Loading...
HomeMy WebLinkAboutAgreement_General_10/12/2017_FL Department of Highway Safety & MotorDocuSign Envelope ID: DDF5CEOA-899A-41 FE-A879-AC8FDDF639F1 FLORIDA Florida Department of Highway Safety and Motor Vehicles ----------------------- HIGHWAY SAFETY AND MOTOR VEHICLES Contract / Agreement Review DHSMV Contract No.: HSMV-0257-18 Contractor Name: Tequesta Police Department Contract Summary: Previous MOU HSMV-0142-15 Please terminate HSMV-0142-15 Total Cost / Revenue: $0.00 Contract Manager: Kayla White ® New Agreement 151 If checked, budgetary review/approval is not required as funds are ❑ New Contract (Procurement) Procurement Method: ❑ITB ❑RFP ❑Exempt per ❑ Renewal ❑ Settlement Agreement Approvals Division: Motorist Services Date: 11/3/2017 or No Cost ❑x Term: 6 years Phone: 850.617.2805 ❑ITN ❑RFQ ❑Single Source ❑Informal Quote . Florida Statutes ® Not Required ❑ Amendment ❑ New/ Revised Template Comments Division Director(s) Doc uft—d by: Signature -'jG +°I- �"hd' Date�1.1/6/2017 OA2EMA47AK488... Signature: Date: Budget Signature: Date: 151 If checked, budgetary review/approval is not required as funds are not expended under this Contract/Agreement. Accounting Signature: Date: [31 If checked, accounting review/approval is not required as funds are not received or obligated under this ContractlA regiment Information Services Signature: Date: 9 if checked, ISA review/approval is not required as this Contract/Agreement does not impact Information systems. Legal Signature: Date: Q If checked, legal review/approval is not required as the document is apreviously-approved boile late Purchasing & Contracts D—Signed by: Date. 11/6/2017 SignaturC7,,,­..,,,, Administrative Services D—Sig—d by: Signature Date: 11/7/2017 Deputy Executive Director Signature: Date: IN H checked, review/approval by Deputy Executive Director is not required as the Contract/Agreement. Chief of Staff / Executive Director D—Signed by: Signature:P9914907AA52486 1/I (h" Date:11/7/2017 _ UORA\/ OGnOn MG/On4 G1 DocuSign Envelope ID: DDF5CEOA-899A41FE-A879-AC8FDDF639F1 Memorandum of Understanding (MOU) — Item check list Agency Name: Tequesta Police Department Documentation of current licensure or certification from resident state of corporation ❑ Reviewed copy of requestor's business license. ❑ In state corporation status obtained from www.sunbiz.ore. Or ❑ Out of State Corporation licensure or certification submitted by requestor (attached). ❑ Reviewed requestor's website at comparing DPPA exemption claimed to the business needs or services provided to third parties. ❑ If vendor is acting on behalf of a government agency, a letter of authority is attached. x❑ This is a government/law enforcement agency. Memorandum of Understanding ® Current forms have been provided. ® Requestor has provided appropriate signatures. ❑ Letter of delegation is required if signed by other than authorized official. Form 90615 (DPPA) ® Current version of form has been provided. Debit Authorization Form ❑ Account/Routing number is provided. ❑ An appropriate signature is provided. ❑ Copy of form provided to Revenue. ® N/A Docuftn" by: Reviewed b�`�� `LORE 4800ite Bureau of Records Date: 11/3/2017 DocuSign Envelope ID: DDF5CEOA-899A-41FE-A879-AC8FDDF639F1 ASAM LOMA MEMORANDUM OF UNDERSTANDING FOR LAW ENFORCEMENT AGENCY ACCESS TO DRIVER AND VEHICLE INFORMATION DATABASE SYSTEM (DAVID) Contract Number HSMV- HSMV-0257-18 This Me orandum of Understanding (MOU) is made and entered into by and between T�1IrJCS�1t 1iC-e- ��, hereinafter referred to as the Requesting Party, and the Florida Department of Highway Safety and Motor Vehicles, hereinafter referred to as the Providing Agency, collectively referred to as the Parties. Purpose The Providing Agency is a government entity whose primary duties include issuance of motor vehicle and driver licenses, registration and titling of motor vehicles, and enforcement of all laws governing traffic, travel, and public safety upon Florida's public highways. In carrying out its statutorily mandated duties and responsibilities, the Providing Agency collects and maintains personal information that identifies individuals. This information is stored in the Department's Driver and Vehicle Information Database system, commonly referred to as "DAVID.* Based upon the nature of this information, the Providing Agency is subject to the disclosure prohibitions contained in 18 U.S.C. §2721, the Driver's Privacy Protection Act (hereinafter "DPPA"), Section 119.0712(2), Florida Statutes, and other statutory provisions. The Requesting Party is a law enforcement agency operating under the Maws and authority of the state of Florida. As a law enforcement agency, the Requesting Party may receive personal information from DAVID under the government agency exception provided in DPPA as indicated in Attachment 1. The Requesting Party utilizes DAVID information for the purposes of carrying out its statutorily mandated law enforcement and prosecutorial functions. This MOU is entered into for the purpose of establishing the conditions and limitations under which the Providing Agency agrees to provide electronic access to DAVID information to the Requesting Party. Use of the data by Requesting Party shall only be for a lawful purpose. il. Definitions For the purposes of this Agreement, the below -listed terms shall have the following meanings: A. DAVID — The Providing Agency's Driver and Vehicle Information Database system that accesses and transmits driver and vehicle information. B. Driver License Information — Driver license and identification card data collected and maintained by the Providing Agency. This information includes personal information as defined below. C. Emergency Contact Information (ECI) — information contained in a motor vehicle record listing individuals to be contacted in the event of an emergency. Emergency contact information may be released to law enforcement agencies through the DAViD system for purposes of contacting those listed in the event of an emergency, as noted in Section 119.0712 (2)(c), Florida Statutes. D. Driver Privacy Protection Act (DPPA) — The Federal Act (see, 18 United States Code § 2721, at seq.) that prohibits release and use of personal Information except as otherwise specifically permitted within the Act. E. Law Enforcement Agency — Any state, county or city law enforcement agency, and state attorney offices Page 1 of 9 DAM (UGo) paw Exdaige MOU (Rev. 11-2078) DocuSign Envelope ID: DDF5CEOA-899A-41FE-A879-AC8FDDF639F1 operating under the laws and authority of the state of Florida. F. Insurance Record — insurance information, such as insurance Company name, policy type, policy status, Insurance creation and w0ration date provided to the Requesting Party, pursuant to Section 324242(2), Florida Statutes. G. Parties - The Providing Agency and the Requesting Party. H. Personal Information — As described in Chapter 119, Florida Statutes, and Information found in the motor vehicle record which includes, but Is not limited io� the subject's driver Meson number, name, address, telephone number, social security number, medical or disabifty Warmallion, and emergency contact mien,, ation. I. Pohrt LContact (POC) - A persons) appointed by the Reques" Party as On administrator of the DAVID program M their agency. J. Providing Agency - The Florida Department of Highway Safety and Motor Vehicles. The Providing Agency Is responsible for granting access to DAVID loforrnation to the Requesting Party. K Quarterly Quality Control Review Report — Report completed each quarter by the POC to morttor compliance with this agreement The following must be included in the Quarterly Quality Control Review Report: 1. A comparison of the DAVID users by agency report with the agency user list; 2. A listing of any new or inactivated users since the last quarterly quaity control review, and 3. Documentation verifying that usage has been internally monitored to ensure proper, authorized use and dissemination. L. Requesting Party - Any law enforcement agency that is wpmly authorized by Section 119.0712(2), Florida Statutes, and DPPA to receive personal Information contained in a motor vehicle record maintained bythe Providing Agency M. Vehicle Inlbrmadon — Title and ration data collected and maintained by the Providing Agency for vehicim The Providing Agency maintains computer databases containing information pertaining to driver's licenses and vehicles pursuant to Chapters 317, 319, 320, 322, 328, and Section 324.242(2) Florida Statutes. The driver license and motor vehicle date contained in the Providing Agency's dam is defined as public record pursuant to Chapter 119, Florida Statutes, and as such, is subject to public disclosure unless otherwise exempted by law. As the custodian of the state's driver and vehicle records, the Providing Agency is required to provide access to records permitted to be disclosed by law, and may do so by remote electronic means, pursuant to Sections 119.0712(2), 320.05, 321.23, 32220, and 324.242(2). Florida Statutes, and applicable rules. Under this MOU, the Requesting Party will be provided, via remote electronic means. information pertaining to driver licenses and vehicles, Including personal inhormadon authorized to be released pursuant to Secdon 119.0712(2), Florida Sfahutes and DPPA. By executing this MOU, the Requesting Party agrees to maintain the c ornfidential and exempt status of any and all Information provided by the Providing Agency pursuant to this agreement and to ensure that any person or entity accessing or utilizing said information shall do so In compliance with Section 119.0712(2), Florida Statutes and DPPA. In addition, the Page 2 of 9 o"o lord) am OWWW Neu pmv.11-Mel DocuSign Envelope ID: DDF5CEOA-899A-41 FE-A879-AC8FDDF639F1 Requesting Party agrees that insurance policy information shall be utifted pursuant to Section 324.242(2), Florida Statutes. This MOU Is governed by the laws of the state of Florida and jurisdiction of any dispute arising from this MOU shall be in Leon County, Florida. IV. Stateniot of Work A. The Providing Agency agrees to: 1. Allow the Requesting Partyto electronically access DAVID as authorized under this agreement. 