Georgetown University Mail - RE: Public Records Request -- Faci... https://mail.google.com/mail/u/0/?ui=2&ik=2c16a8cd0b&jsver=z... RE: Public Records Request -- Facial Recognition Use on Driver License Records CHOW Susan To: Clare Garvie Wed, Aug 2, 2017 at 7:46 PM Good A&ernoon Clare, As previously discussed, Oregon DMV does not allow any external en==es to use the Facial Recogni=on System (not even law enforcement). I have provided a formal response to each request that pertains to the use of facial recogni=on so&ware by external agencies. To your first request, I have aLached our policy. Please see my responses below. Let me know if what is provided in this e-mail is sufficient, or if you need addi=onal informa=on. Thank you, Susie Chow Program Specialist Records Policy Unit (503) 945-8906 (Direct) (503) 947-4065 (Fax) 1. Any manuals, memos, policies or other guidelines the DMV or other relevant agency follows for using the FRT system. Policy a)ached   2. Formal or informal policies or rules followed by DMV personnel for running facial recognition searches requested by external entities, including but not limited to federal, state or local law enforcement agencies. External agencies do not use DMV’s facial recogni;on system. ORS 807.026 prohibits Oregon DMV 1 of 3 103533 GULaw Privacy FR 8/15/17, 12:08 PM Georgetown University Mail - RE: Public Records Request -- Faci... https://mail.google.com/mail/u/0/?ui=2&ik=2c16a8cd0b&jsver=z... DMV from providing biometric data (including facial recogni;on) collected by DMV in the course of issuing, renewing or replacing driver licenses, permits and ID cards to anyone other than DMV employees ac;ng in an official capacity.   3. Any notices provided to by the DMV to external agencies about the ability to run or request facial recognition searches against the DMV photo database. The instructions, request forms, and other materials issued to external agencies regarding requests to conduct a facial recognition search against the DMV photo database. External agencies do not use DMV’s facial recogni;on system. ORS 807.026 prohibits DMV from providing biometric data (including facial recogni;on) collected by DMV in the course of issuing, renewing or replacing driver licenses, permits and ID cards to anyone other than DMV employees ac;ng in an official capacity.   4. Agreements or memoranda of understanding (MOUs) signed with external entities permitting those agencies to run or request facial recognition searches against the DMV photo database. External agencies do not use DMV’s facial recogni;on system. ORS 807.026 prohibits DMV from providing biometric data (including facial recogni;on) collected by DMV in the course of issuing, renewing or replacing driver licenses, permits and ID cards to anyone other than DMV employees ac;ng in an official capacity.   5. All requests from the past three years submitted or run by any entity outside the DMV for facial recognition searches against the DMV photo database. Emails accompanying the requests, if submitted electronically. External agencies do not use DMV’s facial recogni;on system. ORS 807.026 prohibits DMV from providing biometric data (including facial recogni;on) collected by DMV in the course of issuing, renewing or replacing driver licenses, permits and ID cards to anyone other than DMV employees ac;ng in an official capacity.   6. Search logs and audit records of the FRT system, including but not limited to records of requests approved or denied, logs of searches by external agencies, sample audits of search requests, misuse reports, and reports to oversight bodies. External agencies do not use DMV’s facial recogni;on system. ORS 807.026 prohibits DMV from providing biometric data (including facial recogni;on) collected by DMV in the course of issuing, renewing or replacing driver licenses, permits and ID cards to anyone other than DMV employees ac;ng in an official capacity.   7. Purchasing and procurement documents related to the DMV facial recognition system, including but not limited to: grant awards, cost sharing agreements, purchase orders, RFPs, responses to RFPs, invoices, and contracts for FRT hardware, software, and services. This request is fairly broad. It would be helpful if you could clarify the specific informa;on/documenta;on you are seeking so that I can Oregon DMV 2 of 3 103534 GULaw Privacy FR 8/15/17, 12:08 PM Georgetown University Mail - RE: Public Records Request -- Faci... https://mail.google.com/mail/u/0/?ui=2&ik=2c16a8cd0b&jsver=z... determine what area I would need to check with to find out what is available. Are you looking specifically for the contract between Oregon DMV and our vendor?   8. Any manuals from the companies providing FRT system components, including but not limited to any technical specifications they have provided.   The vendor for our Facial Recogni;on System (FRS) soWware is MorphoTrust USA. The below link contains some helpful informa;on about the soWware: http://www.morphotrust.com/ This is the only FRS soWware that has been used by Oregon DMV for biometric iden;fica;on.   From: CHOW Susan Sent: Tuesday, August 01, 2017 9:29 AM [Quoted text hidden] [Quoted text hidden] 2 attachments Oregon_DMV_201707.pdf 362K DMV-A0014.pdf 50K Oregon DMV 3 of 3 103535 GULaw Privacy FR 8/15/17, 12:08 PM