; and (cc) the ballot marking device shall be designed and built in a manner in which it is mechanically impossible for the device to add or change the vote selections on a printed or marked ballot at any time after the ballot has been presented to the voter for inspection and verification under item (aa). (III) Confidentiality The voting system shall not preserve or mark the individual, durable, voter-verifiable paper ballots in any manner that makes it possible, at any time after the ballot has been cast, to associate a voter with the ballot cast by the voter or with any other record of the voter's vote selections. (ii) Preservation as official record The individual, durable, voter-verifiable, paper ballot used in accordance with clause (i) shall constitute the official ballot and shall be preserved and used as the official ballot for purposes of ballot tabulation and any recount or audit conducted with respect to any election for Federal office in which the voting system is used. (iii) Hand tabulation requirements for recounts (I) In general Each paper ballot used pursuant to clause (i) shall be tabulated by hand in any recount conducted with respect to any election for Federal office. (II) Inconsistencies In the event of any inconsistencies or irregularities between any vote tallies determined through the use of an optical scanning device and vote tallies determined by tabulating by hand the individual, durable, voter-verifiable, paper ballots used pursuant to clause (i), and subject to subparagraph (B), the individual, durable, voter-verifiable, paper ballots shall be the true and correct record of the votes cast. (iv) Application to all ballots The requirements of this subparagraph shall apply to all ballots cast in elections for Federal office, including ballots cast by absent uniformed services voters and overseas voters under the Uniformed and Overseas Citizens Absentee Voting Act and other absentee voters. (B) Special rule for treatment of disputes when paper ballots have been shown to be compromised