When Staff Call the Voters

Summary

• Public reporting about AFRINIC's 23 June 2025 election alleged that an election official or staff member contacted a resource holder while questioning a Power of Attorney. AFRINIC's later notices confirmed disputes about authority documents, suspension, investigation and annulment, but did not publish a complete call record or final finding that independently settles who called, under what instruction or with what exact words.
• Verification calls are not inherently improper. An election administrator may need to confirm corporate authority, recover a failed registration or warn a member about suspected account misuse. The same access becomes dangerous when timing, selection, wording and consequences are undocumented.
• Staff hold member telephone numbers and email addresses for registry service. AFRINIC's privacy policy limits designated-staff access to organisational purposes, while election rules require neutrality and compliance with data-protection law. Election contact therefore needs a specific purpose and controlled role.
• A defensible contact protocol identifies who may initiate a call, the trigger, approved questions, verified destination, two-person oversight, contemporaneous log, recording or signed note, member confirmation, quarantine decision and independent review. Staff should never ask how a member voted or advocate a candidate.
• The 2025 controversy should be treated as unresolved where public evidence is incomplete. Reform should not presume either misconduct or innocence; it should make the next decisive contact reproducible from records rather than competing recollections.

One call can change the legal meaning of a ballot

Suppose a person arrives with an instrument authorising them to vote for a member organisation. The document appears complete, but someone raises doubt. An official telephones a number associated with the member. The person answering says they did not sign, did not know about the instrument or no longer hold the relevant role. The election official then rejects the authority, quarantines a ballot or pauses voting.

The call looks like a simple fact check. It is actually a chain of decisions. Who selected the number? Was it the registered corporate contact, a public switchboard, a number supplied by the challenger or a personal contact in the document? How did the caller verify the respondent's identity? Did the question distinguish “Did you sign this?” from “Did your organisation authorise this?” Was the respondent able to inspect the instrument? Could another officer within the company have authority? Was language interpretation needed? What did staff record?

Each answer changes evidentiary weight. A denial from a verified authorised officer reached through the registry's pre-existing record can justify immediate caution. A denial from an unidentified person reached through a disputed source is weaker. A corporate organisation may have several directors, delegated officers and external agents. One person's surprise does not automatically invalidate another person's lawful act.

Timing magnifies the effect. A check performed before voting leaves room for documents and response. A call made minutes before close may trigger suspension without time to test the denial. If the disputed authority carries several votes, one conversation affects multiple principals or contests.

The point is not that staff should never call. It is that a call can become electoral evidence. Evidence needs provenance, method, preservation, opportunity to respond and a decision-maker with authority. Without those elements, later entities cannot distinguish diligent verification from intervention, or an accurate denial from misunderstanding.

What the AFRINIC public record establishes

AFRINIC's June 2025 election materials show a mixed electronic and in-person process. Electronic voting ran in June, and in-person voting occurred on 23 June. Proxy instruments and authorised representation required documentary checks. The election was suspended during the in-person proceedings and later annulled.

The receiver's notice to members said suspicions of irregularities were raised particularly about Powers of Attorney, complaints went to authorities and police investigation had not reached final conclusions. The receiver said he was unable at that point to report the extent of irregularities. A new election was organised without proxies or Powers of Attorney.

Contemporaneous public reporting alleged that a committee member or staff entity removed or examined a disputed authority document and called the resource holder. Those reports described the call as a trigger in the controversy. They do not substitute for the primary call record, witness statements tested through a fair process or a final official finding. Public AFRINIC notices did not identify a caller, publish a script, provide a recording or explain the exact corporate-authority question.

This distinction must remain explicit. It is fair to say a voter-contact allegation formed part of the public controversy. It is not fair to state as established fact that a named employee breached confidentiality, that the respondent was the only lawful authority, or that the call alone caused annulment when the complete evidence is unavailable.

The institutional finding is the missing record. A decisive verification act was publicly alleged, while the official account remained high-level. That gap prevented members from evaluating whether contact was authorised, accurately conducted and proportionately used.

An accountable review should reconstruct the event without presuming its conclusion. Identify the instrument, custody, trigger, caller, destination, respondent, questions, language, witnesses, record, immediate decision and later investigation. If some evidence no longer exists, the report should say so and narrow any finding accordingly.

