2018/04/11 Council Agenda Packet

=tea : A Public Service Agency INFORMATION SERVICES BRANCH INFORMATION SECURITY STATEMENT To be completed_by_any.individual having access.to DNIV record information.;Annual re-certification'is required:(See reverse) By signing this form, the undersigned represents that he/she has read and understands the same, agrees to its contents and realizes the penalties for non-compliance to its terms. " The California Department of Motor Vehicles (CA DMV) collects information from the public to administer the various programs for which it has responsibility. CA DMV is committed to protect this information from unauthorized access, use, or disclosure. The following have been adopted to address commercial and governmental users responsibilities for handling and protecting information obtained from the CA DMV. I understand the following are my responsibilities: 1. I may access information only when necessary to accomplish the responsibilities of my employment. I may not access or use information from the CA DMV for personal reasons. (Examples of inappropriate access or misuse of CA DMV information include, but are not limited to: making personal inquiries or processing transactions on my own records or those of my friends or relatives; accessing information about another person, including locating their residence address, for any reason that is not related to my job responsibilities.) 2. I may disclose CA DMV information only to individuals who have been authorized to receive it through the appropriate procedures as regulated by CA DMV. Requesters of information must complete the appropriate forms, submit them to CA DMV as specified, and pay all applicable fees. In the case of confidential or personal information, a proper accounting of all disclosures must be made and the subject must be notified in accordance with statute and CA DMV directives. (Examples of unauthorized disclosures include, but are not limited to: telling someone the address of another person when it is not an authorized disclosure or part of my job responsibilities.) • 3. To keep the requester code and/or password confidential, I must take reasonable precautions to maintain the secrecy of any requester code and/or my password. Reasonable precautions include, but are not limited to, not telling or allowing others to view my password or requester code; securing my terminal with a locking device if one has been provided; storing user documentation to sensitive programs in a secure place; to destroy CA DMV information in a manner that it cannot be reproduced or identified in any physical or electronic form; and reporting any suspicious circumstances or unauthorized individuals I have observed in the work area to my supervisor, if applicable. 4. •To promptly notify your manager or supervisor of any indication of misuse or unauthorized disclosure of information obtained from CA DMV. Federal law states: . "Any person who knowingly obtains, discloses, or uses personal information from a motor vehicle record for a purpose not permitted under the Driver's Privacy Protection Act(Title 18 of the United States Code, Section 2721—2725), shall be liable to the individual to whom the information pertains, who may bring a civil action in a United States district court. 7 certify under penalty of perjury, under the laws of the State of California, that I have read and understand the security policies stated above. I understand that failure to comply with these policies and regulations may result in disciplinary action in. accordance with state and federal laws and regulations, and/or civil or criminal prosecution in accordance with applicable . statutes. I further understand that I may undergo disciplinary action from my employer up to and including termination from employment. • • EXECUTED AT CITY COUNTY - STATE ZIP CODE • SIGNATURE DATE X PRINTED NAME OF SIGNATORY GOVERNMENT OR COMMERGAL ENTITY REPRESENTATIVE NAME OF GOVERNMENT OR COMMERCIAL ENTITY This form must be completed upon presentation and re-certified annually and RETAINED AT THE WORKSITE of the Requester Account Holder with a current list of those authorized direct or incidental record access for the life of the account and for two years following the deactivation or termination of the account.This completed form and list must be made available upon request to DMV audit staff. • INF 1128(REV.9/2006)WWW 68