5Binding forceAre audit results legally binding on the final certified result? | 1/1100.0% | § 89 codifies that 'if Folketinget decides that voting in a constituency is invalid, candidates' election in the storkreds is postponed.' § 87 codifies Folketinget's authority to approve the election validity, including reviewing Ministry calculations. § 12 codifies new-party deadline. § 13 codifies party-name approval. § 37 codifies candidate notification deadline. Folketinget's decisions on validity are binding on certification. | § view source 2026-05-19 |
Software Verifiability
5.6% · 1/9| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 1.1Source code disclosureIs voting system source code legally accessible? | 0/50.0% | No candidate sections returned by FTS. | no FTS match 2026-05-19 |
| 1.2Reproducible builds requirementMust the binary that runs in production be reproducibly buildable from public source? | 0/10.0% | No candidate sections returned by FTS. | no FTS match 2026-05-19 |
| 1.3Pre-election binary commitmentIs the running binary cryptographically committed (hash published) before polls open? | 0/10.0% | No candidate sections returned by FTS. | no FTS match 2026-05-19 |
| 1.4Election definition publicationAre ballot contests, layouts, and tabulation rules signed and published before polls open? | 0.5/150.0% | § 43 codifies that 'the election commission shall provide ballot papers for the voting in the constituency, along with notices.' § 48 codifies the voter procedure (cross next to party/candidate name). § 69 codifies ballot-validity grounds. § 98 codifies referendum ballot content. § 101 codifies referendum result establishment. Public ballot specification codified though without cryptographic signing. | § view source 2026-05-19 |
| 1.5Post-election integrity checkDoes law grant a right to verify the actual running binary matches the committed one? | 0/10.0% | § 12b codifies Ministerial rule-making on digital solution. § 63 codifies postal-vote regulation. § 64 codifies postal-ballot logging. § 62 codifies postal-ballot impartiality. The dual-count regime under §§ 68 + 72-73 (not in FTS top-5 for this datapoint) functions as the integrity verification mechanism for Denmark's paper-based system. | § view source 2026-05-19 |
Transparency Observation
50.0% · 4/8| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 6.1Domestic observer rightsAre party and civil-society observers given full procedural access? | 1/1100.0% | § 31 codifies that 'every voter has a duty to take on the role of valgstyrer (election officer) or tilforordnet vælger (assisting voter).' These bipartisan election officers are appointed by proportional representation among the municipality's voters under § 30 (also FTS-surfaced). Plus § 68 codifies that the count is public (open to observation by anyone). § 11 codifies party representation rights. Comprehensive election-officer + open-counting framework codified. | § view source 2026-05-19 |
| 6.2International observer accessAre OSCE/EU/IFES international observers admitted by default? | 0/10.0% | No candidate sections returned by FTS. | no FTS match 2026-05-19 |
| 6.3Precinct-level results publication speedAre precinct-level results legally required to be published within 24h of poll close? | 2/540.0% | § 70 codifies that 'the chair of valgstyrere shall immediately notify the chair of the valgbestyrelse of the result.' § 102 codifies Ministry publication of referendum results in Statstidende. § 21 codifies pre-election notice. § 10 codifies mandate-distribution publication. § 95 codifies parallel for referendums. Ordinal level 2: precinct results available within hours of count completion; formal publication via Statstidende. | § view source 2026-05-19 |
| 6.4Public election event logIs a public, signed, append-only election event log legally required? | 1/1100.0% | § 64 codifies that 'the municipal council records the time of receipt of a postal vote on the outer envelope. In a protocol the number of postal votes received and the date of receipt and the number of postal votes returned is recorded.' § 70 codifies vote-count protocol-keeping. § 74 codifies signed sealed packages. Protocol-keeping framework codified. | § view source 2026-05-19 |
Vendor Independence
0.0% · 0/4| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 5.1Multi-vendor capabilityDoes law permit multiple certified vendors to operate in the same election? | 0/10.0% | No candidate sections returned by FTS. | no FTS match 2026-05-19 |
| 5.2Open protocol standardsAre vote-format / device-protocol standards open and publicly documented? | 0/10.0% | No candidate sections returned by FTS. | no FTS match 2026-05-19 |
| 5.3Contract duration capAre vendor contracts capped in duration, preventing perpetual lock-in? | 0/10.0% | No candidate sections returned by FTS. | no FTS match 2026-05-19 |
| 5.4Source-code escrowIs source-code escrow with the state required as a condition of certification? | 0/10.0% | No candidate sections returned by FTS. | no FTS match 2026-05-19 |
Voter Access
35.7% · 3/7| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 7.1Ballot secrecy guaranteeIs voter–ballot unlinkability legally guaranteed and enforceable? | 0/10.0% | No candidate sections returned by FTS. | no FTS match 2026-05-19 |
| 7.2Accessibility mandateAre accessibility standards (vision, motor, language) legally required at every polling place? | 2/540.0% | § 49 codifies comprehensive disability-assistance: voters with mobility, weakness, or other limitations may request assistance, provided by 2 valgstyrere or by a person of the voter's choice (when functional limitation is verifiable). § 99 codifies parallel for referendums. § 54 codifies postal voting at hospitals and care institutions (8+ categories including nursing homes, women's shelters, disability shelters, foster facilities, etc.). § 42 codifies candidate-list preparation. § 61 codifies postal-vote ID. Ordinal level 2: comprehensive accessibility + disability-assistance + remote-voting framework codified. | § view source 2026-05-19 |
| 7.3Polling-place density floorIs there a legal floor on polling places per N voters or per geographic area? | 0.5/150.0% | § 45 codifies that 'in each polling district (afstemningsområde) voting takes place at one polling place (afstemningssted)' — explicit one-polling-place-per-district rule. § 29 codifies 5-9 valgstyrere per polling place. § 68 codifies post-poll count procedure. § 69 codifies ballot-validity grounds. Polling-place provision is codified per polling district; no strict voters-per-place numeric floor specified. | § view source 2026-05-19 |