Form INF 1128 at a glance
What it is: Information Services Branch Information Security Statement.
Who signs: To be completed by any individual having access to DMV record information.
A filled-in Form INF 1128 example: a clerk signs for a company
How to fill out Form INF 1128, box by box
Executed at, signature and date
Under EXECUTED AT, enter the CITY, COUNTY, STATE and ZIP CODE.
Sign on the line marked SIGNATURE X.
Enter the DATE.
“Any person who knowingly obtains, discloses, or uses personal information from a motor vehicle record for a purpose not permitted under the Driver's Privacy Protection Act (Title 18 of the United States Code, Section 2721 - 2725), shall be liable to the individual to whom the information pertains, who may bring a civil action in a United States district court. I certify under penalty of perjury, under the laws of the State of California, that I have read and understand the security policies stated above. I understand that failure to comply with these policies and regulations may result in disciplinary action in accordance with state and federal laws and regulations, and/or civil or criminal prosecution in accordance with applicable statutes. I further understand that I may undergo disciplinary action from my employer up to and including termination from employment.
Printed name, representative and entity
Enter the PRINTED NAME OF SIGNATORY.
Enter the GOVERNMENT OR COMMERCIAL ENTITY REPRESENTATIVE and the NAME OF GOVERNMENT OR COMMERCIAL ENTITY.
Annual re-certification
For the ANNUAL RE-CERTIFICATION, enter the PRINTED NAME, sign on the SIGNATURE line and enter the DATE, to say you have read and understand the security policies stated within the Information Security Statement.
More rules for Form INF 1128
By signing this form, the undersigned represents that he/she has read and understands the same, agrees to its contents and realizes the penalties for non-compliance to its terms. The California Department of Motor Vehicles (CA DMV) collects information from the public to administer the various programs for which it has responsibility. CA DMV is committed to protect this information from unauthorized access, use, or disclosure. The following have been adopted to address commercial and governmental users responsibilities for handling and protecting information obtained from the CA DMV. I understand the following are my responsibilities: 1. I may access information only when necessary to accomplish the responsibilities of my employment. I may not access or use information from the CA DMV for personal reasons. (Examples of inappropriate access or misuse of CA DMV information include, but are not limited to: making personal inquiries or processing transactions on my own records or those of my friends or relatives; accessing information about another person, including locating their residence address, for any reason that is not related to my job responsibilities.) 2. I may disclose CA DMV information only to individuals who have been authorized to receive it through the appropriate procedures as regulated by CA DMV. Requesters of information must complete the appropriate forms, submit them to CA DMV as specified, and pay all applicable fees. In the case of confidential or personal information, a proper accounting of all disclosures must be made and the subject must be notified in accordance with statute and CA DMV directives. (Examples of unauthorized disclosures include, but are not limited to: telling someone the address of another person when it is not an authorized disclosure or part of my job responsibilities.) 3. To keep the requester code and/or password confidential, I must take reasonable precautions to maintain the secrecy of any requester code and/or my password. Reasonable precautions include, but are not limited to, not telling or allowing others to view my password or requester code; securing my terminal with a locking device if one has been provided; storing user documentation to sensitive programs in a secure place; to destroy CA DMV information in a manner that it cannot be reproduced or identified in any physical or electronic form; and reporting any suspicious circumstances or unauthorized individuals I have observed in the work area to my supervisor, if applicable. 4. To promptly notify your manager or supervisor of any indication of misuse or unauthorized disclosure of information obtained from CA DMV. Federal law states:
This form must be completed upon presentation and re-certified annually and RETAINED AT THE WORKSITE of the Requester Account Holder with a current list of those authorized direct or incidental record access for the life of the account and for two years following the deactivation or termination of the account.
This completed form and list must be made available upon request to DMV audit staff.
Sources
[1] Form INF 1128 (REV. 9/2006), Information Security Statement, California Department of Motor Vehicles (the Official source link on this page).