Most people in the UK have no idea that when they registered to vote, they handed their name and address to a system that legally sells that information to commercial buyers. Not through a breach. Not through a hack. Through a piece of legislation that’s been quietly operating in the background for decades. If you’ve never heard of the edited electoral register, buckle up, because UK electoral roll data privacy is a mess, and the consequences for ordinary residents are genuinely concerning.
The two registers: what most people don’t know exists
Every local authority in England, Wales, Scotland, and Northern Ireland maintains two versions of the electoral register. The full register is restricted, it can only be accessed by candidates, political parties, credit reference agencies under specific rules, and a handful of other tightly defined entities. Then there’s the edited register, sometimes called the open register. That one is available to anyone who wants to buy it. Any company. Any individual. No restriction on purpose.
When you register to vote, you’re given the option to opt out of the edited register. But the opt-out isn’t exactly screaming at you from the page. The Electoral Commission’s own guidance explains this distinction, but research consistently shows that a significant portion of the population either missed the option or didn’t understand what they were agreeing to. According to The Representation of the People (England and Wales) Regulations 2001, the edited register is explicitly permitted for commercial use, no justification required from the buyer.
The data in there is simple but potent: your full name and your home address, tied to a specific property at a specific point in time.
How data brokers actually ingest and weaponise this
Here’s where it gets interesting from a technical standpoint. The edited register isn’t just bought once and left on a shelf. Commercial data brokers, companies like Experian, Acxiom, and dozens of smaller UK-based players, purchase the register updates periodically, then ingest that data into much larger identity graphs.
The process typically works like this. The raw register data (name, address, sometimes age range) gets normalised and deduped against existing records. It’s then cross-referenced with other commercially available datasets: Companies House directorships (which we’ve covered in detail when discussing how attackers abuse Companies House data for corporate identity fraud), CTPS/TPS telephone records, social media profile matches, County Court Judgement records, Land Registry ownership data, and loyalty card purchase history sold on by retailers.
What emerges from that cross-referencing isn’t just a name and address. It’s a reasonably complete consumer profile: probable age, household composition, property value estimate, financial behaviour indicators, and sometimes inferred political and lifestyle characteristics. Credit reference agencies are legally permitted to use the full register for identity verification, but they also often hold enriched versions of the open register data that’s been layered with behavioural signals over years.
I’ve tested this myself by running searches through several UK people-finder services, the kind that anyone can pay a few quid to access. Within about 90 seconds I had a full historical address trail for a friend who hadn’t opted out of the edited register, going back across three moves spanning nine years. Their current address, their previous flat, and one before that. All accurate. All sitting there, legally purchasable, linked to their name.
The OSINT implications for UK residents
From an OSINT perspective, the edited register functions as a seed dataset. It’s one of the first places a competent investigator (or a malicious actor) will look when trying to establish someone’s current or historical address. The reason it’s so valuable isn’t just accuracy, it’s the timestamp. Each edition of the register reflects who was registered at which address at a specific point in time, which means persistent access to historical editions gives you a movement trail.
Combine that with the kind of open-source intelligence techniques we’ve covered in the GOV.UK One Login teardown and the broader OSINT tooling landscape, and you’ve got a serious doxxing risk, particularly for people who have reason to keep their address private. Domestic abuse survivors. Journalists. Witnesses. People who’ve had stalking incidents. The edited register opt-out exists, but it only prevents future sales. It doesn’t reach back into data broker databases where your details have already been ingested and enriched.
There’s also the aggregation problem. A single data point from the register is mildly useful. Cross-referenced with rogue Android apps harvesting contact data (a threat we’ve broken down when looking at overlay attacks targeting UK banking apps), or with leaked credential databases, and that mild usefulness becomes something much sharper. Your register entry becomes the anchor that ties a dozen other data fragments to a confirmed real-world identity and location.
What opting out actually does (and doesn’t do)
Opting out of the edited register stops your local council from including you in the version they sell going forward. You need to do this when you register, or separately contact your local Electoral Registration Office. The Electoral Commission’s website has the process. Some councils let you do it online; others still want a form.
What opting out does not do: it doesn’t scrub your data from brokers who already purchased previous editions that included you. Data brokers are not required to delete historic open register data simply because you’ve since opted out. The ICO’s guidance on legitimate interests and the UK GDPR makes requests complex here, brokers will argue they have a legitimate interest in maintaining accurate identity records, and they’ve generally been successful in resisting erasure requests on that basis.
The practical upshot is that if you’ve been on the edited register for any period of time, your address history is almost certainly sitting in multiple commercial databases already. Opting out now reduces future exposure but doesn’t undo the past. If you’re serious about mitigation, you’ll want to send Subject Access Requests to the major UK data brokers (Experian, Equifax, TransUnion, and the smaller people-search operators) and follow up with erasure requests under Article 17 UK GDPR, forcing them to articulate their legal basis for retention.
Why this system still exists
The honest answer is lobbying and commercial inertia. The edited register generates revenue for local councils through licence fees, and a well-funded data broker industry has spent years arguing that the register underpins legitimate commercial processes like fraud prevention, direct marketing, and identity verification. That’s true to a degree. But “legitimate commercial use” is doing a lot of heavy lifting when the same data ends up in people-finder sites that anyone can query for a few pounds with zero verification of who’s asking or why.
There have been parliamentary questions about reform. The Law Commission has looked at electoral law. But as of 2026, the edited register remains legal, functional, and actively sold. Until the legislation changes, UK electoral roll data privacy is something every resident needs to manage themselves, because the system certainly won’t do it for them.
Check your registration. Opt out if you haven’t. Then send those SAR letters.
Leave a Reply