721—22.51 (52) Memory storage devices. For all voting equipment, the following security measures for memory storage devices are required:
	 22.51(1) Serial number. Each memory storage device shall have a serial number printed on a readily visible label. The label shall include the name of the county.
	 22.51(2) Inventory. Memory storage devices owned by the county and retained in the custody of the county commissioner shall be maintained under perpetual inventory, with a record of inventory activity. The commissioner shall maintain a similar record of relevant actions if the memory storage devices are acquired from a vendor for each election. The record of inventory activity shall reflect:
	  a.   	 The date each memory storage device was acquired;
	  b.   	 Each use of each memory storage device in an election;
	  c.   	 Each maintenance activity to a memory storage device, such as changing the battery;
	  d.   	 Any problems or errors detected while using the memory storage device during its life;
	  e.   	 Records of the disposal of any memory storage devices at the end of their useful life or upon return to the vendor for maintenance or warranty claims.
	 22.51(3) Custody.
	  a.   	 In counties where the commissioner has the necessary software and equipment to program the memory storage devices locally, the commissioner shall maintain a memory storage device log for each election as required in subrule 22.51(4) during the period when the memory storage devices are removed from storage, prepared for an election, and until they are sealed into a voting device. Only county employees and precinct election officials, as applicable, authorized by the county’s security policy shall be permitted to handle the memory storage devices. No one individual should be alone with the unsecured memory storage devices at any time. If a person who is not authorized by the security policy to have access to the memory storage devices transports them to another location, such as a warehouse, the memory storage devices shall be enclosed in a transport container with a tamper-evident seal.
	  b.   	 In counties where the commissioner purchases programming services from a vendor, the memory storage devices shall be shipped to and from the vendor by a shipping service that employs tracking numbers. The memory storage devices shall be enclosed in a package sealed with a numbered, tamper-evident seal. Programmed memory storage devices shall be shipped in a package sealed with a numbered, tamper-evident seal from the vendor to the commissioner. If the seal is not intact upon arrival, the commissioner shall immediately contact the vendor for replacement storage devices. Only county employees authorized by the county’s security policy (and precinct election officials, as applicable) shall be permitted to handle the memory storage devices. No one individual should be alone with the unsecured memory storage devices at any time.
	 22.51(4) Memory storage device log. For each election, the commissioner shall create a log to record the serial numbers of each memory storage device, the voting equipment into which the memory storage device was installed, the serial number of the seal, the ballot style and the precinct to which the equipment is assigned. The log shall be in substantially the same form as Form A or Form B, as applicable:
Form A
State of Iowa
Election Log: Memory Storage Devices for ___________ County
Use this form in counties where the memory storage devices are programmed locally.
Memory storage device chain of custody record for:____________ Election to be held __/__/20__

Memory Storage Device Serial #	Precinct and/or Polling Place	Programmed By	Installed in Machine #	Installed By	Installation	Seal Number	Storage Device Returned from Polls	
		Date	Time			Date	Time		By	Date	

 	 	 	 	 	 	 	 	 	 	 	

 	 	 	 	 	 	 	 	 	 	 	

 	 	 	 	 	 	 	 	 	 	 	

 	 	 	 	 	 	 	 	 	 	 	

 	 	 	 	 	 	 	 	 	 	 	

 	 	 	 	 	 	 	 	 	 	 	

 	 	 	 	 	 	 	 	 	 	 	

Form B
State of Iowa
Election Log: Memory Storage Devices for ___________ County
Use this form if a vendor programs the memory storage devices.
Memory storage device chain of custody record for:____________ Election to be held __/__/20__

Memory Storage Device Serial #	Precinct and/or Polling Place	Sent for Programming	Installed in Machine #	Installed By	Installation	Seal Number	Storage Device Returned from Polls	
		Date Out	Date In			Date	Time		By	Date	

 	 	 	 	 	 	 	 	 	 	 	

 	 	 	 	 	 	 	 	 	 	 	

 	 	 	 	 	 	 	 	 	 	 	

 	 	 	 	 	 	 	 	 	 	 	

 	 	 	 	 	 	 	 	 	 	 	

 	 	 	 	 	 	 	 	 	 	 	

 	 	 	 	 	 	 	 	 	 	 	

Memory Storage Device Shipping Record for ___________ County
Shipped for programming:
Record each storage device number before packing to ship, and check out each storage device number on the chain of custody record. Enclose a photocopy of the Memory Storage Device Record with the storage devices.