Staff access begins with a service relationship

Registries collect member contacts to provide number-resource services, manage accounts, communicate fees, support security and administer the association. AFRINIC's privacy policy lists telephone, fax and email details among collected information and says only designated staff access information for organisational purposes and the professional relationship.

Election administration is an organisational purpose, but that phrase is not unlimited permission. Purpose limitation asks why a particular contact field is used, by whom and for what decision. A member gives a telephone number expecting service and account communication. Using it to verify a suspected forged authority may be compatible if election rules define the need. Using it to lobby, intimidate, discover candidate preference or selectively challenge opponents would not be.

Contact data also carries institutional power. A caller from the registry may be perceived as speaking for the organisation, receiver or election committee. The member may depend on registry services and feel unable to refuse. Even a neutral question can sound accusatory if it arrives without notice during a disputed vote.

The privacy analysis should therefore include fairness and power, not only lawful access. Members should be told before the election that officials may contact designated corporate officers to verify authority, which channels may be used, what information will be requested and how to confirm the caller is genuine. They should never be asked for passwords or candidate choices.

Access logs should show which staff viewed contact details for election purposes. Bulk exports require approval and protection. A committee member who is not ordinarily entitled to member data should not receive a spreadsheet merely because verification might arise. Staff can perform the call under instruction while the committee receives the result and evidence.

Member information is necessary infrastructure. Neutrality depends on turning access from personal discretion into a controlled service with a defined electoral purpose.

Verification is legitimate when the trigger is objective

Election officials cannot accept every instrument uncritically. Signatures can be forged, corporate roles can expire and accounts can be compromised. Direct confirmation may be the fastest way to protect the principal. The question is what triggers it.

Objective triggers can include a mismatch with the registered officer, inconsistent signatures, missing notarisation where required, duplicate authority, a revocation received through a verified channel, a member's own report of misuse or a random sample announced in advance. Every instrument meeting the trigger should receive the same treatment.

Subjective triggers are more dangerous: a candidate's suspicion without evidence, an unfamiliar holder, a member from a disfavoured group, a staff impression or the political importance of the associated vote. Such concerns may justify referral to an independent officer, but staff should not improvise intrusive contact based on them.

The trigger record should exist before the call. It identifies the rule, observed discrepancy, person authorising contact and entitlements temporarily affected. The instrument should be copied and secured. If the objection comes from a entity, their exact claim should be recorded without treating it as fact.

Random verification can reduce selection bias if feasible. A published percentage of all proxy instruments can be confirmed before voting, with every high-concentration holder subject to review. Members then expect contact and no campaign can plausibly claim only its opponents were called.

Urgency may require immediate action when a member reports identity theft. The official can suspend the single entitlement, contact through a verified route and notify an independent supervisor. Broader suspension should depend on evidence that the problem cannot be isolated.

Verification protects legitimacy when the same observable facts produce the same check. Without an objective trigger, a call is not merely evidence collection; it is a discretionary choice about which votes receive suspicion.

The destination number is part of the evidence

A telephone answer is only as reliable as the route to the respondent. Calling a number printed on the disputed document lets a possible forger control the verification channel. Calling an old registry contact may reach someone who left the organisation. Searching the web may find a switchboard unable to identify corporate authority.

The protocol should rank sources. First use the pre-existing verified member record frozen before the dispute. If that contact is implicated or unavailable, use a separately verified corporate officer from the membership agreement or recent authorised update. Public company records may corroborate identity but should not silently replace registry rules.

The caller must confirm the respondent without revealing unnecessary personal data or the entire allegation. A callback through an official switchboard, member-portal message or known corporate email can strengthen identity. For sensitive action, two channels may be warranted.

Corporate role matters. The person answering may be an administrative contact authorised for resources but not empowered to revoke a director's Power of Attorney. The caller should ask what role the person holds and consult the governing authority standard. “We have never heard of this” is useful information, not necessarily a legal conclusion.

Changes made during the election need caution. If a contact is replaced after a dispute begins, the reviewer should know who requested the change and why. Otherwise one faction inside a company can seize the verification channel. The frozen election record and current service record should remain distinguishable.

The log should identify the number's provenance without publishing it. An auditor can test that the caller used an authoritative route. The affected member can confirm or challenge the respondent's role.

A call to the wrong but plausible person can produce a confident false denial. Treating destination provenance as evidence prevents a conversational impression from becoming an unexplained veto.

