Decision-maker Anonymity¶

Version: v1 · 2026-10-07 · History
Prime #: 1601
Domain group: Professional & Organizational Practice
Origin domain: Law & Governance
Subdomain: Protected Collective Decision Processes → Law & Governance
Also from: Political Science, Scholarly Communication
Aliases: Decision Contributor Anonymity, Anonymous Decision Contribution
Related primes: Information Asymmetry, Confidentiality, Blinding, Peer Review, Vouched Anonymity

Core Idea¶

Decision-maker anonymity lets an individual's contribution enter a collective decision while a specified interested audience cannot reliably attribute that contribution to the person. The hidden item may be a contributor's name, as with numbered jurors, or the link between a known contributor and a particular choice, as with a secret ballot. It does not mean that nobody knows the person's identity or that the whole decision is secret.[^{ref-7750588b9c5e][}ref-066f3561e517][^ref-978c1d27968a]

A quick test asks four questions: Who contributes? Which individual act counts? Who wants to attribute it? What blocks that audience from verifying the person-to-act link? The contributor may know their own act, and an authorized institution may know some identities. Anonymity is relative to the named audience and protected link.

How would you explain it like I'm…

The Mystery Vote Box

Your class is voting on which game to play. Everyone writes a choice on a slip of paper and drops it in a box, and then all the slips get counted. Everybody saw you put in a slip, but nobody can tell which slip is yours. Your vote still counts, but nobody can tell which pick was yours.

Counted but Not Traced

Decision-maker Anonymity is when your part in a group decision still counts, but certain people can't figure out which part was yours. In a secret class vote, everyone knows you voted, and your vote is counted, but no one can match your slip to you. Sometimes it's your name that's hidden instead, like a contest judge whose name the contestants are never told. It's about hiding things from specific people, not from everybody: the teacher running the contest still knows who the judge is. It can make it harder to pressure someone about their choice, but it doesn't make all unfairness go away.

Untraceable Decision Input

Decision-maker Anonymity is an arrangement where someone's contribution to a group decision is still used, but a specific interested audience can't reliably trace that contribution back to the person. What gets hidden comes in two forms: the contributor's identity itself (jurors known only by number to the parties in a trial), or the link between a known person and their particular choice (everyone knows you voted, but not how). So anonymity is always relative: anonymous to whom, and about what? The county clerk knows you're registered and showed up; the election just never connects your ballot to your name. In single-blind peer review, the author doesn't know which reviewer wrote a report, while the editor reads it and makes the actual publication call, so the reviewer contributes but isn't the final decision maker. The usual reason for this design is to make targeting, bribing, or retaliating against an individual harder, but it is a reason, not a guarantee, and it also limits what affected people can check.

Decision-maker Anonymity is an information-control arrangement in which an individual's input to a collective decision remains operative while a designated interested audience cannot reliably attribute that input to its human source. Two distinct objects can be protected: the contributor's identity (an anonymous or numbered jury whose names are withheld from the parties) or the contributor-to-act link (a secret ballot, where voter registration and turnout are known but the voter-to-choice mapping is not). The concept is therefore defined by an audience and an attribution question, not by total secrecy: others may know the person, and much of the process may be open, as when parties still see questionnaires and conduct voir dire with a numbered jury. It is a recurring cross-institutional relation rather than a single legal rule; courts, election-system standards, and peer review each implement it differently. Single-blind peer review is a qualified case: the reviewer is shielded from the author, but the reviewer is a contributor whose report the editor uses, not the final publication decision maker. The standard rationale is that unattributable contributions are harder to target, buy, or verify, which weakens bribery, intimidation, and retaliation. That rationale is not a guarantee those pressures or bias vanish, and concealment carries a cost: it reduces what affected parties can scrutinize. The tradeoffs and safeguards have to be specified for each institution.

