Cities Index.
Attachment 3 Data Ticket Security Requirements

Mayor and City Council
June 17, 2026

Document
Attachment 3 Data Ticket Security Requirements
Meeting
June 17, 2026
Body
Mayor and City Council
Original file
120 KB
Text extracted from the city's file for reading and search. Open the original on sanbernardino.primegov.com. That file is the official record.

2603 Main Street, Suite 300
Irvine, California 92614
949-428-7241
[email protected]

05/07/26 - 1 - - 1 -

SECURITY REQUIREMENTS

ARTICLE I

1.1 Security Provisions: AGENCY agrees to follow all defined security requirements including but not limited to:

A) All AGENCY employees who are provided access to services provided by COMPANY must complete a background check and must complete annual security awareness trainings.

B) All AGENCY employees must sign security agreement documents subject to the source state of the information being obtained by DMV entities.

C) AGENCY must inform COMPANY within 24 hours of an AGENCY employee with access to COMPANY services leaving their role.

D) AGENCY must inform COMPANY of any breach of information within 24 hours, so the appropriate government agencies can be notified of the breach.

E) AGENCY understands and agrees that security requirements may change and be updated to reflect the most current security requirements of the government agencies we work with to obtain vehicle registered information.

F) AGENCY understands that evidence of the security requirements may be requested to comply with COMPANY audit requirements of the governmental agencies we work with.

G) AGENCY understands and agrees that access to confidential registered owner information may be immediately restricted or terminated if any of the mandatory provisions above are found to be violated or abused.

1.2 Permissible Use Provisions: AGENCY agrees to follow all defined permissible use requirements including but not limited to:

A) All AGENCY employees who are provided access to services provided by CONTRACTOR must receive annual training on permissible use of state agency information.

B) All AGENCY employees must sign permissible use agreement

2603 Main Street, Suite 300
Irvine, California 92614
949-428-7241
[email protected]

05/07/26 - 2 - - 2 -
documents subject to the source state or government agency where the vehicle registered owner information is being obtained.

C) All AGENCY employees will be instructed of the confidentiality of information obtained from a government agency and the proper use of that information based on job responsibility, which must not involve immigration purposes.

D) AGENCY must inform CONTRACTOR within 24 hours if data has been misused in such a manner that might constitute data misuse or a data breach. CONTRACTOR must inform AGENCY within 24 hours if data has been misused in such a manner that might constitute data misuse or data breach.

E) AGENCY must inform CONTRACTOR of any breach of information within 24 hours, so the appropriate government agencies can be notified of the breach. CONTRACTOR must inform AGANCY of any breach of information within 24 hours, so the appropriate agencies and individuals can be notified of the breach.

F) AGENCY understands and agrees that permissible use requirements may change and be updated to reflect the most current permissible use requirements of the government agencies CONTRACTOR works with to obtain vehicle registered information.

G) AGENCY understands that evidence of the permissible use requirements may be requested to comply with CONTRACTOR audit requirements of the governmental agencies CONTRACTOR works with.

H) AGENCY understands that tracking of activity will occur for annual reviews to be conducted by CONTRACTOR to ensure the confidentiality and privacy required for government agency provided information.

I) AGENCY understands and agrees that access to confidential registered owner information may be immediately restricted or terminated if any of the mandatory provisions above are found to be violated or abused.

J) AGENCY understands that all information obtained through government agencies is considered subject to the Drivers Privacy Act (DPPA) and agrees that no disclosures of information will be made that would constitute a

2603 Main Street, Suite 300
Irvine, California 92614
949-428-7241
[email protected]

05/07/26 - 3 - - 3 -
violation of this act.

ARTICLE II

2.1 Integrated Agreement: This contract is intended by the parties as a final expression of their Agreement and also as a complete and exclusive statement of the terms thereof, any prior oral or written Agreement regarding the same subject matter notwithstanding. This Agreement may not be modified or terminated orally and no modification or any claim or waiver of any of the provisions shall be effective unless in writing and signed by both parties.

2.2 Law Applicable: This Agreement shall be construed in accordance with the Laws of the State of California.

2.3 Location of Appeal Hearings: All in person appeal hearings shall be held within San Bernardino County.

2.4 Notice to Parties: Any notice required under this Agreement to be given to either party may be given by depositing in the United States mail, postage prepaid, first-class, addressed to the following:

← All documents from this meeting