43 TAC § 217.127. Records Maintained by Recipients Who Redisclose Personal Information

(a) Authorized recipients who redisclose personal information from department motor vehicle records are required to maintain records of that transaction.

(b) Records must be maintained for not less than five years and must include:

(1) the name and contact information of any person to whom the authorized recipient redisclosed personal information from the department motor vehicle records, including both the individual's name and the organization or entity with which the individual is associated, when known;

(2) the person's permitted use under Transportation Code §730.007 for the personal information from the department motor vehicle records, and any documentation the authorized recipient received related to the person's permitted use;

(3) the quantity of motor vehicle records redisclosed to the person under each permitted use;

(4) a statement specifying what data was redisclosed and in what format; and

(5) documentation of any agreement between the authorized recipient and the person to whom the authorized recipient redisclosed personal information from department motor vehicle records.

(c) An authorized recipient who resold personal information from department motor vehicle records prior to June 18, 2021, must maintain records of those transactions for five years.