Georgia’s QR Code Removal Project – A Costly Band-Aid for a Broken System

The Georgia Secretary of State’s (SOS) recent presentation to the Senate Appropriations Subcommittee on the QR Code Removal Project raises serious questions about the state’s priorities and its commitment to election security, transparency, and compliance with the law. The $65,981,895 price tag to remove QR codes from ballot marking devices (BMDs) is staggering, but even more concerning is the SOS’s recommendation to ignore the mandate of SB189 and Georgia’s election law (O.C.G.A. 21-2-300) altogether. This decision not only undermines public trust but also perpetuates the use of a deeply flawed and insecure voting system.

The QR Code Problem: A Symbol of Voter Disenfranchisement

The QR code on Georgia’s ballot marking devices has been a lightning rod for criticism since its implementation. The public’s frustration is understandable: the QR code is machine-readable but not human-readable, leaving voters unable to verify that their selections are accurately recorded. Federal Judge Amy Totenberg has already declared this a violation of Georgia law, and the Curling v. Raffensperger trial has further exposed the vulnerabilities of the state’s election system. The infamous hacking demonstration in January 2024, where a ballot marking device was compromised with a ballpoint pen in open court, underscores the urgent need for reform.

Despite these glaring issues, the SOS’s presentation to the subcommittee seems more focused on justifying inaction than addressing the root problems. The recommendation to delay QR code removal until the current 10-year contract with Dominion expires in three years is a blatant attempt to sidestep the law and kick the can down the road. This approach not only ignores the will of the legislature but also fails to address the public’s legitimate concerns about election integrity.

Breaking Down the Costs: A Misguided Investment

The SOS’s cost breakdown for removing QR codes is eye-opening. The total implementation cost of $65,981,895 includes $14,652,654 for software updates and $51,329,241 for new equipment, such as printers, scanners, and servers completely replacing all existing equipment except the BMD’s. While the software updates are covered under the existing Dominion contract, the hardware costs are exorbitant and raise questions about the state’s procurement process and long-term planning. This figure is more than half the costs of the original investment in 2019.

Even more troubling are the technical issues with the proposed upgrades. The use of outdated software and hardware, such as Microsoft SQL Server 2016 and Android 8.1, highlights the system’s inherent vulnerabilities. The fact that the latest Dominion Democracy Suite (version 5.20) was only certified in February 2025 and still relies on antiquated technology is a glaring red flag, further eroding confidence in the system’s security. Many vulnerabilities have been identified by cybersecurity experts, CISA, and the Department of Homeland Security. Spending millions to upgrade a system that was not designed with security in mind is akin to putting a Band-Aid on a bullet wound.

A Better Path Forward: Hand-Marked Paper Ballots

The SOS’s recommendation to delay QR code removal and consider purchasing a new system in three years is not only fiscally irresponsible but also ignores a simpler, more effective solution: hand-marked paper ballots. Security-grade hand-marked paper ballots are fully verifiable by voters and eliminate the need for proprietary, insecure technology. By following existing law (O.C.G.A. 21-2-437), which mandates a full hand count of all races at the precinct level in public view, Georgia can restore trust and transparency in its election system.

Hand-marked paper ballots are not only more secure but also more cost-effective. The $66 million proposed for QR code removal could be better spent on implementing a robust hand-marked paper ballot system, training poll workers, and ensuring compliance with election laws. This approach would address the public’s concerns, comply with SB189 and O.C.G.A. 21-2-300, and eliminate the reliance on a proprietary system with known security vulnerabilities.

Restoring Trust in Georgia’s Elections

The QR Code Removal Project is a symptom of a larger problem: Georgia’s election system is controlled by a proprietary, secretive system that prioritizes convenience over security and transparency. The public’s trust in the electoral process has been eroded by years of mismanagement, legal battles, and cybersecurity vulnerabilities. It is time for Georgia to take bold action to restore that trust.

The solution is clear: abandon the flawed and insecure ballot marking devices in favor of hand-marked paper ballots. This approach not only complies with the law but also ensures that every voter can verify their selections and that every vote is counted accurately. By conducting full hand counts at the precinct level in public view, Georgia can set a new standard for election integrity and transparency.

The SOS’s recommendation to delay QR code removal and consider purchasing a new system in three years is a disservice to Georgia’s voters and a violation of the legislature’s mandate. It is time for the state to prioritize the will of the people over the interests of vendors and bureaucrats. Georgia’s elections should be secure, transparent, and accountable—and that starts with ditching the QR codes and embracing hand-marked paper ballots.


Secretary of State’s Testimony to the Senate Appropriations Subcommittee on QR Code Removal Project, February 12, 2025

Technical Notes on QR Code Removal Project:

  1. MS SQL Server 2016 is 4 versions behind current version and Microsoft support sunsets 7/14/2026.
  2. Dominion Democracy Suite 5.17 “certified” on 3/16/2023 was tested for MS SQL Server 2019 Standard SP2 and Express with Advanced Services. Proposal calls for MS SQL Server 2016.
  3. The 5.17 Suite was tested for Android 8.1.0-2.2.4 for the Ballot Marking Devices.
  4. Latest Dominion Democracy Suite 5.20 was “certified” on 2/4/2025 with MS SQL Server 2022.
  5. The 5.20 Suite was tested on Android 8.1.0-2.5.2 for the Ballot Marking Devices.
  6. Android 8.1 was released 12/5/2017 and is no longer supported with security updates.  Latest version is Android 15. 
  7. It is unknown whether the proposal is for Democracy Suite 5.17 or 5.20.
  8. This budget doesn’t reflect an additional $4 million to upgrade battery backup units for the existing election system.