Questions should verify authority, not suggest an answer

Telephone wording affects evidence. “You did not sign this proxy, did you?” invites confirmation. “Are you aware someone is trying to use your vote?” implies fraud. “Did your organisation authorise Person X to act for it in this election?” is more neutral but may still be too broad.

An approved script should proceed in stages. Confirm identity and role. Explain the official purpose and how the respondent can verify the caller. Identify the instrument by date, holder and purported signatory without revealing candidate choice. Ask whether the respondent signed, whether they can confirm the signatory's authority and whether the organisation has revoked or replaced the act. Invite documentary response.

The caller should not ask which candidate the member supports, whether it wants the holder's votes counted for a perceived bloc, or whether it agrees with the election's politics. If the respondent volunteers candidate information, the caller should stop that line and exclude it from the decision record where possible.

Language should be arranged. A complex authority question asked through an improvised second language can produce apparent denial when the respondent misunderstood “proxy,” “representative” or “Power of Attorney.” A neutral interpreter should be bound by confidentiality and identified in the record.

The respondent needs time. In a company, the person may have to consult directors or legal counsel. Immediate quarantine can protect the ballot while written confirmation follows. Demanding a final answer during an unexpected call risks converting uncertainty into rejection.

At close, the caller should read back the factual response and explain next steps. A secure written summary should be sent for confirmation. Silence should not automatically become assent, but the decision-maker can weigh the contemporaneous note.

Scripts do not make judgment mechanical. They make questions consistent and later review possible. A decisive call should not depend on whichever phrase occurred to one staff member in a tense room.

Dual control protects caller and voter

One person should not initiate, conduct, interpret and act on a decisive call. Dual control divides those powers. An election officer authorises contact on a recorded trigger. A trained staff member conducts it with a witness or secure recording where lawful. A separate decision-maker evaluates the response.

The witness can confirm wording, identity steps and technical problems. They should not turn the call into an intimidating panel. The member should know who is present and why. If recording requires consent, obtain it; otherwise create a contemporaneous signed note and preserve call metadata.

The caller should not know candidate selections. They need the authority instrument and status, not the ballot. The decision-maker should receive only facts relevant to validity. This reduces the chance that political expectations colour the check.

Where a committee member raised the concern, another member or independent officer should authorise the call. If staff have a prior dispute with the principal or holder, reassign it. Conflict decisions belong in the incident file.

Dual control also prevents later scapegoating. Staff often act under pressure from committees, legal advisers or senior officials. A complete instruction record shows whether the employee followed authorised steps. If the rule was inadequate, responsibility remains institutional rather than being placed solely on the person who dialled.

Urgent circumstances may make a second live staff member unavailable. A recorded supervisor approval and prompt independent review can serve as a fallback, but the exception should be visible. Repeated exceptions reveal poor planning.

The aim is not bureaucracy for its own sake. A five-minute call can invalidate a member's representation and contribute to suspension. Requiring two roles and a preserved account is proportionate to that consequence.

Contact logs must describe substance without exposing choice

An election contact log should record time, initiating event, authority, caller, witness, destination source, respondent identity method, language, questions, factual answers, documents requested, immediate status and follow-up. It should identify every entitlement affected.

The log should not contain candidate preference. If choice is volunteered, the record can state that irrelevant electoral content was offered and not considered, with sensitive detail restricted or removed under the retention policy. The call should end if it becomes campaign discussion.

Logs need integrity. Entries should be timestamped and changes preserved. A handwritten note rewritten later is weaker than a contemporaneous signed record. Telephone metadata can corroborate duration and destination without proving content. A recording, where lawful and consented, is strongest for wording but carries privacy and security burdens.

Access should be layered. The member and affected holder receive the factual basis needed to respond. The election committee receives the validity evidence. The auditor can inspect the complete record. Public reporting describes the incident and outcome with personal data redacted.

Aggregate publication should show how many verification contacts occurred, triggers, outcomes and whether any resulted in rejection, correction or no change. This reveals selective use. If one class of instrument received calls and another equivalent class did not, the institution must explain the distinction.

Retention should cover the challenge period and foreseeable litigation, then delete recordings and unnecessary personal detail under a defined schedule. Destruction should be suspended when a complaint is filed. Members should know that policy before contact.

The absence of a log does not prove a malicious call. It prevents a strong finding about what happened. In the AFRINIC controversy, a published substantive record would have allowed the institution to defend a proper verification or acknowledge a departure. Missing evidence left motive and wording to public speculation.