2 Provide electronic access pursuant to established roles and times, which shall be uninterrupted except for periods of scheduled maintenance or due to a disruption beyond the Providing Agency's control, or In the event of brach of this MOU by the Requesting Party. Scheduled maintenance will normally occur Sunday mornings between the hours of 6:00 A.M- and 10:00 A.M. 3. Provide an agency contact person for assistance with the implementation and administration of this MOU. B. The Requesting Party agrees to: 1. Utilize Information obtained pursuant to this MOU, including Emergency Contact Information (ECQ, only as authartzed by law and for the purposes prescribed by law and as further described in this MOU. In the case of ECI, such Information shall only be used for the purposes of notifying a person's registered emergency contact in the event of a serious injury, death, or other Incapacitation. ECI shall not be released or utilized for any other purpose, including developing bads or foraiminal Investigative purposes. 2 Retain information obtained from the Providing Agency only If necessary for law enforcement purposes. If retained, information shall be safeguarded in compliance with Section V. Sefeouardirm lntliarmation. subsection C. 3. Ensure that its employees and agents comply with Section V. Se uMfto Infimnallo,4• 4. Refrain from assigning, sub -contracting, or otherwise transferring its rights. duties, or obligations under this MOU, without the prior written consent of the Providing Agency. 5. Not share, provide, or release any DAVID Information to any other law enforcement, governmental agency, person, or entity not a party or otherwise subject to the terms and conditions of this MOU. 6. Protect and maintain the cenliderdatity and security of the data received from the Providing Agency Is accordance with this MOU and applicable state and federal law. 7. Defend, hold harmless and indemnify the Providing Agency and its employnees or agents from any and all claims, actions, damages, or losses which may be brought or alleged against its employees or agents for the Requesting Party's negligent, improper, or unauthortzed access, use, or dissemination of Information provided by the Providing Agency, to the extent allowed by law. & Immediately inactivate user acceselpermissbns following termination or the determination of negligent improper. or unauffiorizad use or dissemination of information. Update user accesslpermissions upon reassignment of users within five (5) business work days. 9. Complete and maintain Quarterly Quality Control Review Reports as defined in Section 11 — Definitions -- J, and uiitift the form attached as Attachment 11. Page 3 of 9 Owe lZA) Do eMW qac►. 114" DocuSign Envelope ID: DDF5CEOA-899A-41FE-A879-AC8FDDF639F1 10. Update any changes to the name of the Requesting Patty, its Agency head, its POC, address, telephone number andfor e-mail address In the DAVID system within ten calendar days of occurrence. The Requesting Party Is hereby put on notice that failuure to timely update this information may adversely affect the time frames for receipt of information from the Providing Agency. 11. immediately comply with any restriction, limitation, or condition enacted by the Florida Legislature following the date of signature of this MOU, at%cttng any of the provisions herein stated. The Requesting Party understands and agrees that it is obligated to comply with the appll�ble provisions of Maw regarding the subject matter of this Agreement at all times that it Is receiving, accessing. or utilizing DAViD information. 12. Cooperate with the Providing Agency in Field Audits conducted pursueA to Section VL B., below. 13. Timely submit the reports and statements required in Section VI. Qgmplilance and C6rdrol lures. below. V. §OgUqrdlnalnftmwdan The Parties shall access, dlssemlrate, use and maintain all information received under this Agreement in a manner that ensures its confidentiality and proper uMb atlas in accordance with Chapter 119, Florida Statutes, and DPPA Information obtained under this itwgreement shall only be disclosed to persons to whom disclosure is authorized under Florida law and federal law. Any person who willfully and knowingly violates any of the provisions of this section is guilty of a misderneanor of the first degree punishable as provided In Sections 119.10 and 775.083, Florida Statutes. In addition, any person who willfully and knowingly discloses any Information in violation of DPPA may be subject to criminal and civil liability. The Parties mutuallyyagree to the fcilowing: A. Information exchanged will not be used for any purposes not spec lically authorized by this MOU. Unsuthorhwd use incudes, but is not limited to, queries not related to a legiftate business purpose, personal use, or the dissemination, sharing, copying, or passing of this inforrrnatbn to unauthorited persona. B. The Requesting Party shag not indemnify and shall not be liable to the Providing Agency for any driver kerm or motor vehicle information lost, damaged, or destroyed as a result of the electronic exchange of date pursuant to this MOU, except as otherwise provided In Section 768.28, Florida Statutes. C. Any and all DAVID -related Intonnation provided to the Requesting Party as a result of this MOU, paftularly data from the DAVID system, will be stored in a place physically secure from acxess by unauthorized persons. D. The Requesting Party shag comply with bile 742, Florida Administrative Code, and with Providing Agency's security policies, and employ adequate security measures to protea Providing Agency"s information, applications, date, resources, and services. The applicable Providing Agency security policies shall be made available to Requesting Party. E. When pfited kdb me9on from DAVID has met record retention, it shall be destroyed by cross -cut shredding or incineration in accordance with Florida law. F. The Requesttrg Party shall maintain a Not of all persons authoried within the agency to access DAVID Information. The list will not be provided to the Providing Agency, but shall be subject to viewing during any Page 4 of 9 Gain QAq oro MOMW Mou M".11 -Ma) DocuSign Envelope ID: DDF5CEOA-899A-41 FE-A879-AC8FDDF639F1 field audit conducted by the Providing Agency or in the event of a violation under Section W. D, of this MOU for the purposes of ascertaining whether the person or persons Involved have been removed from the list or have otherwise had their DAVID access modified or limited. Q Access to DAVID -rel ded irnfcr melon, particularly data from the DAVID System, will be primed in suds a way that unauthorized persona cannot view, retrieve, or print the Wonrodon. H. Under this MOU agreement, access to DAViD system shall be provided to users who are direct ernploy*es of the Requesting Party and shall not be provided to any non-employee or contractors of the Requrestirng Party. By signing this MOU, the Parties, through tiretr signatories, affirm and agree to maintain the confidentiality of the infommadon exchanged through this Agreement A. Ch erterly tuagt',jr Control Review Report — Must be completed, utlizing Attachment II, (quarterly Quality Control Review Report, within 10 days after the end of each quarter and maintained for two years. 13. Field Audits — Field audits shad be conducted by the Providing Agency In order to ensure that MOU requirements concerning internal controls ora being met Field audits shall be conducted on-site by Providing Agency employees, who shall be designated as `Field Uatso ns" for the purposes of this MOU. Field liaisons slag be geographically, located throughout the state. The Requesting Party shall cooperate with the Field !.raisons in conducting field audits by granting access to systems and records related to this MOU and assigning appropriate personnel to respond to information requests. Audits shall be conducted a minimum of once, every two years. Field Liaisons shag contact the POC In order to schedule the audit. At the completion of the audit, the Field Liaison will cmnpkft a report and provide a copy to time Requesting Party within ninety (90) days of the audit date. Should the audit report conclude that deficiencies; or Issues exist In regard to the Requesting Party's Internal corsrob, or access to or use of DAVID Warnisdon, Providing Agency reserves the right to take, based upon the nature of the deftencies/issues found, any or all of the following actions: audit more frequently than once, every two years; and/or suspend or terminate Requesting Partys access to DAVID information until such time as Requesting Party submrre proof satisfactory to the Providing Agency that the deficiencies/t wee have been c orreafed. C. Internal Control Attestation — This MOU Is contingent upon the Requesting Party having appropriate internal oontrok in place at ag times that data is being providmlheceived pursuant to this MOU to ensure Out the data is protected from unauthorized access, distribution, use, modification. or disclosure. The Requesting Party must submit an Attestation statement no Mater than 45 days after receipt of the audit report referenced in subsection B. above. The Attestation shag indicate that the interim controls over personal data have been reviewed and evaluated It light of lite audit fnmc rW and are adequate to protect the personal data from unauthorized access, mon, use, modification, or disclosure. The Attestation shag also certify that any and all deficiencies/issues found during the audit have been corrected and measures enacted to prevent recurrence. The Providing Agency may extend the time for submission of the Attestation upon written request by the Requesting Party. The Attestation must have an original signatore of the Chief, Sheriff, or State Attorney, or person designated by Letter of Delegation to execute oontmeleftmements on their behalf, may be sent vie U.S. Mail, facaimie bwmmisslon, or a-malled to the Providing AgencyTs Bureau of Records at the following address: Department of Highway Safety and Motor Vehicles Bureau of Records 2900 Apalachee Parkway, MS 89 Tallahassee, Florida 52399-OSW Page 5 of 9 DocuSign Envelope ID: DDF5CEOA-899A-41FE-A879-AC8FDDF639F1 Fax: (850) 617-5168 E-mail: DataListinoUnit aaflhsmv.00v D. Annual Certification Statement - The Requesting Party shall submit to the Providing Agency an annual statement Indicating that the Requesting Party has evaluated and certifies that it has adequate controls in place to protect the personal data from unauthorized access, distribution, use, modification, or disclosure, and is in full compliance with the requirements of this MOU. The Requesting Party shag submit this statement annually, within 45 days after the anniversary date of this MOU. (NOTE: During any year in which a Field Audit is conducted, submission of the Internal Control Attestation may satisfy the requirement to submit an Annual Certification Statement.) Failure to timely submit