Shipped by:					Date: ___/___/___ Time: ___:___a.m./p.m.	
 	Print name	Signature	 	
Shipped to:			Shipped via:  		
 			Tracking number:  		

<fo:wrapper font-size="14pt">Instructions to vendor:</fo:wrapper>
Check in each storage device number on the enclosed chain of custody record when unpacking storage devices.	
By:  			  Date:	___/___/___ Time: ___:___ a.m./p.m.	
Print name	Signature		
●	If memory storage devices are removed from this inventory for any reason, make a notation of which storage device(s) on the Memory Storage Device Record.
●	Replacement storage device(s) if issued should be added to the bottom of the Memory Storage Device Record as a new storage device. A serial number will be assigned later by the receiving county.
Shipped via: ___________________ Date: ____________ Tracking number:  		
Received by County Election Department on Date: ___/___/___
Was the package sealed? ____________ Was the seal intact? ______ Notes: __________________
Keep the memory storage devices in secure storage after they are received and until they are installed in the voting equipment.
	 22.51(5) Preparation and installation. When memory storage devices are installed, they shall be sealed immediately into the machine using a numbered, tamper-evident seal. Appropriate log entries shall be completed.
	 22.51(6) Replacing seals or memory storage devices. If a seal is accidentally broken or a memory storage device is replaced for any reason, the issuance of a new seal and the entry into the log shall be witnessed by more than one person. The facts of the incident and the names of the individuals who detected and resolved it shall be recorded.
	 22.51(7) Opening the polls. Immediately before the polls open on election day, the precinct election officials shall turn on the voting equipment and print the report showing that all counters are set at zero.
	 22.51(8) Verification log. The commissioner shall provide to each precinct a precinct verification log with the ballot record and receipt. The verification log shall provide places for precinct election officials to record or check the following information before the polls open and again before leaving the polling place at the end of the day:
	  a.   	 Seal numbers from the voting equipment; and
	  b.   	 Condition of seals on ballot containers.
	 22.51(9) Election day.
	  a.   	 Before the polls are opened, the precinct election officials shall verify the required information in the verification log and sign the log.
	  b.   	 After the polls are closed, the precinct election officials shall verify the required information in the verification log and sign the log before leaving the polling place.
	  c.   	 If the precinct election officials remove the memory storage devices from the voting equipment, the officials shall first print the results report from the voting equipment.
	 22.51(10) Return of memory storage devices. If the precinct election officials remove the memory storage devices from the voting equipment on election night, they shall return to the commissioner the memory storage devices and the seals used to secure them in a sealed envelope or other container. All officials of the precinct shall witness the statement on the envelope or other container. The label on the envelope or other container shall be in substantially the following form:
Memory Storage Devices
Election Date:  	
Precinct:  	
This envelope contains Memory Storage Devices and memory storage device access seals from this precinct.

Machine Number	Memory Storage Device #	Memory Storage Device Seal #	

 	 	 	
 	 	 	
[Signatures of all precinct election officials shall be included on the label.]
	 22.51(11) Storage. If the memory storage devices are returned inside the voting equipment to the commissioner, the machine serial numbers and the seal numbers shall be verified against the verification log described in subrule 22.51(8). When the memory storage devices are removed, their serial numbers shall also be verified against the verification log returned by the precinct’s election officials. The memory storage device audit log shall be retained for the time period required by Iowa Code section 50.19.
	 22.51(12) Results verified. Before the conclusion of the canvass of votes, the individual results reports from the precincts, as signed by the precinct election officials at the polls on election night, shall be compared to the election results compiled for the canvass (either manually or electronically) to verify that transmitted and accumulated totals match the results witnessed by the election officials. Any discrepancies in these totals shall be reconciled before the supervisors conclude the canvass.
	 22.51(13) Retention of programmed memory storage devices. The election information on all memory storage devices used for an election shall be retained on the memory storage devices until after the time to file requests for recounts and election contests has passed. If a contest is pending, the memory storage devices shall be retained until the contest is resolved. Before the memory storage devices are permanently erased, the commissioner shall print the memory storage device audit log from each storage device.
	 22.51(14) Retention of program information. The commissioner shall retain all instructions and other written records of the process for programming the memory storage devices and the memory storage device audit logs for the period required by Iowa Code section 50.19. The contents of memory storage devices and other electronic records of the election process shall be collected and retained in an electronic or other medium and stored with the other election records for the time period required by Iowa Code section 50.19.
[ARC 0801C, IAB 6/26/13, effective 7/31/13]