Quarantine one entitlement before stopping an election

When a call raises doubt, the immediate remedy should be as narrow and reversible as possible. Mark the disputed authority pending, prevent an uncast entitlement from being used and secure the documents. Continue unaffected voting unless evidence shows a broader problem.

If the ballot was already cast, secrecy complicates isolation. A well-designed system can associate an authority token with a sealed ballot record without revealing choice, allowing exclusion only under authorised review. If that link does not exist, officials need a materiality analysis and may face a wider remedy.

Suspending the whole election may be necessary if the issuance process is broadly unreliable, many instruments share the defect or staff cannot prevent duplicate voting. The decision should state the condition, number potentially affected, contests implicated and why quarantine cannot protect valid voters.

One denial should not automatically invalidate every document held by the same representative. It may justify reviewing the holder's other mandates under the same objective trigger. Each principal must be contacted independently through verified channels. Association among documents is evidence for review, not proof of common invalidity.

Time matters. Near close, a short extension may preserve unaffected participation while review occurs. Officials should not let the disputed party benefit from delay or make all other members bear the cost without necessity. An independent officer should control extensions and suspension.

The final remedy can include acceptance, rejection, corrected authority, rerun of one contest or broader annulment. It should follow verified scope and margin. Police investigation of forgery may continue separately; the election may need a provisional decision under its own standard.

Narrow quarantine preserves options. Immediate broad cancellation destroys valid participation before facts are settled. A mature institution begins with preservation and isolation, then expands only when evidence requires it.

The respondent needs a right to correct the record

Telephone answers can be incomplete. A respondent may initially deny knowledge, then discover that another director signed. A caller may misstate the holder's name. The instrument may use a lawful delegation unfamiliar to ordinary staff. Fairness requires a response period.

The election office should send a secure summary of the issue, authority standard and deadline for documents. The purported signatory, principal organisation and holder should have an opportunity to respond. They need not receive private information unrelated to their mandate.

The deadline can be short during live voting, but it must be realistic. A company operating across countries may need several hours to reach directors. If time cannot be provided before close, quarantine preserves the question. Uncertainty should not be converted into a permanent adverse finding merely because administrators chose a compressed schedule.

Conflicting corporate claims need independent adjudication. Election staff should not choose which faction controls a company based on familiarity. Governing documents, company records, membership agreements and court orders may be necessary. The decision should state the evidence and standard.

Correction also applies to staff. If a caller used the wrong number, mistranslated or omitted a material answer, the log should be amended visibly and the affected decision reconsidered. A culture that treats correction as embarrassment encourages concealment.

The member should be able to complain without sending the case back to the caller's supervisor alone. An election committee or external reviewer can hear it promptly. Where the validity could alter the outcome, certification waits or reserves the issue.

Due process is not an obstacle to fraud prevention. It separates genuine protective action from a decisive accusation made through one side of a call. The stronger the initial denial, the more useful a documented opportunity to confirm it properly.

Staff neutrality needs an election-specific code

General professional conduct rules rarely answer election contact. Staff need a short election code covering access, communication, campaigning, conflicts, records and escalation. It should apply from the opening of voter registration through certification and challenge.

The code should prohibit endorsement in an official capacity, use of member data for campaigns, disclosure of who has or has not voted except authorised aggregates, discussion of candidate prospects during service contacts and selective procedural help. Staff remain individuals with lawful rights, but election-sensitive roles may require temporary limits and disclosure.

Neutral service remains permitted. Staff can send common reminders, answer published procedural questions, correct account details under standard rules and perform approved verification. The test is whether similarly situated members receive the same opportunity and whether the act is recorded.

Conflicts include employer, family, financial or active campaign relationships with candidates and principals. Affected staff should recuse from relevant decisions and data access. Recusal should not be punitive; it protects the employee and result.

Supervisors should train staff on scripts, phishing, identity checks, data minimisation and incident preservation. Role-play can reveal leading questions and authority ambiguity. Contractors and committee volunteers with member contact access need the same rules.

Breaches require a proportionate route: report, preserve, investigate, allow response and decide discipline separately from ballot remedy. Punishing an employee does not determine whether votes remain valid; validating votes does not erase a data breach. The two questions should not be conflated.

AFRINIC's 2026 election guidelines expressly identify transparency, fairness, neutrality, integrity and consistency, require Nomination Committee impartiality and apply data-protection principles. An election-specific staff code would turn those principles into instructions for the moment a disputed vote produces a telephone number.