the certification statement may result in an immediate field audit and, based upon the findings of the audit, suspension or termination of Requesting Partys access to DAVID information as indicated in subsection B., above. In addition, prior to expiration of this MOU, if the Requesting Party intends to enter into a new MOU, a certification statement attesting that appropriate controls remained in place during the final year of the MOU and are currently in place shall be required to be submitted to the Providing Agency prior to issuance of a new MOU. E. Misuse of Personal Information — The Requesting Party must notify the Providing Agency in writing of any incident where determination is made that personal information has been compromised as a result of unauthorized access, distribution, use, modification, or disclosure, by any means, within 30 days of such determination. The statement must be provided on the Requesting Partys letterhead and include each of the following: a brief summary of the incident; the outcome of the review; the date of the occurrence(s); the number of records compromised; the name or names of personnel responsible; whether disciplinary action or termination was rendered; and whether or not the owners of the compromised records were notified. The statement shall also indicate the steps taken, or to be taken, by the Requesting Agency to ensure that misuse of DAVID data does not continue. This statement shall be mailed to the Bureau Chief of Records at the address indicated in Section VI. C., above. (NOTE: If an incident involving breach of personal information did occur and Requesting Party did not notify the owner(s) of the compromised records, the Requesting Party must indicate why notice was not provided, for example "Notice not statutorily required.") In addition, the Requesting Party shall comply with the applicable provisions of Section 501.171, Florida Statutes, regarding data security and security breaches, and shall strictly comply with the provisions regarding notice provided therein. VII. Agreement Term This MOU shall take effect upon the date of last signature by the Parties and shall remain in effect for six (6) years from this date unless sooner terminated or cancelled in accordance with Section iX, Termination. Once executed, this MOU supersedes all previous agreements between the parties regarding the same subject matter. VIII. Amendments This MOU incorporates all negotiations, interpretations, and understandings between the Parties regarding the same subject matter, and serves as the full and final expression of their agreement. This MOU may be amended by written agreement executed by and between both Parties. Any change, alteration, deletion, or addition to the terms set forth in this MOU, including to any of its attachments, must be by written agreement executed by the Parties in the same manner as this MOU was initially executed. If there are any conflicts in the amendments to this MOU, the last -executed amendment shall prevail. All provisions not In conflict with the amendment(s) shall remain in effect and are to be performed as specified in Page 6 of 9 DAVID (LEA( Dalt Exd%enp MOU (Ray. 11-2016) DocuSign Envelope ID: DDF5CEOA-899A-41FE-A879-AC8FDDF639F1 this MOU. IX. Termination A. This MOU may be unilaterally terminated for cause by either party upon finding that the terms and conditions contained herein have been breached by the other party. Written notice of termination shall be provided to the breaching party; however, prior -written notice is not required and notice may be provided upon cessation of work under the agreement by the non -breaching party. B. In addition, this MOU is subject to unilateral termination by the Providing Agency without notice to the Requesting Party for failure of the Requesting Party to comply with any of the requirements of this MOU, or with any applicable state or federal laws, rites, or regulations, including Section 119.0712(2), Florida Statutes. C. This MOU may also be cancelled by either party, without penalty, upon 30 days' advanced written notice to the other party. Ali obligations of either party under the MOU will remain In full force and effect during the thirty (30) day notice period. X. Notices Any notices required to be provided under this MOU may be sent via U.S. Mail, facsimile transmission, or e-mail to the following Individuals: For the Providing Agency: Chief, Bureau of Records 2900 Apalachee Parkway Tallahassee, Florida 32399 Fax: (850) 617-5168 E-mail: Data ListingUnitaflhsmv.aov For the Requesting Party: Agency Point -of -Contact listed on the signature page. XI. Additional Database Access/Subseauent MOU's The Parties understand and acknowledge that this MOU entitles the Requesting Party to specific information included within the scope of this agreement. Should the Requesting Party wish to obtain access to other personal information not provided hereunder, the Requesting Party will be required to execute a subsequent MOU with the Providing Agency specific to the additional information requested. All MOU's granting access to personal information will contain the same clauses as are contained herein regarding audits, report submission, and the submission of Certification and Attestation statements. The Providing Agency is mindful of the costs that would be incurred if the Requesting Party was required to undergo multiple audits and to submit separate certifications, attestations, and reports for each executed MOU. Accordingly, should the Requesting Party execute any subsequent MOU with the Providing Agency for access to personal information while the instant MOU remains in effect, the Requesting Party may submit a written request, subject to Providing Agency approval, to submit one of each of the following covering all executed MOU's: Quarterly Quality Control Review Report; Certification; and Attestation; and/or to have conducted one comprehensive audit addressing internal controls for all executed MOU's. The Providing Agency shall have the sole discretion to approve or deny such request in whole or in part or to subsequently rescind an approved request based upon the Requesting Party's compliance with this MOU and/or any negative audit findings. Page 7 of 9 DAVID {LEA) Oda E=hange MOU (Rev. 11,2016) DocuSign Envelope ID: DDF5CEOA-899A-41 FE-A879-AC8FDDF639F1 )al- Aniplication of Public Records Law The Requesting Party agrees to comply with the following requirements of Florida's public records laws: 1. Keep and maintain public records required by the Department to perform the service 2. Upon request from the Department's custodian of public records, provide the Department with a copy of the requested records or allow the records to be inspected or copied within a reasonable time at a cost that does not exceed the cost provided in Chapter 119, Florida Statutes, or as otherwise provided by law. 3. Ensure that public records that are exempt or confidential and exempt from public records disclosure requirements are not disclosed except as authorized by law for the duration of the contract term and following completion of the contract if the contractor does not transfer the records to the public agency. 4. Upon completion of the contract, transfer, at no cost, to the Department all public records in possession of the Requesting Party or keep and maintain public records required by the public agency to perform the service. If the Requesting Party transfers all public records to the Department upon completion of the contract, the Requesting Party shall destroy any duplicate public records that are exempt or confidential and exempt from public records disclosure requirements. If the Requesting Party keeps and maintains public records upon completion of the contract, the contractor shall meet all applicable requirements for retaining public records. All records stored electronically must be provided to the Department, upon request from the Department's custodian of public records, in a format that is compatible with the information technology systems of the Department. IF THE CONTRACTOR HAS QUESTIONS REGARDING THE APPLICATION OF CHAPTER 119, FLORIDA STATUTES, TO THE CONTRACTOR'S DUTY TO PROVIDE PUBLIC RECORDS RELATING TO THIS CONTRACT, CONTACT THE CUSTODIAN OF PUBLIC RECORDS AT (850) 617-3101, OGCFiIIngM-- Ihsmv.gov, PUBLIC RECORDS COORDINATOR, OFFICE OF GENERAL COUNSEL, 2900 APALACHEE PARKWAY, ROOM A432, MS 02, TALLAHASSEE, FL 32399 REMAINDER OF THIS PAGE INTENTIONALLY LEFT BLANK Page 8 of 9 anvo (LEA) Dau E=ha g. Aou (Rw. 11-mis) DocuSign Envelope ID: DDF5CEOA-899A-41FE-A879-AC8FDDF639F1 IN WITNESS HEREOF, the Parties hereto, have executed this Agreement by their duly authorized officials on the dates) indkmted below. REQUESTING PAR'T'Y: MTe�uvsta" I , y, Dqwtmett Agency me st�tAddr� SURD 1e� city state Zlp code t� i&IQ r Title 10 -1a-1-\ Date ►`ibceorsa.nil_ 4-ame -A .ora Offk*l Agency Emall Ad ss So i --) 04 Los Phone Number Agency Poles zr� e F I m YY1c �}r•�w Printed/Typed Name Oficial Agency Email Address ►�,✓� Phone Number Fax Number PROVIDING AGENCY: Florida Departmentof NighwaySafety and Motor Vehidea 2900 ApaiacheeParkway Tallahassee, Flodit 32399 I_iaa Iut. Bassett Prfited[Typed Name Chid Bureau of PurclWfio end Contracts iwtle 11/7/2017 Date page 9 or 9 DAVID OXA) Dela Bwheige MDU (lira. 11-M6) DocuSign Envelope ID: DDF5CEOA-899A-41 FE-A879-AC8FDDF639F1 ATTACHMENT I FLORIDA DEPARTMENT OF HIGHWAY SAFETY AND MOTOR VEHICLES Reelnest For Access to Driver And Vehicle information Database System (DAVID) The Driver's Privacy Pion Act, 18 United States Code sections 2721("DPPA") makes personal information contained in motor vehicle or driver license records confid®tml and exempt fiorn disci°sore. Personal i°formatr°n in a motor vehicle or driver license record includes, but is not limited to, an individual's social security number, driver license or identification number, name, address and, medical or disability information. Personal information does not include iatnmmtion related to driving violsh ms and driver status. Personal hiftmation from these records may only be released to individuals or organizations that qualify under one of the exemptions provided in DPPA, which are listed on the back of this form. I am a remove of an organizatimrequesting personal in8oanstiom for one or more records as described below. I declare that my option is qual{fied to obtain personal hifotmation under exemption numbex(s) On e~ , as listed on page 2 of this form Iunderstandthat 1 shall not use or redisciose this pes<wnal information except as provided in DPPA and that any use or rediackan in viol d m of these statutes may subject me to criminal sanctions and civil liabi ty. Complete the following for each DPPA exemption being claimed. (attecbed additional page, if ne ess")r DPPA Description of How Requesting Party Exemption Qualifies for Exemption - Claimed. It je& u R-1 ice r a A l to GwiEQrC4v+ne.