other electronic voting machine, so long as in each case the voter is permitted to verify the ballot in a paper form in accordance with this subparagraph. (II) The voting system shall provide the voter with an opportunity to correct any error made by the system in the voter-verified paper ballot before the permanent voter-verified paper ballot is preserved in accordance with clause (ii). (III) The voting system shall not preserve the voter-verified paper ballots in any manner that makes it possible, at any time after the ballot has been cast, to associate a voter with the record of the voter’s vote. (ii) Preservation The voter-verified paper ballot produced in accordance with clause (i) shall be used as the official ballot for purposes of any recount or audit conducted with respect to any election for Federal office in which the voting system is used, and shall be preserved in accordance with regulations promulgated by the Commission to establish criteria for the proper preservation and retention of the official ballots in the election. (iii) Manual audit capacity Each paper ballot produced pursuant to clause (i) shall be suitable for a manual audit equivalent to that of a paper ballot voting system, in accordance with the methods described in subparagraph (B). (B) Approved methods for manual audits The methods described in this subparagraph with respect to the manual audit of voter-verified paper ballots are— (i) audits conducted through the use of programmable electronic counting machines which are not capable of being connected to the Internet, as determined in accordance with regulations promulgated by the Commission