Campaign contact and official contact must look different

Members receive election messages from candidates, associations, community groups and the registry. Confusion creates risk. A staff call may be mistaken for campaigning; a campaigner may impersonate official verification.

Official contact should use announced numbers or a callback method through the registry website. The caller identifies name, role, incident reference and purpose. The member can pause and verify independently. No official asks for passwords, one-time codes or candidate preferences.

Campaigns should not use registry member data unless governing rules and privacy law permit it. LACNIC election pages have repeatedly warned against bulk electoral messaging using contacts obtained from its database. The principle applies equally to insiders: privileged service data should not become a campaign list.

Common reminders should be sent simultaneously and use neutral wording. Targeted reminders based on incomplete registration can be legitimate if every member in the status receives them. Targeting likely supporters or opponents is not. The selection query and message version should be preserved for audit.

If officials publish turnout updates, the rule should be fixed in advance. Staff should not privately tell a campaign which members remain uncast. Even participation status can enable pressure in a small electorate.

Members need one complaint route for suspicious contact. The registry can verify whether a caller or message was official, preserve impersonation evidence and warn others. Reports about staff should go to an independent officer, not disappear into ordinary customer service.

Visual and procedural distinction protects everyone. A verified official channel allows necessary contact; campaign freedom continues on lawful channels; members can recognise when institutional authority is being invoked. In a contested election, ambiguity itself is power.

Data protection asks necessity and proportionality

AFRINIC's 2025 replacement guidelines stated compliance with Mauritius's Data Protection Act 2017, and its election materials collected substantial designated-voter identity information. Data-protection principles require more than security. Processing should be lawful, purpose-specific, necessary, accurate, limited and retained appropriately.

A verification call must therefore answer necessity. Could the question be resolved from existing corporate records? Is telephone contact needed now? Could a secure portal message give the member better evidence and time? Urgency may justify calling, but the reason should be recorded.

Proportionality asks what is disclosed. The respondent may need the holder's identity and instrument date, not every principal represented or candidate context. Staff should not read sensitive identity numbers over an unexpected line. Follow-up documents should use secure transfer.

Accuracy is central. Member contact records can be stale. The registry should remind organisations to update them before the election and provide a correction stage. Staff cannot claim strong verification from a database they know contains former employees without secondary checks.

Retention should distinguish the contact log from the recording and identity documents. The decision and minimum evidence may need longer preservation; raw audio and copies can be deleted after challenge periods unless litigation holds apply. Access after the election should narrow.

Transparency notices should describe possible verification without revealing anti-fraud details that enable evasion. Members need to know categories of data, purposes, recipients, rights and complaint authority. Unexpected processing undermines trust even when lawful.

Data protection does not bar election checks. It disciplines them. The same framework that lets the registry hold member data gives members a reason to expect that one official will not use it selectively in the most politically sensitive week.

An independent complaint route is indispensable

A member who believes a staff call was misleading, coercive or unauthorised cannot fairly complain only to the same operational chain. The reviewer needs independence from staff management, candidates and the immediate election decision.

The complaint form should accept the caller's number, time, description, witnesses and available records. It should preserve telephony logs and data-access logs automatically. The complainant receives acknowledgement and protection from service retaliation.

The staff member also receives fairness: the allegation, evidence, opportunity to respond and representation where appropriate. Public controversy should not turn an employee into a substitute for institutional accountability. Orders and training are part of the inquiry.

The reviewer can order narrow interim measures: preserve evidence, stop further calls under the disputed method, assign a new team, quarantine an entitlement or extend a deadline. Broad suspension requires evidence of systemic risk or inability to isolate impact.

Findings should separate privacy, conduct and electoral effect. An unauthorised data access may warrant discipline even if it did not change a vote. A properly authorised call may reveal an invalid instrument and justify exclusion. Poor documentation may prevent a confident result without proving the caller lied.

Appeal should exist for material decisions, with a short timetable compatible with certification. Court review remains available under applicable law, but the association needs a competent first forum that can act before harm becomes irreversible.

Aggregate outcomes should be published: complaints, categories, upheld findings, remedial action and unresolved matters. Personal details can be protected. Repeated allegations without findings may indicate communication failure; repeated upheld cases indicate control failure.

Independence turns a staff-contact controversy from factional narrative into an evidence question. It is the institutional answer when trust in the caller and trust in the complainant are both contested.