^T Data willbe used LOW to f *rC.CWn*nt VirpoSe.S Obtaining personal information under false pretenses is a state and federal crime. Under penalties of perjury, I declare that I have read the foregoing Bequest For Exempt Personal Information in A Motor Vehicloonver Ince= Record and that the facts stated in it aro true and correct. Stgtilature of Authorized Official �l M els CrpAZ Printed Natne 10-16- 201? Date Page 1 of 2 (U M17) Name of Agency/Entity DocuSign Envelope ID: DDF5CEOA-899A-41FE-A879-AC8FDDF639F1 Purest to section 119.0712(2), F. S., pe+aoed lafamation in motor vehicle and driver license records can be rdomad for lbe foQowing purposes, as outlined in 18 United States Code, section 2711. persoml infmmodw referred to in subsection (a) shall be diealosed ibr use in connecdon with matters of motor vehiob or driver safety cad the% motor vehicle emissions, motor vahiole product alteraboa, recaUa, or adwsudes, perfrmanee aaanhosing ofmotor vehicles and dealim by moor vehicle maaaftsrera, and nanovol ofnan-ownerxecords Am the aural owner records of molar vehicle kms b racy out dw purpaa of Was I and 1V of the And Car Thea Act of 1992, the Automobc7o kdrination Diedusure Act (15 U.S.C. 1231 et seq.), the Clean Air Act (42 U.S.G 7401 at seq.} and diepfeta 301, 305, and 321331 of ti8e 49, and, subjai to subsection. 1. Forum by my govemmod agency, indudiog any court or law agency, in emyiog out its 9mdlons, or aoy pdvde person or entity ailing on be ba f of a Pedm4 Stde, or local agony in carrying out its 5msc dom 2. For use in connection with manors of motor vahkk or ddvor safbty and Got meta: vehicle emisdone; motor vehicle product shmudoee, RmIls, or advbodeg perbocmmee monftft of motor vddclea, morns vehicle pacts and dealer motor vehicle mat reseen I activities, mchxft surrey research; and removal of non -owner records Som the original Owner records of snotocvewele 3. For use in the normal comae of bwbm by a legititmts business or its agents, employees, or contractors, bd only - (a) to verify tits accuracy of petsond iafsemation submitted by On inilhidoal to the business or its agents, cmpl Tor% or coatracilors; and (b) if aoch idbandion as so submitted is not oasect or is no longer correct, b obtain the rouser inibtmedee, but ody fbr the p q== of preventing fraud by, pursuing IcVI remedies against, or recovering on a debt or secmaty imeten a8aind, the iodividuaI. 4. For ase is c000wdm with arty av% akdnal, odminidra&r, or arbitral procecdiog is any Federal, Statq or local annul or agency or before any self-regulatory boit6 hckW rg the service ofpwoes% Investigation is ardieipsficn of litigation, and the execution at enfiwacnout of judgments and ordu% or pcmdrmt to an order of afedera% Soft, or b W court. 5. For use in research activities, and for use in producing smds ical reports, so long as the personal bdormatien is not pu6Ushed, redisolosed, or used to contact individaa4. G. For an by any iasmur or imtaa.ca support organisation, or by a self immed entity, or its agents, employees, or eonbacmts, in connection wdb claims mvempation activities, mod ud activities, raft or undecarrift 7. For use in providing notice to the awnea of towed or impounded vehicles. 8. For nae by any Reensed privam inva dpiive agency or Heensed we wit,y se vloe 1br my parposc penritled under oris subsection. 9. For use by an employer or its agmd or ftwer to obtain or va* information relating to a lydder of a commercial driver's licmtse that is c+ p fired under eMpter 313 of title 49. I0. Forum in connection vrith the operation of pdvate tot ttmsporlatien faeiiidCL I L For any other use in mpmw to regorata for individual motor vehicle records if the State has obtained the et 11 oorsent of the peraoa to wbom such pmamrl w%anstion petmos. 12. For bulkdheibation fibr surveys, madmft or soliritstioes if the State has obaioed tyre cgms consent of the person to whom such Personal! iafmmadm pertains. 13. For on by say requester, if the requester demoashoes it has obtained the written roused of the individual to whom the tafomnitioa PWWM 14. For any other use spac ifludly ad6orimed under the low of the State That holds rho record, if axh use is reieted to the operation of a motm vebideorpMic ad* Page 2 of 2 (02/201') Envelope Id: DDF5CEOA899A41FEA879AC8FDDF639F1 Subject: Please DocuSign these documents: Tequesta Police Department LEA DAVID MOU Renewal Source Envelope: Document Pages: 13 Signatures: 6 Certificate Pages: 6 Initials: 0 AutoNav: Enabled Envelopeld Stamping: Enabled Time Zone: (UTC -05:00) Eastern Time (US & Canada) Re r a Traelciq Status: Original 11/2/2017 Bennett White Bennettwhite@flhsmv.gov Security Level: Email, Account Authentication (None) Electronic Record and Signature Disclosure: Accepted: 11/3/2017 ID:be50d941-5723-447d-a7fb-69a9O28158f1 Robert Kynoch RobertKynoch@flhsmv.gov Director of Motorist Services FL Dept HSMV Security Level: Email, Account Authentication (None) Electronic Record and Signature Disclosure: Not Offered via DocuSign Lisa Bassett LisaBassett@flhsmv.gov Chief of Purchasing and Contracts FL Dept HSMV Security Level: Email, Account Authentication (None) Electronic Record and Signature Disclosure: Not Offered via DocuSign Kelley Scott KelleyScott@flhsmv.gov Director of Administrative Services Florida Department of Highway Safety and Motor Vehicles Security Level: Email, Account Authentication (None) Electronic Record and Signature Disclosure: Not Offered via DocuSign Holder. Kayla White kaylawhite@flhsmv.gov ..819-d by: E f`..Qfi?d" 091822BDE3BFI8A... Using IP Address: 207.156.9.1 EOocDegn.d q: � �I OA2EMWABE1Be... Using IP Address: 207.156.9.1 L4?S-- 7E2E9Po990B2159.. Using IP Address: 207.156.9.1 Doeusgn.a by, C s� Using IP Address: 207.156.9.1 Status: Completed Envelope Originator: Kayla White PO Box 6669 Portland, OR 97228 kaylawhite@flhsmv.gov IP Address: 207.156.9.1 Location: DocuSign Sent: 11/2/2017 Viewed: 11/3/2017 Signed: 11/3/2017 Sent: 11/3/2017 Viewed: 11/6/2017 Signed: 11/6/2017 Sent: 11/6/2017 Viewed: 11/6/2017 Signed: 11/6/2017 Sent: 11/6/2017 Viewed: 1117/2017 Signed: 11/7/2017 Docu.+.. ■ sicutt0 SIgnw Eva Jamie DeLoach Si Illub" DWUSWtl-°I"---I Dit,mv JamieDeLoach@flhsmv.gov Chief of Staff NKB 9919 UAM24BB Florida Department of Highway Safety and Motor Vehicles Using IP Address: 207.156.9.1 Security Level: Email, Account Authentication (None) Electronic Record and Signature Disclosure: Not Offered via DocuSign Becky Parramore Completed BeckyParramore@flhsmv.gov Leasing Consultant Florida Department of Highway Safety and Motor Using IP Address: 207.156.9.1 Vehicles Security Level: Email, Account Authentication (None) Electronic Record and Signature Disclosure: Not Offered via DocuSign Lisa M. Bassett L51.2r. LisaBassett@flhsmv.gov Chief of Purchasing and Contracts .. FL Dept HSMV Security Level: Email, Account Authentication Using IP Address: 207.156.9.1 (None) Electronic Record and Signature Disclosure: Not Offered via DocuSign In Pft sm Sirw Evw ti $ Agwd o.lvwy Eva>Its Status Cafbon Copy Evwts Status Data Listing Unit COPIED DataListingUnit@flhsmv.gov Security Level: Email, Account Authentication (None) Electronic Record and Signature Disclosure: Not Offered via DocuSign Abigail Brennan COPIED abrennan@tequesta.org Security Level: Email, Account Authentication (None) Electronic Record and Signature Disclosure: Not Offered via DocuSign Jim McGrew COPIED jmcgrew@tequesta.org Security Level: Email, Account Authentication (None) Electronic Record and Signature Disclosure: Not Offered via DocuSign ThrASUM19 Sent: 11[7/2017 Viewed: 1117/2017 Signed: 11 /7/2017 Sent: 11/7/2017 Viewed: 1117/2017 Signed: 11/7/2017 Sent: 11/7/2017 Viewed: 11/7/2017 Signed: 11 /7/2017 Sent: 11/7/2017 Viewed: 11/8/2017 Sent: 11!7/2017 Viewed: 11/7/2017 E/11�! �y Ems Envelope Sent �Ii Hashed/Encrypted 11/7/2017 Certified Delivered Security Checked 11/7/2017 Signing Complete Security Checked 11/7/2017 Completed Security Checked 11/7/2017 ftGO9d id Okdw" Electronic Record and Signature Disclosure created on: 9/22/2015 Parties agreed to: Bennett White ELECTRONIC RECORD AND SIGNATURE DISCLOSURE From time to time, FL Dept HSMV (we, us or Company) may be required by law to provide to you certain written notices or disclosures. Described below are the terms and conditions for providing to you such notices and disclosures electronically through your DocuSign, Inc. (DocuSign) Express user account. Please read the information below carefully and thoroughly, and if you can access this information electronically to your satisfaction and agree to these terms and conditions, please confirm your agreement by clicking the 'I agree' button at the bottom of this document. Getting paper copies At any time, you may request from us a paper copy of any record provided or made available electronically to you by us. For such copies, as long as you are an authorized user of the DocuSign system you will have the ability to download and print any documents we send to you through your DocuSign user account for a limited period of time (usually 30 days) after such documents are first sent to you. After such time, if you wish for us to send you paper copies of any such documents from our office to you, you will be charged a $0.00 per -page fee. You may request delivery of such paper copies from us by following the procedure described below. Withdrawing your consent If you decide to receive notices and disclosures from us electronically, you may at any time change your mind and tell us that thereafter you want to receive required notices and disclosures only in paper format. How you must inform us of your decision to receive future notices and disclosure in paper format and withdraw your consent to receive notices and disclosures electronically is described below. Consequences of changing your mind If you elect to receive required notices and disclosures only in paper format, it will slow the speed at which we can complete certain steps in transactions with you and delivering services to you because we will need first to send the required notices or disclosures to you in paper format, and then wait until we receive back from you your acknowledgment of your receipt of such paper notices