Security plan.

CFR · 2024-01-01 · US · Title 6

(a) (b) Security plan contents. At a minimum, the security plan must address— (1) Physical security for the following: (i) Facilities used to produce driver's licenses and identification cards. (ii) Storage areas for card stock and other materials used in card production. (2) Security of personally identifiable information maintained at DMV locations involved in the enrollment, issuance, manufacture and/or production of cards issued under the REAL ID Act, including, but not limited to, providing the following protections: (i) Reasonable administrative, technical, and physical safeguards to protect the security, confidentiality, and integrity of the personally identifiable information collected, stored, and maintained in DMV records and information systems for purposes of complying with the REAL ID Act. These safeguards must include procedures to prevent unauthorized access, use, or dissemination of applicant information (ii) A privacy policy regarding the personally identifiable information collected and maintained by the DMV pursuant to the REAL ID Act. (iii) Any release or use of personal information collected and maintained by the DMV pursuant to the REAL ID Act must comply with the requirements of the Driver's Privacy Protection Act, 18 U.S.C. 2721 (3) Document and physical security features for the card, consistent with the requirements of § 37.15, including a description of the State's use of biometrics, and the technical standard utilized, if any; (4) Access control, i

official document · source cfr-2024 · id 6:§ 37.41