Audit every contact class, not only the disputed call

Post-election review should not isolate the famous incident. It should map all official contacts: voter reminders, failed-registration support, authority verification, proxy confirmation, incident follow-up and complaint communications. Selectivity appears only in comparison.

For each class, report recipients, trigger, channel, timing, script version, staff role and outcome. Sample records for compliance. Compare regions, instrument types and holder concentrations where privacy permits. If one group received extra help, determine whether a published neutral criterion explains it.

Data-access logs can reveal searches and exports unrelated to assigned tasks. Telephony and email records can corroborate that calls occurred. Member surveys may identify unlogged contact, though recollection should be treated carefully.

The audit should test counterfactual consistency. Would the same mismatch on another member's instrument have produced a call? Did staff use the same authority standard for direct representatives and proxies? Were denials and confirmations documented equally? Did any campaign receive information from official contact?

Limitations belong in the report. Missing recordings, personal devices or incomplete call logs narrow findings. The auditor should not fill gaps with confidence. Recommendations can still address the control weakness that permitted uncertainty.

Management should respond publicly and assign dates before the next election. Revised scripts, access permissions and training should be tested. Where a staff member was unfairly accused, a reasoned finding can restore reputation; where conduct failed, institutional reform should accompany individual consequences.

The purpose is learning and legitimacy, not merely blame. A single dramatic call may dominate attention while hundreds of undocumented reminders create a larger structural concern. Comprehensive contact auditing reveals the system rather than the anecdote.

A protocol for the next decisive call

Before voting, appoint a neutral verification team and independent authoriser. Publish the circumstances in which members may be contacted. Freeze authoritative contact records, provide a member correction period and prepare multilingual scripts. Configure logs and secure evidence storage.

When a trigger occurs, preserve the questioned instrument and record the rule. The authoriser decides whether contact is necessary and which entitlement is quarantined. Staff choose the destination from the pre-existing verified record, not the disputed document alone.

The caller identifies the official purpose and gives a callback route. With a witness or lawful recording, they confirm respondent identity and corporate role, ask neutral authority questions and invite written evidence. They avoid candidate choice and explain that uncertainty does not itself equal a final rejection.

A separate officer reviews the response with the instrument and governing rule. The principal and holder receive a factual notice and short opportunity to correct. Broader action requires a documented materiality decision. Every step is timestamped.

The independent complaint officer can preserve, pause and review. At close, the auditor includes verification contacts in reconciliation: how many instruments checked, confirmed, corrected, rejected or unresolved. Public reporting protects identities while explaining impact.

This protocol is not excessive for ordinary service calls because these are not ordinary service calls. They occur in a period when staff knowledge and member dependence intersect with competition for governing authority. One answer can determine whether a ballot exists.

Automation may support the record but should not replace judgment about corporate authority. Human verification remains valuable precisely because organisations are complex. Discipline makes that human act reliable.

The unresolved lesson of 2025

The public record around AFRINIC's June 2025 election contains a serious allegation and an incomplete institutional explanation. It establishes that authority documents became disputed, voting was suspended, results were annulled and a police investigation was not complete when the receiver addressed members. It does not publicly settle every fact of the reported call.

That uncertainty should constrain language, not inquiry. Naming misconduct without tested evidence would be unfair. Declaring the contact unquestionably proper because staff had administrative duties would be equally unsupported. The appropriate conclusion is that AFRINIC lacked, or did not publish, the record needed to make a decisive verification act credible to all sides.

The remedy is forward-looking and specific. Limit access to member contacts. Define verification triggers. Separate caller, authoriser and adjudicator. Use approved neutral scripts. Preserve destination provenance and content. Give the organisation a right to correct. Quarantine narrowly. Publish aggregate contact activity. Provide independent complaints and reasoned certification.

These controls protect staff as much as voters. A person following a sound protocol can show what instruction they received and what the member said. The institution can defend a necessary anti-fraud check without asking the public to trust memory. A member can challenge error without turning every call into evidence of conspiracy.

Registry elections depend on staff. They maintain the records that make organisational voting possible and often know how to resolve urgent discrepancies. Neutrality does not require silence. It requires that communication serve a defined electoral purpose under rules that do not change with the identity of the vote.

When staff call voters, the line carries institutional power. The next election should ensure it also carries notice, restraint and an audit trail strong enough that no result depends on whose account of the conversation is louder.