or disclosures. To indicate to us that you are changing your mind, you must withdraw your consent using the DocuSign 'Withdraw Consent' form on the signing page of your DocuSign account. This will indicate to us that you have withdrawn your consent to receive required notices and disclosures electronically from us and you will no longer be able to use your DocuSign Express user account to receive required notices and consents electronically from us or to sign electronically documents from us. All notices and disclosures will be sent to you electronically Unless you tell us otherwise in accordance with the procedures described herein, we will provide electronically to you through your DocuSign user account all required notices, disclosures, authorizations, acknowledgements, and other documents that are required to be provided or made available to you during the course of our relationship with you. To reduce the chance of you inadvertently not receiving any notice or disclosure, we prefer to provide all of the required notices and disclosures to you by the same method and to the same address that you have given us. Thus, you can receive all the disclosures and notices electronically or in paper format through the paper mail delivery system. If you do not agree with this process, please let us know as described below. Please also see the paragraph immediately above that describes the consequences of your electing not to receive delivery of the notices and disclosures electronically from us. How to contact FL Dept HSMV: You may contact us to let us know of your changes as to how we may contact you electronically, to request paper copies of certain information from us, and to withdraw your prior consent to receive notices and disclosures electronically as follows: To contact us by email send messages to: lindaperry@flhsmv.gov To advise FL Dept HSMV of your new e-mail address To let us know of a change in your e-mail address where we should send notices and disclosures electronically to you, you must send an email message to us at lindaperry@flhsmv.gov and in the body of such request you must state: your previous e-mail address, your new e-mail address. We do not require any other information from you to change your email address.. In addition, you must notify DocuSign, Inc to arrange for your new email address to be reflected in your DocuSign account by following the process for changing e-mail in DocuSign. To request paper copies from FL Dept HSMV To request delivery from us of paper copies of the notices and disclosures previously provided by us to you electronically, you must send us an e-mail to lindaperry@flhsmv.gov and in the body of such request you must state your e-mail address, full name, US Postal address, and telephone number. We will bill you for any fees at that time, if any. To withdraw your consent with FL Dept HSMV To inform us that you no longer want to receive future notices and disclosures in electronic format you may: i. decline to sign a document from within your DocuSign account, and on the subsequent page, select the check -box indicating you wish to withdraw your consent, or you may; ii. send us an e-mail to lindaperry@flhsmv.gov and in the body of such request you must state your e-mail, full name, IS Postal Address, telephone number, and account number. We do not need any other information from you to withdraw consent.. The consequences of your withdrawing consent for online documents will be that transactions may take a longer time to process.. Reauired hardware and software Operating Systems: Windows2000? or WindowsXP? Browsers (for SENDERS): Internet Explorer 6.0? or above Browsers (for SIGNERS): Internet Explorer 6.0?, Mozilla FireFox 1.0, NetSca a 7.2 (or above) Email: Access to a valid email account Screen Resolution: 800 x 600 minimum Enabled Security Settings: -Allow per session cookies -Users accessing the internet behind a Proxy Server must enable HTTP 1.1 settings via proxy connection ** These minimum requirements are subject to change. If these requirements change, we will provide you with an email message at the email address we have on file for you at that time providing you with the revised hardware and software requirements, at which time you will have the right to withdraw your consent. Acknowledging your access and consent to receive materials electronically To confirm to us that you can access this information electronically, which will be similar to other electronic notices and disclosures that we will provide to you, please verify that you were able to read this electronic disclosure and that you also were able to print on paper or electronically save this page for your future reference and access or that you were able to e-mail this disclosure and consent to an address where you will be able to print on paper or save it for your future reference and access. Further, if you consent to receiving notices and disclosures exclusively in electronic format on the terms and conditions described above, please let us know by clicking the 'I agree' button below. By checking the 'I Agree' box, I confirm that: • I can access and read this Electronic CONSENT TO ELECTRONIC RECEIPT OF ELECTRONIC RECORD AND SIGNATURE DISCLOSURES document; and • I can print on paper the disclosure or save or send the disclosure to a place where I can print it, for future reference and access; and Until or unless I notify FL Dept HSMV as described above, I consent to receive from exclusively through electronic means all notices, disclosures, authorizations, acknowledgements, and other documents that are required to be provided or made available to me by FL Dept HSMV during the course of my relationship with you. err; FLORIDA MEMORANDUM OF UNDERSTANDING FOR LAW ENFORCEMENT AGENCY ACCESS TO DRIVER AND VEHICLE INFORMATION DATABASE SYSTEM (DAVID) Contract Number HSMV- This Memorandum of Understanding (MOU) is made and entered into by and between hereinafter referred to as the Requesting Party, and the Florida Department of Highway Safety and Motor Vehicles, hereinafter referred to as the Providing Agency, collectively referred to as the Parties. I. Purpose The Providing Agency is a government entity whose primary duties include issuance of motor vehicle and driver licenses, registration and titling of motor vehicles, and enforcement of all laws governing traffic, travel, and public safety upon Florida's public highways. In carrying out its statutorily mandated duties and responsibilities, the Providing Agency collects and maintains personal information that identifies individuals. This information is stored in the Department's Driver and Vehicle Information Database system, commonly referred to as "DAVID." Based upon the nature of this information, the Providing Agency is subject to the disclosure prohibitions contained in 18 U.S.C. §2721, the Driver's Privacy Protection Act (hereinafter "DPPA"), Section 119.0712(2), Florida Statutes, and other statutory provisions. The Requesting Party is a law enforcement agency operating under the laws and authority of the state of Florida. As a law enforcement agency, the Requesting Party may receive personal information from DAVID under the government agency exception provided in DPPA as indicated in Attachment I. The Requesting Party utilizes DAVID information for the purposes of carrying out its statutorily mandated law enforcement and prosecutorial functions. This MOU is entered into for the purpose of establishing the conditions and limitations under which the Providing Agency agrees to provide electronic access to DAVID information to the Requesting Party. Use of the data by Requesting Party shall only be for a lawful purpose. II. Definitions For the purposes of this Agreement, the below-listed terms shall have the following meanings: A. DAVID — The Providing Agency's Driver and Vehicle Information Database system that accesses and transmits driver and vehicle information. B. Driver License Information — Driver license and identification card data collected and maintained by the Providing Agency. This information includes personal information as defined below. C. Emergency Contact Information (ECI) — Information contained In a motor vehicle record listing individuals to be contacted in the event of an emergency. Emergency contact information may be released to law enforcement agencies through the DAVID system for purposes of contacting those listed in the event of an emergency, as noted in Section 119.0712 (2)(c), Florida Statutes. D. Driver Privacy Protection Act (DPPA) — The Federal Act (see, 18 United States Code § 2721, et seq.) that prohibits release and use of personal information except as otherwise specifically permitted within the Act. E. Law Enforcement Agency — Any state, county or city law enforcement agency, and state attorney offices Page 1 of 9 DAVID(LEA)Data Exchange MOU(Rev 11-2016) operating under the laws and authority of the state of Florida. F. Insurance Record — Insurance information, such as Insurance Company name, policy type, policy status, insurance creation and expiration date provided to the Requesting Party, pursuant to Section 324.242(2),Florida Statutes. G. Parties-The Providing Agency and the Requesting Party. H. Personal Information — As described in Chapter 119, Florida Statutes, and information found in the motor vehicle record which includes, but is not limited to, the subject's driver identification number, name, address, telephone number, social security number, medical or disability information, and emergency contact information. I. Point-of-Contact (POC) - A person(s) appointed by the Requesting Party as the administrator of the DAVID program in their agency. J. Providing Agency-The Florida Department of Highway Safety and Motor Vehicles.The Providing Agency is responsible for granting access to DAVID information to the Requesting Party. K. Quarterly Quality Control Review Report — Report completed each quarter by the POC to monitor compliance with this agreement. The following must be included in the Quarterly Quality Control Review Report: 1. A comparison of the DAVID users by agency report with the agency user list; 2. A listing of any new or inactivated users since the last quarterly quality control review,and 3. Documentation verifying that usage has been internally monitored to ensure proper,authorized use and dissemination. L. Requesting Party - Any law enforcement agency that is expressly authorized by Section 119.0712(2), Florida Statutes, and DPPA to receive personal information contained in a motor vehicle record maintained