The Trump administration cannot immediately restart a federal system designed to check entire state voter rolls against citizenship records, after a divided appeals court refused to lift a nationwide block on the program.
In a 2–1 decision filed Friday, September 4, the U.S. Court of Appeals for the District of Columbia Circuit denied the administration’s emergency request to revive the modified Systematic Alien Verification for Entitlements program, known as SAVE. The system’s bulk-search and Social Security-number features therefore remain disabled while the broader appeal moves forward.
The decision arrives less than two months before the November 3 midterm elections. It does not finally decide whether the expanded system is lawful—but it prevents the government from using the disputed version while that question is litigated.
What the appeals court actually decided
The administration asked the D.C. Circuit to pause a lower-court judgment that had shut down the modified SAVE system nationwide. Chief Judge Sri Srinivasan and Circuit Judge Robert Wilkins rejected that request; Circuit Judge Gregory Katsas dissented.
The majority said the government had not met the demanding standard required for a stay pending appeal. Its 53-page order and accompanying opinions emphasized that several of the administration’s central legal theories were raised too late in the lower court and had not been adequately developed.
The court also said the government had not made a sufficiently strong showing that it would ultimately prevail on its argument that the system complies with federal restrictions governing Social Security information. The panel ordered the underlying appeal expedited and directed the parties to propose an accelerated briefing schedule within 10 days.
That distinction matters: the ruling is a denial of emergency relief, not a final appellate judgment on every claim in the case.
How SAVE became a voter-roll tool
SAVE began as an immigration-status verification system for government benefit programs. For decades, agencies generally checked individuals using identifiers already held by immigration authorities.
Following a March 2025 executive order, the Department of Homeland Security and Social Security Administration expanded the system. The modified version allowed participating agencies to search using Social Security numbers and upload large batches of records, making it possible to compare whole voter-registration lists with federal citizenship and immigration data.
Under that process, an election agency could submit a person’s name, date of birth and a numeric identifier. The system could then compare the entry with Social Security and Homeland Security records and return citizenship, immigration or death-status information.
The administration says those capabilities help states enforce the federal ban on noncitizen voting and maintain accurate voter rolls. Opponents argue the system combines sensitive personal information in ways Congress did not authorize and can generate inaccurate results that place eligible voters at risk.
Why a federal judge shut it down
The case was brought by the League of Women Voters, several of its state chapters and the Electronic Privacy Information Center. U.S. District Judge Sparkle Sooknanan ruled in June that the modified program violated disclosure restrictions in the Social Security Act and Privacy Act, lacked adequate public notice and was implemented arbitrarily.
Her judgment vacated the expanded system, including its bulk-upload and Social Security-number search functions. The Associated Press reported that Sooknanan found the aggregation of sensitive data could cause lawful voters to be wrongly flagged or removed.
The administration disputes that conclusion. The Justice Department previously said it would continue defending the system, while DHS has argued that reliable citizenship checks are a legitimate election-security tool.
The privacy dispute behind the election fight
The appeals court focused heavily on how Social Security data moves through the modified system. When a user submits a partial Social Security number that produces a match, the Social Security Administration may send the complete number to DHS. The agencies also exchange match results involving names, birth dates and citizenship records.
The majority concluded that, at this preliminary stage, the administration had not convincingly shown that those transfers escape the Social Security Act’s confidentiality rules. It also pointed to evidence that inaccurate federal citizenship data could force citizens to prove their eligibility or risk cancellation of their registrations.
Katsas disagreed. His dissent argued that the government was likely to prevail and that the data exchanges were compatible with the agencies’ lawful role in determining eligibility for voting and public benefits.
What happens before Election Day
For now, the disputed bulk-search system remains unavailable. The administration can continue pursuing its appeal and could seek further emergency relief, including from the Supreme Court.
The accelerated schedule means the D.C. Circuit intends to consider the case quickly. But with election deadlines approaching, Friday’s decision has an immediate practical effect: states cannot rely on the modified nationwide SAVE system to conduct the mass citizenship checks the administration sought.
The legal fight is therefore far from finished. Its next stage will determine not only how states verify voter eligibility, but how much personal data federal agencies may combine and disclose in the process.
This report draws on the Reuters report, the D.C. Circuit’s September 4 order, prior reporting from the Associated Press and materials from the Electronic Privacy Information Center.
