Presented by: Department of Highway Safety and Motor Vehicles Division of Motorist Services

1. DAVID DRIVER AND VEHICLE INFORMATION DATABASE DRIVER AND VEHICLE INFORMATION DATABASE Presented by: Department of Highway Safety and Motor Vehicles Division of Motorist Services Department of Highway Safety and Motor Vehicles

2. Course Objectives Upon completion of this course, you will be able to: • Recognize the types of system information available on DAVID. • Explain the importance of securing Emergency Contact Information in DAVID. • Determine legitimate use versus improper use of system data. • Identify the penalties for misuse. • Understand the quality control and audit expectations.

3. DAVIDDriver And Vehicle Information Database • To Access This Information: • the Department of Highway Safety and Motor Vehicles(DHSMV) or Provider Agency and the Requesting Agency enter into a Memorandum of Understanding (MOU) • The MOU Establishes: • The purposes for and conditions of electronic access to DAVID. • The Driver and Vehicle Information Database (DAVID) Contains: • Driver License; • Motor Vehicle; and • Traffic Crash Information.

4. Overview DAVID may provide access to: Driver History Driver Information Vehicle Co-owners Driver Insurance Crash Reports Make/Model of Vehicles Title Information Lien Holders Previous Vehicles

5. Exchanged electronic data will be stored in a place physically secure from access by unauthorized persons. Access protected so that unauthorized persons cannot review or retrieve information. Personnel with access must be instructed on confidential nature of information. Personnel will acknowledge their understanding of confidentiality requirements. Requesting Agency will maintain current acknowledgements. Information Security

6. AUTHORIZED USES OF DAVID

7. Authorized Use Per Florida Statutes, DAVID information can only be used: For Legitimate Business Purposes Only

8. Authorized Use- Law Enforcement Examples • Traffic stops • Investigations • Missing persons • Crash • Natural disaster Official Law Enforcement Purposes-Examples

9. Authorized Use-Legitimate Business Examples • Residency Verification • Citizenship Status • Crash Reports • Driver History • Motor VehicleHistory Legitimate Business Purposes-Examples

10. Authorized Use- Emergency Contact Information (ECI) Section 119.0712(2)(c), Florida Statutes, states: “Without the express consent of the person to whom such emergency contact information applies, the emergency contact information contained in a motor vehicle record may be released only to law enforcement agencies for purposes of contacting those listed in the event of an emergency.”

11. UNAUTHORIZED USES OF DAVID WARNING

12. Unauthorized Use Queries not related to official law enforcement or judicial purpose. Queries not related to official business purpose. Improper dissemination (sharing, copying, distributing) of information to unauthorized persons. Personal use.

13. Examples of Misuse • Looking up addresses for Christmas card • mailing list. • Checking a family member’s driving record. • Checking out photos of friends, relatives or self. • Looking up celebrities or politicians. • Copying information to supply to friends, family, or public. • Posting information on information boards or blogs where it is exposed to the public.

14. Penalties for Misuse • Violation of Public Records Chapter 119, F.S., and is a misdemeanor of the first degree. • Violation of Driver Privacy Protection Act (DPPA) subject to criminal sanctions and civil liability. • Immediate termination of user access and/or Requesting Agency MOU and DAVID access by Providing Agency. • Disciplinary action, up to and including termination of employment.

15. DAVID INQUIRY

16. DAVID Inquiry Reason Screen Effective 11/28/11 Users Are Required To: State a Reason for Making Inquiries in DAVID. This Will Assist Agencies in Monitoring Activity. • Traffic Related Inquiry • Verify Identity • Court Purposes • Crash • Dispatch • Response to Disturbance or Possible Criminal Activity • Background Investigation • Supervisory Review/Audit • Response to Calls for Assistance • Criminal Investigation • Emergency Notification • Child or Adult Protective Services • Red Light Camera Violations/ Parking or Code Enforcement • Performance of Specific Agency Function • Training • Other Reason Codes

17. Inquiry Reason Screen in DAVID The user must choose an appropriate reason for making the inquiry and click on the “Continue” button. A user cannot proceed further if a reason is not chosen.

18. MOUCOMPLIANCE

19. Compliance Requirements:Misuse • The MOU states, “The Requesting Party must immediately notify the Providing Agency and the affected individual following the determination that personal information has been compromised by any unauthorized access, distribution, use, modification, or disclosure.” • The Requesting Agency will need to submit to the Department of Highway Safety and Motor Vehicles the following information to stay in compliance: • Brief summary of incident on agency letterhead. • Outcome of review. • Number of records compromised. • Were the owners of the compromised information notified? • If not, when will notification occur? • What disciplinary action (if any) took place due to this misuse? • How does your agency plan on DAVID misuse not occurring again?

20. Compliance Requirements • Acknowledge his/her understanding of the confidentiality of information • Acknowledge his/her understanding of criminal sanctions for unauthorized use All Agency Users

21. Compliance Requirements • Update user access within 5 working days of termination or reassignment of the user • Update user access immediately for negligence, unauthorized use or dissemination • Conduct quarterly quality controls on user accounts • Regularly monitor access to information • Conduct annual audit to ensure proper use and dissemination • Present all documents and reports as requested by HSMV staff to ensure proper audit completion Requesting Agency Digital Certificate Coordinator (DCC) or Point of Contact (POC) is responsible for the following:

22. AUDIT TOOLS

23. QUARTERLY QUALITY CONTROL REVIEW

24. DAVID AUDIT

25. Final Quiz

26. Quiz Questions • What types of information does DAVID contain? (Select all that apply) • Felony Arrest • Motor Vehicle • Driver License • Traffic Crash • In order for an agency to have access to DAVID, they must request access by entering into a(n)_____________with the Department of Highway Safety and Motor Vehicles (DHSMV). • Invitation to Bid (ITB) • Request for Information (RI) • Purchase Request (PR) • Memorandum of Understanding (MOU)

27. Quiz Questions • A user must secure the personal information contained in DAVID by all of the following means, EXCEPT: • Storing access to DAVID in a physically secure location • Protecting access so that unauthorized persons cannot review or retrieve information • Sending personnel acknowledgements to DHSMV for record retention and compliance • Ensuring he/she acknowledges understanding of the confidentiality requirement • Law Enforcement Officers may not use DAVID for which of the following? • Personal Research • Missing Persons • Traffic Stops • Investigations

28. Quiz Questions • The penalties resulting from the misuse of DAVID access and/or information may include: (Select all that apply) • Civil Liability • Disciplinary Action • Immediate Termination • A Misdemeanor • In order to comply with DAVID Memorandum of Understanding requirements, a user must acknowledge understanding of: • How to renew DAVID access • David auditing tools • How to access information in DAVID • Criminal Sanctions for unauthorized use

29. Quiz Questions • All access to DAVID information must be monitored on a(n)____________________basis by the Requesting Agency. • Monthly • On-Going • Semi-Annual • Annual • Examples of misuse of DAVID include: (Select all that apply) • Looking up the Governor’s address to send a card • Viewing photographs of you, celebrities or other agency members • Posting information on a blog for public view • Checking the tag number of a family member or friend

30. Quiz Questions • Please type a number into the box below: A requesting Agency has_____working days to remove a user’s access to DAVID after the user has been terminated. • The Department of Highway Safety and Motor Vehicles (DHSMV) will conduct audits for DAVID access in conjunction with their regularly scheduled CJIS audits. • True • False

31. For Additional Information Contact: DAVIDSUPPORT@flhsmv.gov