Presented by: Department of Highway Safety and Motor Vehicles Division of Motorist Services DRIVER AND VEHICLE INFORMATION DATABASE DAVID Department of Highway Safety and Motor Vehicles

Upon completion of this course, you will be able to:  Recognize the types of system information available on DAVID.  Explain the importance of securing Emergency Contact Information in DAVID.  Determine legitimate use versus improper use of system data.  Identify the penalties for misuse.  Understand the quality control and audit expectations. 2

 The Driver and Vehicle Information Database (DAVID) Contains:  Driver License;  Motor Vehicle; and  Traffic Crash Information.  To Access This Information:  the Department of Highway Safety and Motor Vehicles(DHSMV) or Provider Agency and the Requesting Agency enter into a Memorandum of Understanding (MOU)  The MOU Establishes:  The purposes for and conditions of electronic access to DAVID. 3

DAVID may provide access to: Driver Information Driver History Driver Insurance Title Information Make/Model of Vehicles Previous Vehicles Lien Holders Vehicle Co-owners Crash Reports 4

 Exchanged electronic data will be stored in a place physically secure from access by unauthorized persons.  Access protected so that unauthorized persons cannot review or retrieve information.  Personnel with access must be instructed on confidential nature of information.  Personnel will acknowledge their understanding of confidentiality requirements.  Requesting Agency will maintain current acknowledgements. Information Security 5

AUTHORIZED USES OF DAVID 6

Per Florida Statutes, DAVID information can only be used: For Legitimate Business Purposes Only 7

Official Law Enforcement Purposes-Examples  Traffic stops  Investigations  Missing persons  Crash  Natural disaster 8

Legitimate Business Purposes-Examples  Residency Verification  Citizenship Status  Crash Reports  Driver History  Motor Vehicle History 9

Section (2)(c), Florida Statutes, states: “Without the express consent of the person to whom such emergency contact information applies, the emergency contact information contained in a motor vehicle record may be released only to law enforcement agencies for purposes of contacting those listed in the event of an emergency.” 10

UNAUTHORIZED USES OF DAVID UNAUTHORIZED USES OF DAVID 11 WARNING

 Queries not related to official law enforcement or judicial purpose.  Queries not related to official business purpose.  Improper dissemination (sharing, copying, distributing) of information to unauthorized persons.  Personal use. 12

Examples of Misuse  Looking up addresses for Christmas card mailing list.  Checking a family member’s driving record.  Checking out photos of friends, relatives or self.  Looking up celebrities or politicians.  Copying information to supply to friends, family, or public.  Posting information on information boards or blogs where it is exposed to the public. 13

 Violation of Public Records Chapter 119, F.S., and is a misdemeanor of the first degree.  Violation of Driver Privacy Protection Act (DPPA) subject to criminal sanctions and civil liability.  Immediate termination of user access and/or Requesting Agency MOU and DAVID access by Providing Agency.  Disciplinary action, up to and including termination of employment. 14

DAVID INQUIRY 15

Reason Codes  Traffic Related Inquiry  Verify Identity  Court Purposes  Crash  Dispatch  Response to Disturbance or Possible Criminal Activity  Background Investigation  Supervisory Review/Audit  Response to Calls for Assistance  Criminal Investigation  Emergency Notification  Child or Adult Protective Services  Red Light Camera Violations/ Parking or Code Enforcement  Performance of Specific Agency Function  Training  Other Effective 11/28/11 Users Are Required To: State a Reason for Making Inquiries in DAVID. This Will Assist Agencies in Monitoring Activity. 16

The user must choose an appropriate reason for making the inquiry and click on the “Continue” button. A user cannot proceed further if a reason is not chosen. 17

MOU COMPLIANCE 18

The MOU states, “The Requesting Party must immediately notify the Providing Agency and the affected individual following the determination that personal information has been compromised by any unauthorized access, distribution, use, modification, or disclosure.” The Requesting Agency will need to submit to the Department of Highway Safety and Motor Vehicles the following information to stay in compliance:  Brief summary of incident on agency letterhead.  Outcome of review.  Number of records compromised.  Were the owners of the compromised information notified?  If not, when will notification occur?  What disciplinary action (if any) took place due to this misuse?  How does your agency plan on DAVID misuse not occurring again? 19

All Agency Users  Acknowledge his/her understanding of the confidentiality of information  Acknowledge his/her understanding of criminal sanctions for unauthorized use 20

Requesting Agency Digital Certificate Coordinator (DCC) or Point of Contact (POC) is responsible for the following:  Update user access within 5 working days of termination or reassignment of the user  Update user access immediately for negligence, unauthorized use or dissemination  Conduct quarterly quality controls on user accounts  Regularly monitor access to information  Conduct annual audit to ensure proper use and dissemination  Present all documents and reports as requested by HSMV staff to ensure proper audit completion Compliance Requirements 21

AUDIT TOOLS 22

QUARTERLY QUALITY CONTROL REVIEW 23

24

Final Quiz 25

1. What types of information does DAVID contain? (Select all that apply) A.Felony Arrest B.Motor Vehicle C.Driver License D.Traffic Crash 2. In order for an agency to have access to DAVID, they must request access by entering into a(n)_____________with the Department of Highway Safety and Motor Vehicles (DHSMV). A.Invitation to Bid (ITB) B.Request for Information (RI) C.Purchase Request (PR) D.Memorandum of Understanding (MOU) 26

3. A user must secure the personal information contained in DAVID by all of the following means, EXCEPT: A.Storing access to DAVID in a physically secure location B.Protecting access so that unauthorized persons cannot review or retrieve information C.Sending personnel acknowledgements to DHSMV for record retention and compliance D.Ensuring he/she acknowledges understanding of the confidentiality requirement 4. Law Enforcement Officers may not use DAVID for which of the following? A.Personal Research B.Missing Persons C.Traffic Stops D.Investigations 27

5. The penalties resulting from the misuse of DAVID access and/or information may include: (Select all that apply) A.Civil Liability B.Disciplinary Action C.Immediate Termination D.A Misdemeanor 6. In order to comply with DAVID Memorandum of Understanding requirements, a user must acknowledge understanding of: A.How to renew DAVID access B.David auditing tools C.How to access information in DAVID D.Criminal Sanctions for unauthorized use 28

7. All access to DAVID information must be monitored on a(n)____________________basis by the Requesting Agency. A.Monthly B.On-Going C.Semi-Annual D.Annual 8. Examples of misuse of DAVID include: (Select all that apply) A.Looking up the Governor’s address to send a card B.Viewing photographs of you, celebrities or other agency members C.Posting information on a blog for public view D.Checking the tag number of a family member or friend 29

9. Please type a number into the box below: A requesting Agency has_____working days to remove a user’s access to DAVID after the user has been terminated. 10. The Department of Highway Safety and Motor Vehicles (DHSMV) will conduct audits for DAVID access in conjunction with their regularly scheduled CJIS audits. A.True B.False 30

31