Broad Use¶

Jury selection: In United States v. Salvatore, juror names were replaced with numbers and withheld from parties, while questionnaires and voir dire remained available. The Fifth Circuit treated this as a limited, case-specific arrangement requiring a serious safety basis and fair-selection safeguards.[^ref-7750588b9c5e]
Elections: EAC voting-system guidelines bar a direct voter-to-ballot association and regulate limited indirect links for encrypted uncast ballots. Voter registration and participation history may remain known while the cast choice stays unlinked.[^{ref-066f3561e517][}ref-978c1d27968a]
Scholarly review: In single-blind review, the author ordinarily does not know the reviewer who wrote a report. This is a qualified contributor case: the report informs an editor, who makes the publication decision.[^ref-2dd198b2452a]

Clarity¶

The key question is not simply whether a name is hidden. A voter's name may be known while their choice is not linked to it; parties may lack a juror's name while still receiving useful information for voir dire. Name the precise contribution, audience, and permitted information before calling an arrangement anonymous.[^{ref-978c1d27968a][}ref-7750588b9c5e]

Manages Complexity¶

The same role test compares very different designs without importing one institution's rules into another. It separates identity withholding, act unlinkability, and who can access the remaining records. If the excluded audience can cheaply reconstruct the contributor-to-act link, the protection fails for that audience. Whether the arrangement reduces coercion or impairs scrutiny is a local question, not a guaranteed effect.[^{ref-7750588b9c5e][}ref-066f3561e517][^ref-94ad071ac51b]

Knowledge Transfer¶

The reusable pattern is an unequal knowledge and verification relationship about an individual contribution. That makes Information Asymmetry an internal part of this Prime: the contributor knows their own act, while an interested excluded audience cannot readily verify the attribution. The court's voir-dire protections, ballot-record rules, and journal review policy remain setting-specific.[^{ref-7750588b9c5e][}ref-066f3561e517][^ref-2dd198b2452a]

Relationships to Other Abstractions¶

Current abstraction Decision-maker Anonymity Prime

Parents (1) — more general patterns this builds on

Decision-maker Anonymity is part of Information Asymmetry Prime

The arrangement contains a material, costly-to-verify attribution knowledge gap between a contributor or authorized process and the excluded interested audience.

Hierarchy path (1) — routes to 1 parentless root

Decision-maker Anonymity → Information Asymmetry → Asymmetry

Not to Be Confused With¶

Confidentiality: a rule limiting disclosure of information held by someone. A ballot design may instead remove a readable person-to-choice link.
Blinding: information is withheld from an evaluator to avoid influencing that evaluator; here the evaluator's or contributor's attribution is withheld from another audience.
Vouched Anonymity: an intermediary verifies a hidden person's predicate and stakes credibility for a relying party; that intermediary is not required here.
Guaranteed safety: secrecy can make targeting or verification harder, but the cited guidance does not show that intimidation, bribery, or retaliation becomes impossible.[^ref-94ad071ac51b]

References¶

[^ref-7750588b9c5e]: United States Court of Appeals for the Fifth Circuit, United States v. Salvatore, No. 96-30221, revised opinion, Apr. 14, 1997, §III “Anonymous Jury,” printed pp.23–27. Official original opinion. Supports the specific numbered-jury arrangement and that court's safeguards; it is not a universal jury rule or proof of protective effect.

[^ref-066f3561e517]: U.S. Election Assistance Commission, Voluntary Voting System Guidelines Version 2.0, Requirements, Feb. 10, 2021, Principle 10 “Ballot Secrecy,” especially 10.2 and 10.2.1-A–F, printed pp.195–199. Official adopted voluntary technical standard; supports the described record controls and exceptions, not a guarantee that all elections prevent coercion.

[^ref-978c1d27968a]: U.S. Election Assistance Commission, Voter Lists, Registration, Confidentiality, and Voter List Maintenance, official agency explainer, §2 “Voter Roll Confidentiality,” paragraphs on voter-file vote choice and voter history. Distinguishes participation history from vote choice; it does not imply that voter identity is secret.

[^ref-2dd198b2452a]: COPE Council, Who owns peer reviews?, discussion document, version 2, Sept. 2017, pp.1–2 “Models of peer review” and pp.4–5 “Editors/publishers” and “Portable peer review.” Full official mirror of the original document; supports the single-blind/open distinction and editor role, not a claim that reviewers decide publication or that anonymity prevents retaliation.

[^ref-94ad071ac51b]: ACE Electoral Knowledge Network, Vote Secrecy, Electoral Integrity, 3^rd ed. (2012), “Vote Secrecy” section. Practitioner guidance for the stated anti-intimidation and anti-bribery rationale, not an original controlled effectiveness study.