MEMORANDUM OF UNDERSTANDING - DRIVERS LICENSE AND/OR MOTOR VEHICLE RECORD DATA EXCHANGE CONTRACT NUMBER 4SMV-0129-12FLt�RIDA MEMORANDUM OF UNDERSTANDING
;�w,�:,,,�:��,„;:�q,�,,,,,, DRIVERS LICENSE AND/OR MOTOR VEHICLE RECORD DATA EXCHANGE
Contract Number ��M�- �� � i'L
This Memorandum of Understanding (MOU) is made and entered inta by and between r Po ' D rt ent
her�inafter referred to as the Requesting Party and the Department of Highway
Safety and Motor Vehicles hereinafter referred to as the Providing Agency.
Pur ose of the Data Exchan e
The purpose of this MOU is to establish conditions under which the Providing Agency agrees to provide electronic
access to driver license and motor vehicle data to the Requesting Party as follows:
* TML Information S�rvices, Inc. owns and op�:rates the computer hardware and software that allows remote
interactive access to the databases of the Providing Ag�ncy for the Requesting Party. For each single transaction
received by the system, one type driver license history will be retumed.
� The Requesting Party is not r�questing personal information and/or is not qualifi�d to obtain personal information
pursuant to the Driver's Privacy Protection Act.
[� The Requesting I'arty is requ�sting personal information and declares that it is qualified to obtain personal
informativn under the following exception numbers, as listed in Attachment 1, authorized by the Driver Privacy
Protection Act: . Personal information will be used as follows:
Law enforcement purposes
❑ The Requ�sting Party is authorized to receive a 9-digit social security number � a 4-digit social security
number, pursuant to Chapter 119, F.S., or other applicable laws.
❑ The Requesting Party is authorized to receive insurance data on a per record basis for the purposes, pursuant to
section 713.78(4)(b), F.S., or other applicable laws. The Ftequesting Party may only re-release this information to
parties authorized to receive it under section 713.78(4)(b), F.S.
Received by (Initial/Date)
Data Cxchange MOU (Rev. OS-10-2011) Page 1 of 7
Definitions
A. "Driver's Privacy Protection Act" (DPPA) --18 United States Code section 2721 et seq.
B. "Providing Agency" -- The Department of Highway Safety and Motor Vehicles. The agency respansible for
granting access ta driver license and/or motor vehicle data to the Requesting Party.
C. "Requesting Party" — Any entity type that is expressly autharized by section 119.0712(2), Florida Statutes
and DPPA to receive personal information and highly restricted personal information that requests
information contained in a driv�r license, motor vehicle, or traffic crash record.
D. "Parties" — The Providing Agency and the Requesting Party.
E. "7hird Party" — Any individual, association, organization, or corporate entity who receives driver license
and/or motor vehicle d�ta maintained and released by the Providing Agency ar Requesting Party.
F. "Government Entity" — Any federal, state, county, caunty officer, or city government, including any court ar
law enfarcement agency.
G. "Network Provider" — A Requesting Party whose access is provided by remote electronic means through the
System to request specific types of data at a minimum of 5,000 transactions per month. A six (6) month
startup period will be allowed for new Network Providers, during which time, less than 5,000 transactions per
month will be accepted.
W. "Persanal Information" — Information found in the motor vehicle or driver record which includes, but is not
limited to, the subjecYs driver identification number, name, address, telephone number, and medical or
disability information. Personal information does not include information related to vehicular crashes, driving
violations, and driver's status.
I. "Vendor Number" — A unique number assigned to the Requesting Party by the Providing Agency that
identifies the type of record authorized for release and iYs associated fees. Misuse of a vendor number to
obtain information is strictly prohibited and shall be grounds for termination in accordance with Section IX.
J. "Driver license information" — driver license and identi�cation card data collected and maintained by th�
Providing Agency.
K. "Motor vehicle information" — title and registration data collected and maintained by the Providing Agency for
vehicles, and mobile homes.