by the Providing Agency. M. Vehicle Information — Title and registration data collected and maintained by the Providing Agency for vehicles. Ill. Legal Authority The Providing Agency maintains computer databases containing information pertaining to driver's licenses and vehicles pursuant to Chapters 317, 319, 320, 322, 328, and Section 324.242(2) Florida Statutes. The driver license and motor vehicle data contained in the Providing Agency's databases is defined as public record pursuant to Chapter 119, Florida Statutes, and as such, is subject to public disclosure unless otherwise exempted by law. As the custodian of the state's driver and vehicle records, the Providing Agency is required to provide access to records permitted to be disclosed by law, and may do so by remote electronic means, pursuant to Sections 119.0712(2), 320.05, 321.23, 322.20, and 324.242(2), Florida Statutes, and applicable rules. Under this MOU, the Requesting Party will be provided, via remote electronic means, information pertaining to driver licenses and vehicles, including personal information authorized to be released pursuant to Section 119.0712(2), Florida Statutes and DPPA. By executing this MOU, the Requesting Party agrees to maintain the confidential and exempt status of any and all information provided by the Providing Agency pursuant to this agreement and to ensure that any person or entity accessing or utilizing said Information shall do so in compliance with Section 119.0712(2), Florida Statutes and DPPA. In addition, the Page 2 of 9 DAVID(LFA)Deft a MOU(Rev.11-2D18) Requesting Party agrees that insurance policy information shall be utilized pursuant to Section 324.242(2), Florida Statutes. This MOU is governed by the laws of the state of Florida and jurisdiction of any dispute arising from this MOU shall be in Leon County, Florida. IV. Statement of Work A. The Providing Agency agrees to: 1. Allow the Requesting Party to electronically access DAVID as authorized under this agreement. 2. Provide electronic access pursuant to established roles and times, which shall be uninterrupted except for periods of scheduled maintenance or due to a disruption beyond the Providing Agency's control, or in the event of breach of this MOU by the Requesting Party. Scheduled maintenance will normally occur Sunday mornings between the hours of 6:00 A.M.and 10:00 A.M. 3. Provide an agency contact person for assistance with the implementation and administration of this MOU. B. The Requesting Party agrees to: 1. Utilize information obtained pursuant to this MOU, including Emergency Contact Information (ECI), only as authorized by law and for the purposes prescribed by law and as further described in this MOU. in the case of ECI, such information shall only be used for the purposes of notifying a person's registered emergency contact in the event of a serious injury, death, or other incapacitation. ECI shall not be released or utilized for any other purpose, including developing leads or for criminal investigative purposes. 2. Retain information obtained from the Providing Agency only if necessary for law enforcement purposes. If retained, information shall be safeguarded in compliance with Section V. Safeguarding Information.subsection C. 3. Ensure that its employees and agents comply with Section V.Safeguarding Information. 4. Refrain from assigning, sub-contracting, or otherwise transferring its rights, duties, or obligations under this MOU,without the prior written consent of the Providing Agency. 5. Not share, provide, or release any DAVID information to any other law enforcement, governmental agency,person,or entity not a party or otherwise subject to the terms and conditions of this MOU. 6. Protect and maintain the confidentiality and security of the data received from the Providing Agency In accordance with this MOU and applicable state and federal law. 7. Defend, hold harmless and indemnify the Providing Agency and its employees or agents from any and all claims, actions,damages, or losses which may be brought or alleged against its employees or agents for the Requesting Party's negligent, improper, or unauthorized access, use, or dissemination of information provided by the Providing Agency,to the extent allowed by law. 8. Immediately inactivate user accessipermissions following termination or the determination of negligent, improper, or unauthorized use or dissemination of information. Update user accesstpermissions upon reassignment of users within five(5)business work days. 9. Complete and maintain Quarterly Quality Control Review Reports as defined in Section II — Definitions—J,and utilizing the form attached as Attachment 11. Page 3 of 9 DAVID(LEl1)Deb Exchange MOU(Rev.11-2016) 10. Update any changes to the name of the Requesting Party, its Agency head, its POC, address, telephone number and/or e-mail address in the DAVID system within ten calendar days of occurrence. The Requesting Party is hereby put on notice that failure to timely update this information may adversely affect the time frames for receipt of Information from the Providing Agency. 11. Immediately comply with any restriction, limitation, or condition enacted by the Florida Legislature following the date of signature of this MOU, affecting any of the provisions herein stated. The Requesting Party understands and agrees that it is obligated to comply with the applicable provisions of law regarding the subject matter of this Agreement at all times that it is receiving, accessing,or utilizing DAVID information. 12. Cooperate with the Providing Agency in Field Audits conducted pursuant to Section VI.B.,below. 13. Timely submit the reports and statements required in Section VI. Compliance and Control Measures,below. V. Safeauaniinalrrformation The Parties shall access, disseminate, use and maintain all information received under this Agreement in a manner that ensures its confidentiality and proper utilization in accordance with Chapter 119, Florida Statutes, and DPPA. Information obtained under this Agreement shall only be disclosed to persons to whom disclosure is authorized under Florida law and federal law. Any person who willfully and knowingly violates any of the provisions of this section is guilty of a misdemeanor of the first degree punishable as provided in Sections 119.10 and 775.083, Florida Statutes. In addition, any person who willfully and knowingly discloses any information in violation of DPPA may be subject to crim inal sanctions and civil liability. The Parties mutually agree to the following: A. Information exchanged will not be used for any purposes not specifically authorized by this MOU. Unauthorized use includes, but is not limited to, queries not related to a legitimate business purpose, personal use,or the dissemination,sharing,copying,or passing of this information to unauthorized persons. B. The Requesting Party shall not indemnify and shall not be liable to the Providing Agency for any driver license or motor vehicle information lost, damaged, or destroyed as a result of the electronic exchange of data pursuant to this MOU,except as otherwise provided in Section 768.28,Florida Statutes. C. Any and all DAVID-related information provided to the Requesting Party as a result of this MOU, particularly data from the DAVID system, will be stored in a place physically secure from access by unauthorized persons. D. The Requesting Party shall comply with Rule 74-2, Florida Administrative Code, and with Providing Agency's security policies, and employ adequate security measures to protect Providing Agency's information, applications, data, resources, and services. The applicable Providing Agency security policies shall be made available to Requesting Party. E. When printed information from DAVID has met record retention,it shall be destroyed by cross-cut shredding or incineration in accordance with Florida law. F. The Requesting Party shall maintain a list of all persons authorized within the agency to access DAVID information.The list will not be provided to the Providing Agency, but shall be subject to viewing during any Page 4 of 9 DAVID Wy Daft B dMW MOO(Rev.11-MB) field audit conducted by the Providing Agency or in the event of a violation under Section VI., D,of this MOU for the purposes of ascertaining whether the person or persons involved have been removed from the list or have otherwise had their DAVID access modified or limited. G. Access to DAVID-related information, particularly data from the DAVID System, will be protected in such a way that unauthorized persons cannot view,retrieve,or print the information. H. Under this MOU agreement,access to DAVID system shall be provided to users who are direct employees of the Requesting Party and shall not be provided to any non-employee or contractors of the Requesting Party. 1. By signing this MOU,the Parties,through their signatories,affirm and agree to maintain the confidentiality of the information exchanged through this Agreement. VI. Compliance and Control Measures A. Quarterly Quality Control Review Report—Must be completed, utilizing Attachment 11, Quarterly Quality Control Review Report,within 10 days after the end of each quarter and maintained for two years. B. Feld Audits — Field audits shall be conducted by the Providing Agency in order to ensure that MOU requirements concerning internal controls are being met. Field audits shall be conducted on-site by Providing Agency employees, who shall be designated as "Field Liaisons" for the purposes of this MOU. Field Liaisons shall be geographically located throughout the state. The Requesting Party shall cooperate with the Field Liaisons in conducting field audits by granting access to systems and records related to this MOU and assigning appropriate personnel to respond to information requests. Audits shall be conducted a minimum of once, every two years. Field Liaisons shall contact the POC in order to schedule the audit. At the completion of the audit, the Field Liaison will complete a report and provide a copy to the Requesting Party within ninety (90) days of the audit date. Should the audit report conclude that deficiencies or issues exist in regard to the Requesting Party's internal controls, or access to or use of DAVID information, Providing Agency reserves the right to take, based upon the nature of the deficienciesfissues found, any or all of the following actions: audit more frequently than once, every two years; and/or suspend or terminate Requesting Party's access to DAVID information until such time as Requesting Party submits proof