California Civil Code §§ 5125 & 5200
Retention and inspection
Once the ballots are counted, they do not become scrap. Ballots, signed envelopes, voter lists, candidate registration lists and proxies become association election materials — retained in the association's custody and open to inspection by members.
Civil Code § 5125 — the text
Reproduced verbatim from the California Legislative Counsel's published text and verified word-for-word against a second source (leginfo (Legislative Counsel official bulk code database, LAW_SECTION_TBL) · California Public Law (Public.Law)). California statutes are government edicts and carry no copyright. This is an unofficial reproduction — the official version is published by the Legislative Counsel at leginfo.legislature.ca.gov, and that version governs.
Machine-readable: /data/5125.json — the same text with its subdivision anchors, dates and sources.
Civil Code § 5200 — the text
Sources differ. Second-source discrepancy in (a)(1): the official Legislative Counsel database reads "in Sections 5565 and 5810" (plural), while california.public.law renders "in Section 5565 and 5810". The official reading is adopted as authoritative; the public.law form appears to be an artifact of that site's automatic citation linking, and the plural is grammatically required by the two cited sections. No other word-level differences between the two sources. Text taken verbatim from the Legislative Counsel of California official code database (LAW_SECTION_TBL in pubinfo_2025.zip, the same data that backs leginfo.legislature.ca.gov) and independently compared word-by-word against california.public.law. The only differences were whitespace artifacts around hyperlinked section citations on public.law (e.g. "Section 5105 ."), not textual differences. The "heading" field is an editorial descriptive label written for this dataset; California Civil Code sections carry no official heading in the statutory text itself.
Reproduced verbatim from the California Legislative Counsel's published text and verified word-for-word against a second source (leginfo (Legislative Counsel official bulk code database, LAW_SECTION_TBL) · California Public Law (Public.Law)). California statutes are government edicts and carry no copyright. This is an unofficial reproduction — the official version is published by the Legislative Counsel at leginfo.legislature.ca.gov, and that version governs.
Machine-readable: /data/5200.json — the same text with its subdivision anchors, dates and sources.
What becomes a record
The category is wider than people expect, and it is the width that matters: the materials have to be enough, taken together, to let someone reconstruct whether the election was conducted properly without having been there.
- The ballots themselves.
- The signed outer envelopes, which are what prove eligibility was checked.
- The voter list, showing who was entitled to vote and with what voting power.
- The candidate registration list.
- The proxies, as instruments — see § 5130.
Three things that are not enumerated but on which every defence depends: evidence that notice was given, per member; the consent register showing who was entitled to vote electronically and who had switched; and the version of the election rules that applied, retained as a version rather than as whatever the rules happen to say now.
Retention runs with the challenge window
A member may bring an action over a flawed secret-ballot election for a year after the result is announced. Retention that expires before that window closes is retention that fails at exactly the moment it is needed — which is why the practical retention period is driven by § 5145 rather than by storage convenience.
Inspection does not reopen the secret ballot
A member's right to inspect election materials is a right to verify the procedure, not to learn how their neighbours voted. The record has to permit the first without enabling the second — which is a property a system either has by construction or cannot acquire afterwards. See § 5120 on why the separation has to be structural.
Custody
The materials are the association's, not the inspector's and not the vendor's. An inspector who holds them after the engagement, or a platform that keeps them on terms that make retrieval depend on an active subscription, has created a problem the association will discover at the worst possible moment.
Two questions worth asking any provider before an election rather than after: where do the materials live when the engagement ends, and what does the association receive if the relationship stops. The answer should be a complete, portable set of records that reads without the vendor's software.
The conflict nobody plans for
Retention is a duty to keep. Privacy law gives individuals a right to have their data erased. For an association operating only in California the tension is manageable; for a manager or platform operating across jurisdictions — California alongside Europe, say — it is a design question that has to be answered before the first election rather than at the first request.
It is not resolved by choosing one law over the other. It is resolved by a documented retention schedule that states what is kept, on what legal basis, for how long, and what happens at the end — and by building so that personal data can be severed from the evidentiary record without destroying the record's integrity.
A record that cannot be replayed is not much of a record
Keeping the ballots proves what was submitted. It does not prove how the result was derived. The association also needs the roll as it stood at the record date, the rules as they stood, and a tally that can be reproduced from those inputs — otherwise answering the question § 5145 actually asks, whether a defect changed the outcome, means arguing from recollection against a statutory presumption.
Practical shape
- Close the election into a fixed set. At certification, the materials stop being working files and become a record: enumerated, sealed, and listed in the inspector's report.
- Keep the inputs, not only the output. Roll at the record date, rules version, consent register, notice delivery evidence, proxies, ballots.
- Make it readable without you. Open formats, a manifest, and no dependency on a live system to interpret it.
- Schedule the ending. A retention period stated in advance, tied to the challenge window, with a documented disposal step — not an archive that grows until someone deletes it in a panic.