II1. Leqal Authoritv
The Providing Agency maintains computer databases containing information pertaining to driver licenses and motor
vehicles pursuant to Chapters 319, 320, and 322, Florida Statutes; and
The driver license and motor vehicle data contained in the Providing Agency databases is defin�d as public record
pursuant to Chapter 119, Florida 5tatutes; and
The Providing Agency as custodian of the faregoing records may provide access by remote electronic means and
charge a fee far the direct and indirect costs of praviding such access, pursuant to sections 119.0712(2), 320.�5,
321.23, and 322.20, Florida Statutes, and other applicable rules and policies; and
The Requesting Party might obtain via remote electronic means blacked personal information exempt from public
disclosure as provided pursuant to section 119.0712(2), Florida Statutes, the Requesting Party shall maintain the
canfidential and exempt status of such data. Anyone accessing records obtained per this agreement must ensure
that the end users of the records are complying with s�:ction 119.0712(2), Florida Statutes and DPPA.
The Parties, in consideration of the promised and mutual covenants hereinafter contained, do hereby enter into this
MOU.
Data Exchange MOU (Rev. OS-10-2011) Page 2 of7
IV. Statement of Work
A. The Providing Agency agrees to:
1. Provide the Requesting Party with the technical specifications required to access driver license and/or
motor vehicle information in accordance with the access method being requested.
2. AUow the Requesting Party/Network Provider to electronically access driver lic�nse and/or motor vehicl�
data.
3. Accept the Requesting PartylNetwork Provider's electronic requests and respond with appropriate data.
At a minimum, 90% of the respanses to electronic requests from Network Providers will occur within 15
seconds of receiving the transaction.
4. Collect all fees, pursuant to applicable Florida Statutes, rules and policies for providing the electronically
requested data. The fee shall include all direct and indirect costs of providing remote electronic access,
accqrding to section 119.07(2)(c), Flarida Statutes.
5. Collect all fees due for electronic requests through the Automated Gl�aring House account of the
banking institution which has been designated by the treasurer of the State of Florida for such purposes.
6. Discontinue access of the Requesting Party far non-payment of required fees. The Providing Agency
shall not be responsibl� for the failure, refusal, or inabiliry af the I�equesting Party/Network Provider to
make the required payments, or interest on late payments for periods of delay attributable to the action
or inaction of Network Providers.
7. Not indemnify or be liable to the Requesting PartylNetwork Provider for any driver license or motor
vehicle infarmation, programs, job streams, or similar items delayed, lost, damaged, or destroyed as a
result of the electronic exchange of data pursuant to this MoU, except as provided in section 768.28,
Florida Statutes.
8. Notify the Requesting Party/Network Provider thirty (30) days prior to changing any fee schedules when
it is reasonable and necessary to do so, as determined by the Providing Agency. All fees are
established by Florida law. Any changes in fees shall be effective on the efFective date of the
corresponding law change. 'fhe Requesting Party/Network Provider may continue with this MOL1 as
modified or it may terminate the MOU in accordance with SectionlX., subject to the payment of all fees
incurred prior to termination.
9. PerForm all obligations to provide access under this MOU contingent upon an annual appropriation by the
Legislature.
10. Provide electronic access for Network Providers to driver license and/or motor vehicle informatian 24
hours a day, 7 days per week other than schEduled maintenance or other uncontrollable disruptions.
Scheduled maintenance normally occurs Sunday mornings between thE hours of 6:DOAM and10:00AM.
11. Provide an agency contact person for assistance with the implementation of this MOU.
B. The Requesting Party agrees to:
1. For the Requesting Party, driver license and/or motor vehicle, information may only b� used for the
exprESS purposes described herein. Information obtained from the Providing Agency by the REquesting
Party shall not be retained by the Requesting Party, unless obtained for a law enforcement purpose or
resold to any 7hird Party.
2. Be responsible for interfacing with any and all Third Party end users. The Providing Agency will not
interact directly with any Third Party end users. Requesting Party shall not give Third Party end users
the name, E-mail address, and/ar telephone number of any Praviding Agency employee withaut the
express written consent of the Providing Agency. (This does not apply to Government Entities.J
Data Exchange MOU (Rev. OS-10-2011) Page 3 of 7
3. Maintain a help desk for its Third Party end users. Personnel assigned to this help desk shall be fully
trained on all aspects of the electronic access and shall be prepared to answer all ihird Party end user
questions. In cases where the Requesting Party/Network Provider help desk personn�l are unable to
answer a question fram a Third Party �nd user and that question must be answered by Providing Agency
p�rsonnel; the Requesting Party shall obtain the answer from the Providing Agency and then relay the
answer to the Third Party end user. (ihis does not apply to Government Entifies.J
A. Insure that its emplvyees and agents comply with Section V. Safeguarding Information pracedures of this
MOU.
