Secret-ballot systems

Why "secret" has to mean something specific

Mailing everyone a paper ballot is not, by itself, a secret ballot. A ballot only stays secret if nobody counting it can connect a specific vote to a specific person. That takes a design, not a good intention: something has to verify the voter was eligible to vote, and something else has to keep that identity away from the ballot once it's opened.

This matters more in an HOA director election than it sounds. Corporate law's own default rule doesn't even require a ballot at all: under California's general nonprofit corporation law, "elections for directors need not be by ballot unless a member demands election by ballot at the meeting and before the voting begins or unless the bylaws so require." Where a state has enacted a specific common-interest-development election statute, that statute typically overrides the general corporate default and makes a secret ballot mandatory for director elections, director removals, and similar votes, regardless of whether anyone demands one. Check your state's election statute and your bylaws to see which rule actually governs your association.

The two-envelope design

Where a jurisdiction spells out how a secret ballot has to work, the pattern looks like a county vote-by-mail ballot. California's statute is explicit about it:

"No name, address, or lot, parcel, or unit number" appears on the ballot itself.

Source: California Civil Code, Section 5115, California Legislative Information

The unmarked ballot goes into an unsealed inner envelope. That inner envelope goes inside a second, sealed outer envelope, on which the voter signs their own name and address. The signature verifies eligibility; the inner envelope, once separated from that signature, carries no identifying trace. See Ballot design for the full mechanics of building one of these packets.

Who actually opens the envelopes, and when

A secret-ballot system also depends on who is allowed to touch the ballots and when. Where a state regulates this closely, an independent inspector of elections, not a board member and not the management company, receives and validates ballots, and counting happens at an open, noticed meeting that members and candidates can watch. Nobody, including staff, may review ballots before that scheduled count, and once an inspector receives a ballot it becomes irrevocable. See Election inspectors and Ballot custody for who holds the materials afterward and for how long.

That timing rule is doing as much work as the envelopes. A ballot opened early by a well-meaning board member, even without reading the vote, breaks the chain that makes the whole system trustworthy.