Specific Services Provided By The NMVTIS Operator

Specific to state agencies, the operator must:

• make available at least two methods of verifying title information using NMVTIS.
• enable states to share all information in NMVTIS obtained on a specific vehicle.
• provide states with the greatest amount of flexibility in such things as data standards, mapping, and connection methods. 

Specific to law enforcement, the operator must:

• ensure state and local law enforcement agencies have access to all title, brand, and JSI information in or available through NMVTIS through a VIN search, including limited personal information collected by NMVTIS.
• allow law enforcement agencies to make inquiries based on other search criteria in the system, including the organizations reporting data to the system; individuals owning, supplying, purchasing, or receiving such vehicles (if available); and export criteria. 

Specific to consumer access, the operator must:

• ensure a means exists to allow insurers and prospective purchasers to access NMVTIS information, including information regarding title history (if the state participates in NMVTIS); brands, insurance, junk and salvage history; and odometer readings. Such access shall be provided to individual consumers in a single-VIN search and to commercial consumers in a single- or batch-VIN search with multiple VINs.

Further, the operator must:

• establish and at least annually collect user fees from the states and other users of NMVTIS data to pay for its operation.
• not release any personally identifiable information to any entity other than states and law enforcement.
• maintain a privacy policy that describes the uses and disclosures of such personally identifiable information.
• use appropriate security measures such as encryption if transmitting personally identifiable information over the Internet, and limit access to such information to only those with legitimate need.
• to the extent reasonable feasible, employ standards-based information exchange methods that can be used by NMVTIS stakeholders and are developed by such organization as the Internet Engineering Task Force (IETF), the Open API Specification (OAS), the National Information Exchange Model (NIEM), and the Global Reference Architecture (GRA), and other future industry standards/practices.
• prepare an annual report describing the performance of the system during the preceding year, including a detailed report of NMVTIS expenses and all revenues received as a result of operation.
• procure an independent financial audit of NMVTIS expenses and all revenues received as a result of operation.