5. Not assign, sub-contract, or otherwise transfer its rights, duties, or obligations under this MOU without
the express written consent and approval af the Praviding Agency.
6. Use the information received from the Providing Agency only far the purposes authorized by this
agreement.
7. Protect and maintain the confidentiality and security of driver license and/or motor vehicle information
received from the Providing Agency in accordance with this MOU and applicable state and federal law.
8, To the extent allowed by law, the Requesting Party shall defend, hold harmless and indemnify the
Providing Agency and its employees or agents from any and all claims, actions, damages, or losses
which may be brought or alleged against its employees or agents for the Requesting Party's negligent,
improper, or unauthorized use or dissemination of information provided by the Providing Agency.
9. Update user access permissivns upan termination or reassignment of users within 5 working days and
immediately update user access permissions upon discovery of negligent, improper, or unauthorized use
or dissemination of information. Canduct quarterly quality contral reviews to ensure all current users are
appropriately autharized.
10. For all records containing personal information released to a Third Party, maintain fnr a period of 5 years,
records identifying each person or entity that receives the personal information and the permitted
purpose for which it will be used. 7he Requesting Party shall make these records eveilable for
inspection upon request by the Providing Agency. (This does nat apply to Govemment Entities.]
11, Pay all casts associated with electronic access of the Providing Agency's driver license and/or mator
vehicle information; such costs shall includ� all ane time, recurring, and usage charges for all hardware,
software, and services required to connect to and use the electronic access. Payment must be in
advance of receiving any information or using electronic means as follows:
■ Complete and sign the appropriate document(s) to allow the Providing Agsncy's designated banking
institution to debit the Requesting Party's designated account.
■ Maintain an account with a banking institution as required by the Providing Agency.
• Pay all fe�s due the Providing Agency by way of the Automated Clearing hiouse account of the
Providing Agency's designated banking institution. Collection of transaction fees from eligible and
autharized Third Party end users is the responsibility of the Requesting Party.
12. Minimum Transaction Level -- In order to qualify for direct connection to a port, thE Network Provider
must agree to submit a minimum of 5,000 transactions per month for driver transcripts or 2,500
transactions for public records access program for motor vehicle/driv�r license status checks. A six-
month startup period will be allowed, during which time less that the minimum will be acceptable. In the
event the Network Provider does not maintain the minimum transaction per month beginning with the first
day of the seventh month and every manth thereafter, the Network Provider's direct connection ta a port
will be terminated.
Data Exchange MOU (Rev. �5-10-2011)
Page 4 of 7
V. Safeguardinq Information
The Parties shall access, use and maintain the confidentiality of all infarmation received under this agreement in
accordance with Chapter 119, Florida Statutes, and DPPA. Information obtained under this agreement shall only be
disclosed to persons to whom disclosure is authorized under Florida law and federal law. Any person who willfully
and knowingly violates any of the provisians of this section is guilty of a misdemeanar af the first degree punishable
as provided in sections 119.10 and 775.083, Florida Statutes. In addition, any person who kn�wingly discloses any
informatian in vialation of DPPA may be subject to criminal sanctions and civil liability.
The Parties mutually agre� to the following:
A. Information exchanged will not be used for any purposes not specifically authorized by this agreement.
Unauthorized use includes, but is not limited to, queries not related to a legitimate business purpose,
personal use, and the dissemination, sharing, copying or passing of this informatian to unauthorized persons.
B. Information exchanged by electronic m�ans will be stared in a place physically secure from access by
unauthorized persons.
C. Access to the information exchanged will be protected in such a way that unauthorized persans cannot
review or retrieve the information.
D. All personnel with access to the information exchanged under the terms of this agreement will be instructed
of, and acknowledge their understanding of, the confidential nature of the information. These
acknowledgements must be maintained in a current status by the Requesting Party.
E. All personnel with access to the information will be instructed af, and acknowledge their understanding of,
the criminal sanctions specified in state law for unauthorized use of the data. These acknowledgements
must be maintained in a current status by the Requesting Party.
�. All access to the information must be monitored on an on-going basis by the F2equesting Party. In addition,
the Requesting Party must complete an annual audit to ensure proper and authorized use and
dissemination.
G. By signing th� MOU, the representatives of the Providing Agency and Requesting Party, on behalf of the
respective Parties att�:st that their respective agency procedures will ensure the confidentiality of the
information exchanged will be maintained.
