DEPARTMENT OF TRANSPORTATION Federal Motor Carrier Safety Administration (FMCSA) PRIVACY IMPACT ASSESSMENT For Commercial Driver's License Information System (CDLIS. PIA - Commercial Driver's License Information System (CDLIS)- Gateway. DEPARTMENT OF TRANSPORTATIONFederal Motor Carrier Safety Administration (FMCSA)PRIVACY IMPACT ASSESSMENTFor. Commercial Driver's License Information System (CDLIS)- Gateway. The California Commercial Motor Vehicle Safety Program was enacted in the interest of improving traffic safety on our roadways. As a result, California has developed. Prospective students who searched for Class B Commercial Driver License Certification: Program Overview found the articles, information, and resources on this page. January 1. 1, 2. 01. Department of Transportation (DOT), is to reduce crashes, injuries, and fatalities involving large trucks and buses (motor carriers). To carry out its safety mandate, FMCSA partners with stakeholders, including Federal, State, and local enforcement agencies; the motor carrier industry; safety groups; commercial motor vehicle (CMV) drivers; and organized labor on efforts to reduce crashes involving CMVs. Since the first step towards reducing crashes is to understand them, FMCSA collects and maintains Federal databases for motor carrier and CMV driver safety data as well as a national inventory of motor carriers and shippers subject to Federal Motor Carrier Safety Regulations (FMCSR) and Hazardous Materials Regulations (HMR). October 2. 7, 1. 98. Title 4. 9 of the U. S. Code, Section 3. Commercial driver's license information system require DOT to establish an information system which will serve as a clearinghouse and depository of information pertaining to the licensing and identification of operators of commercial motor vehicles and the disqualification of such. To comply with this mandate, FMCSA reviewed the options allowed under CMVSA. The conclusion was to assist the American Association of Motor Vehicle Administrators (AAMVA) and the State driver licensing agencies (SDLAs) to design and implement the State operated Commercial Driver's License Information System (CDLIS). The data from the State databases is the authoritative source of commercial driver's license (CDL) records for each State. The States must make CDL records available to FMCSA and other authorized users as specified in 4. Commercial Drivers’ Licenses: A Prosecutor’s Guide to the Basics of Commercial Motor Vehicle Licensing and Violations Lieutenant John Harmon, Tennessee Highway Patrol. 115691 Delivery Driver jobs. Find your next opportunity on Simply Hired. New jobs are posted every day. Only professional drivers will receive and keep a Commercial Driver License. California has developed licensing and testing requirements for drivers of commercial. CFR 3. 84. 2. 25(c). DOT, with FMCSA as the delegate, is required to develop a policy for the States on making CDLIS information available to authorized users that is consistent with existing Federal information and privacy laws . These State- operated CDLIS databases are linked and share information via AAMVA's CDLIS- Index, which is operated by AAMVA on behalf of the States. AAMVA's CDLIS- Index enables authorized users to retrieve CDL records from the current licensing State by directing users to the appropriate State- operated CDLIS database. FMCSA monitors AAMVA and the States to ensure that AAMVA's CDLIS- Index is operated in accordance with applicable Federal laws and regulations. Users either receive authorization from FMCSA to access CDLIS, or may receive it, if they are law enforcement agencies, from their State's criminal justice information system (CJIS), for enforcing FMCSA CDL regulations as part of their official duties . CDLIS- Gateway is maintained exclusively by FMCSA, using a contractor. CDLIS- Gateway includes the following two components: FMCSA CDLIS- Access (Access) Access serves as the routing software for authorized FMCSA users to retrieve CDLIS driver records from the current licensing State by providing relevant Personally Identifiable Information (PII) concerning CDL drivers. The PII is compared with information in AAMVA's CDLIS- Index in order to determine the current licensing State. Access then retrieves CDLIS driver records from the current licensing State and routes the information to the inquiring authorized user. Automated Compliance Review System (ACRS) ACRS is a web- based system that tracks State implementation of CDL regulations as part of State compliance reviews performed by FMCSA. As part of the State CDL compliance reviews, FMCSA may store examples of sample CDLIS driver records from that State that illustrate a problem that State needs to correct. The only PII stored in such CDLIS driver records in ACRS is that State's driver license number. The driver license numbers are used by the licensing States to locate specific record within their State's CDLIS database. In addition to Access routing software and ACRS applications, FMCSA is expanding CDLIS- Gateway to include the following new databases: FMCSA CDLIS- Index (Index) Index is a derivative copy of AAMVA's CDLIS- Index that also allows authorized users to retrieve CDL records from the current licensing State by directing users to the appropriate State- operated CDLIS database. Index will initially be used exclusively by FMCSA for analysis and research purposes, such as selecting representative systematic samples of CDL drivers for authorized studies. In this