721—22.261 (52) Election Systems & Software Model 100—preparation and use in elections.
	 22.261(1) Security. The commissioner shall have a written security plan for the voting system. Access to equipment, programs and passwords shall be limited to those persons authorized in writing by the commissioner. The security plan shall be reviewed at least annually.
	  a.   	 Passwords used at the polling places on election day shall be changed for each election.
	  b.   	 The control key for the Model 100 shall be in the possession of the precinct chairperson during election day.
	 22.261(2) Configuration choices. The following selections are mandatory for all elections:
	  a.   	 Maximum number of votes. The following description for each office shall be used: “Vote for no more than xx.” Do not include “vote for” language for public measures or judges.
	  b.   	 Ballot control. In an official election, the commissioner shall never program the Model 100 for unconditional acceptance of all ballots; shall not divert blank ballots to the write-in bin; and shall always accept undervoted ballots. The system shall be programmed to query the voter in each of the following situations:
	 (1) 	 Overvoted ballot.
	 (2) 	 Blank ballot.
	 (3) 	 Unreadable ballot.
	  c.   	 Unit control. The commissioner shall not select automatic transmission of election results by modem. The precinct officials must print the official results at the polling place before transmitting them.
	  d.   	 Reports. The following are required reports:
	 (1) 	 Opening the polls. Print the Zero Certification report.
	 (2) 	 Closing the polls. Print the poll report before transmitting the election results by modem. The poll report is the official record of the votes cast in the precinct on election day.
	 (3) 	 Certification text to appear at the end of the poll report:
We, the undersigned Precinct Election Officials of this precinct, hereby attest that this tape shows the results of all ballots cast and counted by the M100 Optical Scan tabulation device at this election. This is [not] the complete record of the ballots in the precinct. [Another set of results from the iVotronic direct recording electronic voting machine device must be added to these results for the complete results of this precinct.]
[print lines for each of the officials to sign]
Precinct Election Officials Date: ______ Time: _____
	  e.   	 Reopen polls. The commissioner shall enable this option, but protect it against unauthorized use. If it is necessary to reopen the polls, the chairperson of the precinct board shall contact the commissioner for the password.
	 22.261(3) Ballot printing.
	  a.   	 Format. The office title, instructions about the maximum number of choices the voter can make for the office, the candidate names and all write-in lines associated with each office on the ballot shall be printed in a single column on the same side of the ballot. All text and the “yes” and “no” choices for each public measure and for each individual judge on a ballot shall be printed in a single column on the same side of the ballot. No office or public measure on any ballot shall be divided to appear in more than one column or on more than one page of a ballot.
	  b.   	 Instructions for voters. The following instructions shall be printed on ballots:
	 (1) 	 Voting mark. To vote, fill in the oval next to your choice.

	 (2) 	 Straight party voting. To vote for all candidates from a single party, fill in the oval in front of the party name. Not all parties have nominated candidates for all offices. Marking a straight party vote does not include votes for nonpartisan offices, judges or questions.
	 (3) 	 Public measures.
Notice to voters. To vote to approve any question on this ballot, fill in the oval in front of the word “Yes”. To vote against a question, fill in the oval in front of the word “No”.
	 22.261(4) System error messages. Precinct election officials shall be provided with the following list of system error messages and the appropriate responses. The officials shall be instructed to contact the commissioner or the commissioner’s designee for all other messages.
Overvoted ballot returned. Ask voter to reinsert ballot. If the ballot is returned again, do not look at the voter’s ballot. Put it in a secrecy folder. Tell the voter that for one or more offices the scanner read more votes than the maximum number of votes allowed. To correct the error, the voter must mark a new ballot and may copy votes from the original ballot. Only if the voter agrees to mark a new ballot, write “spoiled” on the original ballot and tear off one corner to prevent it from being accepted by the scanner. Advise the voter to return to the booth and mark the new ballot. Be sure to collect the spoiled ballot before the voter leaves.
Overvoted ballot accepted. This message will appear when the scanner accepts an overvoted ballot.
Unidentified mark—check your ballot. One or more marks on the ballot are not dark enough to be seen as a vote. Do not look at the voter’s ballot. Put it in a secrecy folder and return the ballot to the voter. Ask the voter to review the ballot and to darken the marks. Then the voter may put the ballot back into the scanner.
If any of the following messages appear more than twice for the same ballot, call the auditor’s office to report the problem:
100—MISSED ORIENTATION MARKS/Turn Ballot Over and Try Again.
101—MISSED TIMING MARKS/Turn Ballot Over and Try Again.
102—NO DATA FOUND/Please Reinsert Ballot After Beeps.
104—ORIENTATION SKIP ERROR.
106—MISSED TIMING MARKS/Turn Ballot Over and Try Again.
If any of the following messages appear, ask the voter to remove the ballot and reinsert it. If the same message appears more than twice for the same ballot, call the auditor’s office to report the problem.
107—BALLOT ERROR: INVALID CC SEQUENCE.
108—BALLOT ERROR: INVALID CC TYPE.
109—BALLOT ERROR: INVALID CC SPLIT.
115—MISSED BACK ORIENTATION MARK/Turn Ballot Over and Try Again.
119—MULTIPLE BALLOTS DETECTED/Please Reinsert Ballot After Beeps. Did the voter actually try to put an extra ballot in? Is the ballot folded?
123—UNABLE TO READ TIMING BAND/Turn Ballot Over and Try Again.
124—BALLOT DRAGGED/Turn Ballot Over and Try Again.
126—BLACK CHECK: FACE DOWN HEAD EDGE/Turn Ballot Over and Try Again.
127—BLACK CHECK: FACE DOWN TAIL EDGE/Turn Ballot Over and Try Again.
128—BLACK CHECK: FACE UP HEAD EDGE/Turn Ballot Over and Try Again.
129—BLACK CHECK: FACE UP TAIL EDGE/Turn Ballot Over and Try Again.
130—POSSIBLE FOLDED BALLOT/Turn Ballot Over and Try Again.
	 22.261(5) Record retention. The Model 100 uses a thermal printer. The maximum anticipated life span of the results from each Model 100 is only five years. In order to preserve the permanent record of the precinct results required by Iowa Code section 50.19, the commissioner shall print a copy of the results of each precinct on permanent paper and store these copies with the tally lists from precincts where the Model 100 was used.