§ Ind. Code § 3-11-15-26Ballot counting software; retraction requirements

(a) The ballot counting software must be designed in a modular fashion and not
be self-modifying. Modular programs must consist of code written in relatively small and
easily identifiable sections, with each unit having a single entry point and a single exit point.
Each module must have a specific function that can be tested and verified more or less
independently of the remainder of the code.
(b) A voting system may include a retraction feature that allows a vote cast on an absentee
ballot that is:
(1) scanned into:
(A) a ballot card voting system; or
(B) an optical scan ballot card system; or
(2) entered into an electronic voting system;
to be retracted if it is determined that the absentee ballot must be rejected under IC 3-11.5.
(c) The retraction feature described in subsection (b) must assign a unique identification
number to each absentee ballot. The unique identification number assigned to an absentee
ballot may not include any of the following information about the voter who cast the absentee
ballot:
(1) Name.
(2) Residence or mailing address.
(3) Telephone number.
(4) Social Security number.
(5) Date of birth.
(6) Date the voter registered.
(7) Indiana driver's license or state identification number assigned by the bureau of
motor vehicles.
(d) A county election board must implement a procedure to keep the unique identification
number described in this section secure from unauthorized access. All unique identification
numbers and any list that contains a unique identification number is exempt from disclosure,
inspection, or copying under IC 5-14-3-4(b)(10).