satisfactory to the Providing Agency that the deficiencies/issues have been corrected. C. Internal Control Attestation — This MOU is contingent upon the Requesting Party having appropriate internal controls in place at all times that data is being provided/received pursuant to this MOU to ensure that the data is protected from unauthorized access, distribution, use, modification, or disclosure. The Requesting Party must submit an Attestation statement no later than 45 days after receipt of the audit report referenced in subsection B., above. The Attestation shall indicate that the internal controls over personal data have been reviewed and evaluated in light of the audit findings and are adequate to protect the personal data from unauthorized access,distribution, use, modification,or disclosure. The Attestation shall also certify that any and all deficiencies/issues found during the audit have been corrected and measures enacted to prevent recurrence. The Providing Agency may extend the time for submission of the Attestation upon written request by the Requesting Party. The Attestation must have an original signature of the Chief, Sheriff, or State Attorney, or person designated by Letter of Delegation to execute contracts/agreements on their behalf,may be sent via U.S.Mail,facsimile transmission,or e-mailed to the Providing Agency's Bureau of Records at the following address: Department of Highway Safety and Motor Vehicles Bureau of Records 2900 Apalachee Parkway,MS 89 Tallahassee,Florida 32399-0500 Page 5 of 9 DAMD W)Dem E=henge MOU(raw.11-MG) Fax: (850)617-5168 E-mail:DataListingUniteflhsmv.gov D. Annual Certification Statement - The Requesting Party shall submit to the Providing Agency an annual statement indicating that the Requesting Party has evaluated and certifies that it has adequate controls in place to protect the personal data from unauthorized access, distribution, use, modification, or disclosure, and is in full compliance with the requirements of this MOU. The Requesting Party shall submit this statement annually, within 45 days after the anniversary date of this MOU. (NOTE: During any year in which a Field Audit is conducted, submission of the Internal Control Attestation may satisfy the requirement to submit an Annual Certification Statement.) Failure to timely submit the certification statement may result in an immediate field audit and, based upon the findings of the audit, suspension or termination of Requesting Party's access to DAVID information as indicated in subsection B.,above. In addition, prior to expiration of this MOU, if the Requesting Party intends to enter into a new MOU, a certification statement attesting that appropriate controls remained in place during the final year of the MOU and are currently in place shall be required to be submitted to the Providing Agency prior to issuance of a new MOU. E. Misuse of Personal Information —The Requesting Party must notify the Providing Agency in writing of any incident where determination is made that personal information has been compromised as a result of unauthorized access, distribution, use, modification, or disclosure, by any means, within 30 days of such determination. The statement must be provided on the Requesting Party's letterhead and include each of the following: a brief summary of the incident; the outcome of the review; the date of the occurrence(s); the number of records compromised; the name or names of personnel responsible; whether disciplinary action or termination was rendered; and whether or not the owners of the compromised records were notified. The statement shall also indicate the steps taken, or to be taken, by the Requesting Agency to ensure that misuse of DAVID data does not continue.This statement shall be mailed to the Bureau Chief of Records at the address indicated in Section VI. C., above. (NOTE: If an incident involving breach of personal information did occur and Requesting Party did not notify the owner(s) of the compromised records, the Requesting Party must indicate why notice was not provided,for example"Notice not statutorily required.") In addition, the Requesting Party shall comply with the applicable provisions of Section 501.171, Florida Statutes, regarding data security and security breaches, and shall strictly comply with the provisions regarding notice provided therein. VII. Agreement Term This MOU shall take effect upon the date of last signature by the Parties and shall remain in effect for six (6) years from this date unless sooner terminated or cancelled in accordance with Section IX, Termination. Once executed, this MOU supersedes all previous agreements between the parties regarding the same subject matter. Vill. Amendments This MOU incorporates all negotiations, interpretations, and understandings between the Parties regarding the same subject matter, and serves as the full and final expression of their agreement. This MOU may be amended by written agreement executed by and between both Parties. Any change, alteration, deletion, or addition to the terms set forth in this MOU, including to any of its attachments, must be by written agreement executed by the Parties in the same manner as this MOU was initially executed. If there are any conflicts in the amendments to this MOU, the last-executed amendment shall prevail. All provisions not in conflict with the amendment(s)shall remain in effect and are to be performed as specified in Page 6 of 9 DAVID(LEA)Data Exchange MOU(Rev.11-2016) this MOU. IX. Termination A. This MOU may be unilaterally terminated for cause by either party upon finding that the terms and conditions contained herein have been breached by the other party. Written notice of termination shall be provided to the breaching party; however, prior-written notice is not required and notice may be provided upon cessation of work under the agreement by the non-breaching party. B. In addition, this MOU is subject to unilateral termination by the Providing Agency without notice to the Requesting Party for failure of the Requesting Parry to comply with any of the requirements of this MOU, or with any applicable state or federal laws, rules, or regulations, including Section 119.0712(2), Florida Statutes. C. This MOU may also be cancelled by either party, without penalty, upon 30 days' advanced written notice to the other party. All obligations of either party under the MOU will remain in full force and effect during the thirty(30)day notice period. X. Notices Any notices required to be provided under this MOU may be sent via U.S. Mail, facsimile transmission, or e-mail to the following individuals: For the Providing Agency: Chief, Bureau of Records 2900 Apalachee Parkway Tallahassee,Florida 32399 Fax:(850)617-5168 E-mail:Data Listing Unit(a)flhsmv.gov For the Requesting Party: Agency Point-of-Contact listed on the signature page. XI. Additional Database Aacess/Subseguent MOU's The Parties understand and acknowledge that this MOU entitles the Requesting Party to specific information included within the scope of this agreement. Should the Requesting Party wish to obtain access to other personal information not provided hereunder, the Requesting Party will be required to execute a subsequent MOU with the Providing Agency speck to the additional information requested. All MOU's granting access to personal information will contain the same clauses as are contained herein regarding audits, report submission,and the submission of Certification and Attestation statements. The Providing Agency is mindful of the costs that would be incurred if the Requesting Party was required to undergo multiple audits and to submit separate certifications, attestations, and reports for each executed MOU. Accordingly, should the Requesting Party execute any subsequent MOU with the Providing Agency for access to personal information while the instant MOU remains in effect, the Requesting Party may submit a written request, subject to Providing Agency approval, to submit one of each of the following covering all executed MOD's: Quarterly Quality Control Review Report; Certification; and Attestation; and/or to have conducted one comprehensive audit addressing internal controls for all executed MOU's. The Providing Agency shall have the sole discretion to approve or deny such request in whole or in part or to subsequently rescind an approved request based upon the Requesting Party's compliance with this MOU and/or any negative audit findings. Page 7 of 9 DAVID(LEA)Data Exchange MOU(Rev.11-2016) XII- Application of Public Records Law The Requesting Party agrees to comply with the following requirements of Florida's public records laws: 1. Keep and maintain public records required by the Department to perform the service. 2. Upon request from the Department's custodian of public records, provide the Department with a copy of the requested records or allow the records to be inspected or copied within a reasonable time at a cost that does not exceed the cost provided in Chapter 119, Florida Statutes, or as otherwise provided by law. 3. Ensure that public records that are exempt or confidential and exempt from public records disclosure requirements are not disclosed except as authorized by law for the duration of the contract term and following completion of the contract if the contractor does not transfer the records to the public agency. 