VI. Com liance and Control Measures
A. Internal Control Attestation - 1'his MOU is contingent upon the Requesting Party having appropriate
internal controls over persanal data sold or used by the Requesting Party to protect the personal data from
unauthorized access, distribution, use, modification, or disclosure. Upon request from the Providing Agency,
the Requesting Party must submit an attestation from a currently licensed Certified Public Accountant
perFormed in accordance with American Institute of Certifled Public Accountants (AICPA) "Statements on
St�ndards for Attestation Engagement." In lieu of 5ubmitting the attestation from a currently licensed Certified
Public Accountant, Requesting PBrty may submit an alternate certification with pre-approval from the
Department. In the event the Requesting Party is a governmental entity, the attestation may be provided by
the entity's internal auditor or inspector general. The attestation must indicate that the internal controls over
personal data have been evaluated and are adequate to protect the personal data from unauthorized access,
distribution, use, modification, or disclosure. The attestation must be received by the Providing Agency within
180 days of the written request. The Providing Agency may extend the time to submit the attestation upon
written request and for good cause shown by the Requesting Agency.
B. Misuse of Personal Information — The Requesting Party must immediately notify the Providing Agency and
the affected individual following the determination that personal information has been compromised by any
unauthorized access, distribution, use, modification, or disclosure. Th� statement to the Providing Agency
must provide the date and the number of records affected by any unauthorized access, distribution, use,
modification, or disclosure of personal information. Further, as providEd in section 817.5681, Florida
Statutes, the document must provide a statement advising if individuals whose personal information has
been compromised have been notified and, if not, when they will be notified. l"he statement must include the
Data Exchange MOU (Rev. OS-10-2011) Page 5 of 7
corrective actions and the date these actions are completed by the Requesting Party. See 5ection Xfor
camplete mailing address.
C. The Providing Agency shall receive an annual a�rmation from the Requesting Party indicating compliance
with the requirements of this agreement no later than 45 days after the anniversary date of this agreement.
VII. Period of Performance
This MOU shall be effective upon the last signatur� of the Parties to this agr�ement and will remain in effect for three
years from the date of executian, as provided in Section X. Once executed, this MOU supersedes all previous
agr�ements for these conditions of services defined in Section I.
VIII. Amendments
A. 7his MOU incorporates all prior negotia#ions, interpretations, and understandings between the Parties, and is
the full expression of their agreement,
B. 7his MOU may be subs�quently amended by written agreement between the Parties. Any change,
alteration, deletion, ar addition to the terms set forth in this MOU and its numbered addendums must be by
written agreement ex�cuted by both Parti�s.
C. All provisions not in conflict with the amendment(s) shall remain in effect and are to be perFormed as
specified in this MOU.
IX. Term(nation
A. This agreement may be terminated for cause by either party upon finding that the terms and conditions
containEd herein are not being followed. No written notice or notifying period will be required.
B. This agreement is subject to unilateral cancellation by the Providing Ag�ncy without notice for failure of the
Requesting Party to comply with any of the requirements of the MOU and applicable Florida Statutes,
including section 119.Q712(2), Florida Statutes.
C. The Cantract may be terminated upon thirty (3p) days notice in writing to the Contract Manager without
penalty to either party. All obligations of either party under the contract will remain in force during the thirty
(30) day notice period.
Data Exchange MOU (Rev. OS-10-2011) Page 6 of 7
IN WI7N�SS HERE70, the PARTIES have executed this Agreement by their duly authorized officials.
Requesting Party:
Clearwater Police Department
Company / Agency Name
645 Pierce 5treet
Street Address
Suite
Clearwater, FL 33756
City,�t�te Zip Code
By. ' �� �
, .
Anthon Hollowa
Printed/Typed Name
Chief of Police
Title
August 15, 2011
Date
anthonv.hollowav(c7mvclearwater, . �pr,-�
E-Mail Address
727 5G2-4343
Phone NumBer
�a�-5b�-�t33°I
Fax Num6er
Technical Contact for F7p, program Access
Vince Mohr
Printed/Typed Name
vincent.mohr�a�myclearwater.com
E-Mail Address
727 562-4235
Phone Number
Point af contact for Web Application Access
Same as Technical Contact
Printedltyped Name
E-Mail Address
Phone Number
Providing Agency:
Florida Department of Highway Safety
and Motor Vehicles
2900 Apalachee Parkway
Tallahassee, �lorida 32399
i�
�
� J
By: � .
