Code of Colorado Regulations
200 - Department of Revenue
204 - Division of Motor Vehicles
1 CCR 204-30 - DRIVER LICENSE-DRIVER CONTROL
14 - VENDOR CONTRACTS FOR THE BULK ELECTRONIC TRANSFER OF DEPARTMENT RECORDS
Current through Register Vol. 47, No. 5, March 10, 2024
Authority
This rule is promulgated in accordance with the State Administrative Procedures Act, section 24-4-101 et seq., C.R.S. and adopted pursuant to the authority in sections 24-72-204, 24-72-102, 24-74-103, 24-74-105, 24-74-106, 42-1-204, and 42-1-206 (3.7) C.R.S.
Scope and Purpose
A. This rule governs annual contracts between the department and vendors and the department and primary users for the purpose of establishing, regulating, and maintaining the bulk electronic transfer of Records and Information.
B. This rule does not apply to any federal, state, or local governmental agency that receives Records and/or Information directly from the department.
"Colorado Drives ("DRIVES")" means the information technology system defined in section 42-1-102 (16.5), C.R.S.
"Personal Identifying Information" ("PII") is defined in section 24-74-102(1), C.R.S.
"Primary User" means a person or entity having access to DRIVES through the Third-Party Access Portal.
"Records and/or Information" means all files, updated files, or portions thereof, including PII, that the department is permitted by law to release through a bulk electronic transfer to the approved Vendor.
"State Agency" is a state agency as defined in section 24-74-102(3), C.R.S.
"Sub-Vendor" means any person or entity who enters into an agreement with the approved DMV Vendor to receive Records and/or Information through a sub-contract.
"Third Party" is defined in section 24-74-102(5), C.R.S.
"Vendor" is defined in section 42-1-102 (112.5), C.R.S.
B. A contract between the department and a Vendor shall provide that the Vendor agrees not to transfer Records or Information to a Sub-Vendor unless the Sub-Vendor has completed and the Vendor has approved a Requestor Release and Affidavit of Intended Use (DR 2489) and a Bulk Records and/or Crash Data Search/Transfer Application (DR 2523), in which the Sub-Vendor has agreed that it will not use PII in a manner prohibited by law.
C. The department may grant a Primary User access to Records or Information only if the Primary User has signed a Third Party Individual Certification For Access To PII through a database or automated network form within the last calendar year, certifying that it will not use PII for the purpose of investigating for, participating in, cooperating with, or assisting Federal Immigration Enforcement, and that it will not disclose personal identifying information obtained from the department to individuals or entities engaged in investigating for, participating in, cooperating with, or assisting in Federal immigration in a manner prohibited by law.
|
REQUIRED: Per § 24-74-105 C.R.S., I agree that the third party will not USE or DISCLOSE personal identifying information obtained from the database or automated network for the purpose of investigating for, participating in, cooperating with, or assisting in Federal Immigration Enforcement, including enforcement of civil immigration laws and 8 U.S.C SEC. 1325 or 1326, unless required by Federal or State Law or to comply with the attached court-issued subpoena, wan-ant, or order. [] Yes [] No |