4. Upon completion of the contract, transfer, at no cost, to the Department all public records in possession of the Requesting Party or keep and maintain public records required by the public agency to perform the service. If the Requesting Party transfers all public records to the Department upon completion of the contract, the Requesting Party shall destroy any duplicate public records that are exempt or confidential and exempt from public records disclosure requirements. If the Requesting Party keeps and maintains public records upon completion of the contract, the contractor shall meet all applicable requirements for retaining public records. All records stored electronically must be provided to the Department, upon request from the Department's custodian of public records, in a format that is compatible with the information technology systems of the Department. IF THE CONTRACTOR HAS QUESTIONS REGARDING THE APPLICATION OF CHAPTER 119, FLORIDA STATUTES, TO THE CONTRACTOR'S DUTY TO PROVIDE PUBLIC RECORDS RELATING TO THIS CONTRACT, CONTACT THE CUSTODIAN OF PUBLIC RECORDS AT (850) 617-3101, OGCFilingA-flhsmy.goy. PUBLIC RECORDS COORDINATOR, OFFICE OF GENERAL COUNSEL, 2900 APALACHEE PARKWAY, ROOM A432, MS 02, TALLAHASSEE, FL 32399 REMAINDER OF THIS PAGE INTENTIONALLY LEFT BLANK Page 8 of 9 DAVID(LEA)Data Exchange MOU(Rev.11.2016) IN WITNESS HEREOF, the Parties hereto, have executed this Agreement by their duly authorized officials on the date(s)indicated below. REQUESTING PARTY: PROVIDING AGENCY: V },, n Flodda Departmentof HighwaySafety and Motor i ' ►Lt Q{ pT ALYSfZi Vehicles Agency N6me 2900 Apalachee Parkway 3y S ' q U,O—s+r, ` r Tallahassee, Florida 32399 Street Address Suite City State Zip Code BY: BY: Signatu of ton i al Signature of Authorized Official lr&A Lisa M.Bassett vPriinnte� ed Name Printed/Typed Name i 11 -440 Y- Chief, Bureau of Purchasing and Contracts Title Title Date Date ►` (enrarlj -i 4h teffr, .o�S Official Agency Email Address Phone Number Agency Point-of-Contact: 1:�,2 �- -31 n) YY1c Ej�(Cc.J Printed/Typed Name Official Agency Email Address �- 1�s Phone Number Fax Number Page 9 of 9 DAVID(LEA)Data Exchange MOU(Rev.11-2016) ATTACHMENT I FLORIDA DEPARTMENT OF HIGHWAY SAFETY AND MOTOR VEHICLES Request For Access to Driver And Vehicle Information Database System(DAVID) The Driver's Privacy Protection Act,18 United States Code sections 2721("DPPA')makes personal information contained in motor vehicle or driver license records confidential and exempt from disclosure.Personal information in a motor vehicle or driver license record includes,but is not limited to,an individual's social security number,driver license or identification number,name,address and,medical or disability information.Personal information does not include information related to driving violations and driver status.Personal information from these records may only be released to individuals or organizations that qualify under one of the exemptions provided in DPPA,which are listed on the back of this form. I am a representative of an organization requesting personal information for one or more records as described below.I declare that my organization is qualified to obtain personal information under exemption number(s) as listed on page 2 of this form. I understand that I shall not use or redisclose this personal information except as provided in DPPA and that any use or redisclosure in violation of these statutes may subject me to criminal sanctions and civil liability. Complete the following for each DPPA exemption being claimed. (attached additional page,if necessary): DPPA Description of How Requesting Party Description of how Data will be used: Exemption Qualifies for Exemption: Claimed: Obtaining personal information under false pretenses is a state and federal crime.Under penalties of perjury,I declare that I have read the foregoing Request For Exempt Personal Information in A Motor Vehicle/Driver License Record and that the facts stated in it are true and correct. Signature of Authorized Official Title Printed Name Name of Agency/Entity Date Pagel of 2 (02/2017) Pursuant to section 119.0712(2),F.S,personal information in motor vehicle and driver license records can be released for the following purposes,as outlined in 18 United States Code,section 2721. Personal information referred to in subsection(a)sball be disclosed for use in connection with matters of motor vehicle or driver safety and theft,motor vehicle emissions,motor vehicle product alterations,recalls,or advisories,performance monitoring ofmotor vehicles and dealers by motor vehicle manufacturers,and removal of non-owner records from the original owner records of motor vehicle manufacturers to carry out the purposes of titles I and N of the Anti Car Theft Act of 1992,the Automobile Information Disclosure Act (15 U.S.C.1231 et seq.),the Clean Air Act(42 U.S.C.7401 et seq.),and chapters 301,305,and 321-331 of title 49,and,subject to subsection. I.For use by any government agency,including any court or law enforcement agency,in carrying out its functions,or any private person or entity acting on behalf of a Federal,State,or local agency in carrying out its functions. 2.For use in connection with matters of motor vehicle or driver safety and theft;motor vehicle emissions;motor vehicle product alterations,recalls,or advisories;performance monitoring ofmotor vehicles,motor vehicle parts and dealers;motor vehicle market research activities,including survey research;and removal of non-owner records from the original owner records of motor vehicle manufacturers. 3.For use in the normal course of business by a legitimate business or its agents,employees,or contractors,but only- (a)to verify the accuracy of personal information submitted by the individual to the business or its agents,employees,or contractors;and (b)if such information as so submitted is not correct or is no longer correct,to obtain the correct information,but only for the purposes of preventing fiaud by,pursuing legal remedies against,or recovering on a debt or security interest against,the individual. 4.For use in connection with any civil,criminal,administrative,or arbitral proceeding in any Federal,State,or local court or agency or before any self-regulatory body,including the service of process,investigation in anticipation of litigation,and the execution or enforrxxnent of judgments and orders,or pursuant to an order of a Federal,State,or local court 5.For use in research activities,and for use in producing statistical reports,so long as the personal information is not published, redisclosed,or used to contact individuals. 6.For use by any insurer or insurance support organization,or by a self-insured entity,or its agents,employees,or contractors,in connection with claims investigation activities,antifraud activities,rating or underwriting. 7.For use in providing notice to the owners of towed or impounded vehicles. 8.For use by any licensed private investigative agency or licensed security service for any purpose permitted under this subsection. 9.For use by an employer or its agent or insurer to obtain or verify information relating to a holder of a commercial driver's license that is required under chapter 313 of title 49. 10.For use in connection with the operation of private toll transportation facilities. 11.For any other use in response to requests for individual motor vehicle records if the State has obtained the express consent of the person to whom such personal information pertains. 12.For bulk distribution for surveys,marketing or solicitations if the State has obtained the express consent of the person to whom such personal information pertains. 13.For use by any requester,if the requester demonstrates it has obtained the written consent of the individual to whom the information pertains. 14.For any other use specifically authorized under the law of the State that holds the record,if such use is related to the operation of a motor vehicle or public safety. Page 2 of 2 (02/2017) QUARTERLY QUALITY CONTROL REVIEW REPORT Point of Contacts(POC)can do the followingto satisfy the MOU Quarterly Quality Control Review: ➢ Compare the DAVID Users by Agency reportwith the agency user list. o Reconcile any differences to ensure state and agency records are consistent. D Keep a record of any new or inactivated users since the last Quarterly Quality Control Review. o Update any users/User information as needed,document the reason for the change in access,and the date the change is made. ➢ Monitor usage to ensure proper,authorized use and dissemination. o Randomly select a sample of users and run an audit report for a period during the quarter. look for any misuse,including,but not limited to reason codes,running siblings,spouses,ex-spouses,celebrities,and political figures. Look at the times of day the data was accessed,repeated runs of same record,and unexplained access to the Emergency Contact Information. o Please note:DHSMV highly recommends the agency audit users as frequently as possible to ensure misuse is not occurring. ➢ Complete the below report and ensure all actions are documented. Quarter: Year. Total active users in DAVID: Total active users in agency records: Users inactivated during quarter: Users audited during quarter: Total cases of misuse found: Total cases of misuse reported to DHSMV: POC Signature Date POC Name Printed: Revised 6126/14 PUBLIC RECORDS. In accordance with Sec. 119.0701, Florida Statutes, CONTRACTOR must keep and maintain this Agreement and any other records associated therewith and that are associated with the performance of the work described in the Proposal or Bid. Upon request from the Village's custodian of public records, CONTRACTOR must provide the Village with copies of requested records, or allow such records to be inspected or copied, within a reasonable time in accordance with access and cost requirements of Chapter 119, Florida Statutes. A CONTRACTOR who fails to provide the public records to the Village,or fails to make them available for inspection or copying, within a reasonable time may be subject to attorney's fees and costs pursuant to Sec. 119.0701, Florida Statutes, and other penalties under Sec. 119.10, Florida Statutes. Further, CONTRACTOR shall ensure that any exempt or confidential records associated with this Agreement or associated with the performance of the work described in the Proposal or Bid are not disclosed except as authorized by law for the duration of the Agreement term, and following completion of the Agreement if the CONTRACTOR does not transfer the records to the Village. Finally, upon completion of the Agreement, CONTRACTOR shall transfer, at no cost to the Village, all public records in possession of the CONTRACTOR, or keep and maintain public records required by the Village. If the CONTRACTOR transfers all public records to the Village upon completion of the Agreement, the CONTRACTOR shall destroy any duplicate public records that are exempt or confidential and exempt from public records disclosure requirements. If the CONTRACTOR keeps and maintains public records upon completion of the Agreement, the CONTRACTOR shall meet all applicable requirements for retaining public records. Records that are stored electronically must be provided to the VILLAGE, upon request from the Village's custodian of public records, in a format that is compatible with the Village's information technology systems. IF CONTRACTOR HAS QUESTIONS REGARDING THE APPLICATION OF CHAPTER 119, FLORIDA STATUTES, TO CONTRACTOR'S DUTY TO PROVIDE PUBLIC RECORDS RELATING TO THIS AGREEMENT, PLEASE CONTACT THE VILLAGE CLERK, RECORDS CUSTODIAN FOR THE VILLAGE, AT (561) 768-0685, OR AT Immilliams@teguesta.org, OR AT 345 TEQUESTA DRIVE,TEQUESTA, FLORIDA 33469.