�
Keyin Bailev
Printed/Typed Name �T
Chi�f of Purchasing & Contracts
Yme
�' .�v �(
Pate � �
Data Exchange MOU (Rev. OS-10-2011) Page 7 of 7
ATTACHMENT 1
DRIVER PRTVA 'Y PROTEC'I'ION ACT EXCEF'I'IONS
1. Eor use in connection with matters of motor vehicle or driver safety theft, motor vehicle emissions, motor vehicle product alterations, recalls, or
advisoriss, performance monitoring of motor vehicles and dealers by motor vehicle manufacturers, and removal of non-owner records from the
original owner records of motor vehicle manufacturers, to carry out the purposes of the Anti Car Theft Act of 1992, the Automobile information
Disclosure Act, the Clean Air Act, and cha}xers 301, 305, and 321-331 of title 49 U.S.C.
2. For use by any govemment agency, including any court or law enforcement agency, in carrying out its functions, or any private person or entity ac[ing
on behalf of a federal, state, or local agency in carrying out its functions.
3. For use in connection with matters af motor vehicle or driver safety and theR; motor vehicle emissions; motor vehicle product alterations, recalls, or
advisories; performance monitpring of motor vehicles, motar vehicle parts, and dealers; motor vehicle marke[ research activities, including survey
research; and removal of non-owner records from the original owner records of motor vehicle manufacturers.
4. For use in the normal course of business by a legitimate business or its agents, employees, or contractors, but only:
(a) To verify the accuracy of personal information submitted by the individual to the business or its agents, employees, or contractors; and
(b) If such information as so submitted is not correct or is no longer correct, to obtain the correct information, but only for the purposes of preventing
fraud by, pursuing legal remedies against, or recovering on a debt pr security interest against, the individual.
S. For use in cnnnection with any civil, criminal, administrative, or arhitral proceeding in any court or agency or before any self-regulatory 6ody for:
(a) $ervice of process by any certified process server, special process server, or other person suthorized to serve process in this state.
(b) Investigation in anticipation of litigation; however, the information may not be used for mass commercial solicitation of clients far litigation
against motor vehicle dealers.
(c) Investigation by any person in connection with any �led proceeding; however, the information may not be used for mass commercial solicitation of
clients for litigation against motor vehicle dealer3
(d) Execution or enforcement of judgments and arders.
(e) Compliance with an order of any court.
6. For use in research activities and for use in producing statistical reports, so long as the personal inFormation is not published, re-disclosed, or used to
contact individuals.
7. F'or use by any insurer or insurance support organization, or by a self-insured entity, or its agents, employees, or contractors, in connectipn with claims
investigation acGvities, anti-fraud activities, rating, or underwriting,
8. For use in providing notice to the owners of towed or impounded vehicles.
9. For use by any licensed private investigative agency or licensed security service for any purpose pennitted under this paragraph
10. �'or use by an employer or its agent or insurer to obtain or verify information relating to a holder of a commercial driver's license that is required under
49 U.S.C. ss. 31301 et seq.
1 1. For use in connection with the pperation of private toll transportation faciliqes.
12. For bulk distribution af surveys, marketing, or solicitations when the departrnent has obtained the express consent of the person to who such personal
infonnatioii pertains.
13. For any use if the requesting person demonstrates that he or she has obtained the written consent of the person who is the subject of the motor vehicle
record.
14. For any other use specifically authorized by state law, if such use is related to the operation of a motor vehicle or public safety.
15. For any other use if the person to whom the information pertains has given express consent on a form prescribed by the department. Such consent shall
remain in effect until it is revoked 6y the person on a form prescrihed by the department.
CRA.S� REPORT EXCEPTIONS
I i am a party involved in the crash.
2 I am a legal representative to a party involved in the crash or an immediate relative.
3 I am a licensed insurance agent to a party involved in the crash, their insurer or insurers to which they applied for insurance coveruge.
4 I am a person under contract [a provide claims or underwriting information to a qualifying insurance company.
5 I am a prosecuting attorney.
6 I represent a radio or television station licensed by the FCC or newspaper quali�ed to publish legal notices or a free newspaper of general
circulation, which qualifies under statute.
7 I represent a local, state, or Federal agency that is authorized by law to have access to these reports.
8 1 represent a Victim Service Program, as defined in Section 316.003(85), Florida St�tutes.
11$MV 96075-ATTACHh1ENT 1 (04/11)