capacity, FMCSA will not use PII to access index records in Index. If FMCSA decides to use Index to operationally replace use of AAMVA CDLIS- Index, users via Access, will use PII to determine if there is an entry in Index for that driver, but no response will be provided by Index to the user. The Index record located will only direct users to the authoritative source of the PII (i. CDLIS database operated by the licensing State). FMCSA Static CDLIS Sample (Sample) Two versions of sample will be maintained. One will contain PII information, but will not be accessed by PII data. Two will be accessed by an anonymized version of the PII information. Anonymise or anonymization means to systematically replace the PII data, such as name, thus making the record it is associated with nameless, or anonymous. Anonymized in the context of databases used for analysis purposes means the PII data was transformed by a systematic process that converted the PII data into a different form that is still a unique ID, but which cannot be reconstructed to determine the original PII data that was transformed. Two of those identifiers are combinations of two different data elements. For example, the two data elements of driver license number and State together form one of the indexes that can be used for retrieving a CDLIS driver record from the licensing State's database. The two data elements in combination would have the transformation process applied to form an anonymized unique identifier, from which neither the driver license number nor State could be reconstructed. We will apply the same process immediately. Eventually after implementation of CDLIS modernization, CDLIS will no longer contain SSN, but the anonymized representation. Sample one will to be used for things such as supporting sending out sample surveys approved by OMB. Sample two will be used for things such as performing trend analyses, data quality studies, and other research on these historical driver records. Special studies may involve comparing driver safety performance information in Sample two with driver safety performance information from roadside inspections and crash reports stored in the Motor Carrier Management Information System (MCMIS), or comparing with State CDL records obtained via Nlets, the International Justice and Public Safety Network (Nlets). Sample two, even though accessed by indicators derived from PII data, will not contain PII since information extracted from MCMIS or from State- operated CDLIS databases will be anonymized prior to being stored in Sample two. To preserve continuity with the design of CDLIS, the anonymization is expected to generate the following unidentifiable data elements: Anonymized driver name and date of birth combination. Anonymized driver Social Security Number (SSN) using the process agreed to between AAMVA, FMCSA and Homeland Security. Anonymized CDLIS State- of- Record and driver license number combination. Maintaining the privacy of CDL driver PII is a paramount consideration in the development and operation of CDLIS- Gateway. The privacy management process used by the CDLIS- Gateway contractor was assessed by DOT/FMCSA privacy experts using proven technologies, sound policies and procedures, and established methodologies to ensure that privacy management is an integral part of the development and operation of CDLIS- Gateway. The DOT/FMCSA privacy management process is built upon a methodology that enables DOT/FMCSA to effectively protect PII while allowing FMCSA to achieve its mission. The methodology includes the following: Establishing appropriate authorities, responsibilities, and controls for information management with input from systems architecture, technology, security, legal, and other disciplines. Identifying, documenting, and addressing privacy risks. Developing and implementing appropriate policies and procedures and updating them when necessary. Monitoring compliance with applicable laws, regulations, policies, and procedures. Providing training to all DOT employees and contractors that have access to PII. Effectively maintaining the privacy protection principles of: Openness. Individual Participation. Purpose Specification. Collection Limitation. Use Limitation. Data Quality and Integrity. Security Safeguards. Accountability and Auditing. CDLIS- Gateway does not contain a Privacy Act system of records. Neither ACRS nor Sample use PII to retrieve information about individuals. Access and Index do use PII to retrieve information about individuals, but the data is retrieved from the States. Access is only routing software for retrieving CDLIS driver records and does not itself store any PII. The authoritative sources of the PII used by Access and Index are the CDLIS distributed relational databases maintained and operated by the States. Authorized personnel must also meet the requirements of the Driver s Privacy Protection Act (DPPA) of 1. Public Law 1. 03- 3. CDLIS driver records. FMCSA does not provide any information concerning CDL drivers stored in or retrieved by CDLIS- Gateway to any other individual or entity than authorized directly by FMCSA as needing to know, or by States via their CJIS. Other individuals and entities authorized by Congress to access CDLIS driver records, as specified in 4. CFR 3. 84. 2. 25(e), must request CDLIS motor vehicle records, which contain driver PII, as defined in 4. CFR 3. 91. 2. 3(m)(2)(i).
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
December 2016
Categories |