(a) The department shall maintain records regarding the drivers' licenses and permits issued by the department under this chapter. The drivers' records maintained by the department shall include: (1) A record of every application for a license received by it and suitable indexes containing: (A) All applications granted; and (B) The name of every licensee whose license has been canceled, suspended, or revoked by the department and after each such name shall note the reasons for such action; (2) Drivers' records received from other jurisdictions. Upon receipt of such driver's record, it shall become a part of such driver's record in this state and shall have the same force and effect as though entered on the driver's record in this state in the original instance; and (3) Records of all abstracts of court records of convictions of any offense listed in subsection (a) of Code Section 40-5-20 , subsection (a) of Code Section 40-5-54 , Code Section 40-6-10 , driving on a suspended license in violation of Code Section 40-5-121 , administrative license suspension pursuant to Code Sections 40-5-67 through 40-5-67.2 , Code Section 40-5-75 , Chapter 9 of this title, the "Motor Vehicle Safety Responsibility Act," and Chapter 34 of Title 33, the "Georgia Motor Vehicle Accident Reparations Act," any felony offense under this title, any offense committed while operating a commercial motor vehicle, serious traffic offenses, or other offenses requiring the assessment of points on the driving record that are received by it under the laws of this state and in connection therewith maintain convenient records or make suitable notations in order that an individual record of each licensee or individual showing the convictions of such licensee or individual and the traffic accidents in which such licensee or individual has been involved shall be readily ascertainable and available for the consideration of the department upon any application for, or application for renewal of, license and at other suitable times. For purposes of issuing a driver's operating record to the public as provided in this Code section, the period of calculation for compilation of such report shall be determined by the date of arrest. (b) The records maintained by the department on individual drivers are exempt from any law of this state requiring that such records be open for public inspection; provided, however, that initial arrest reports, incident reports, and the records pertaining to investigations or prosecutions of criminal or unlawful activity shall be subject to disclosure pursuant to paragraph (4) of subsection (a) of Code Section 50-18-72 and related provisions. Georgia Uniform Motor Vehicle Accident Reports shall be subject to disclosure pursuant to paragraph (5) of subsection (a) of Code Section 50-18-72 . The department shall not make records or personal information available on any driver except as otherwise provided in this Code section or as otherwise specifically required by 18 U.S.C. Section 2721 . (c) (1) The driver's record provided by the department shall include an enumeration of any accidents in which the individual was convicted of a moving traffic violation, such moving traffic violation convictions, and information pertaining to financial responsibility. The department shall furnish a driver's operating record or personal information from a driver's record under the following circumstances: (A) With the written instructions and consent of the driver upon whom the operating record has been made and compiled; such instructions and consent shall be signed by the driver but shall not be required to be notarized; (B) (i) Pursuant to a written request or a request made in accordance with a contract with the Georgia Technology Authority for immediate online electronic furnishing of information, for use by any insurer or insurance support organization, or by a self-insured entity, or its agents, employees, or contractors, in connection with claims investigation activities, antifraud activities, rating, or underwriting involving the driver; provided, however, that, notwithstanding the definition of personal information under Code Section 40-5-1 , personal information furnished under this division shall be limited to name, address, driver identification number, and medical or disability information. The person who makes a request for a driver's operating record shall identify himself or herself and shall have certified or affirmed that the information contained in the record will be used only for the purpose specified in the request. Further, the person making the request shall certify or affirm that he or she has on file an application for insurance or for the renewal or amendment thereof involving the driver or drivers; or (ii) For the purpose of ascertaining necessary rating information by an insurance agent pursuant to an insurer's contract with the Georgia Technology Authority for the immediate online electronic furnishing of limited rating information to such insurer's agents. Limited rating information furnished under this division shall include only the number of violations of Code Section 40-6-391 , relating to driving under the influence of alcohol, drugs, or other intoxicating substances, and the number and type of other moving traffic violations which were committed by the proposed insured driver or drivers within the immediately preceding three or five years, which period shall be specified by the person making the request. The provisions of division (i) of this subparagraph notwithstanding, no other information concerning a driver's operating record shall be released to such agents for purposes of rating; (B.1) The department shall implement a pilot program for 12 months to determine the revenue feasibility of supplying limited rating information to agents, insurers, and insurance support organizations. The department shall report the results of such pilot program to the Office of Planning and Budget. Unless the Office of Planning and Budget determines that the pilot program is not successful, the department shall continue the program on a year-to-year basis and furnish limited rating information to insurance support organizations for the same purposes as provided in division (ii) of subparagraph (B) of this paragraph, pursuant to a contract with the Georgia Technology Authority, provided that all other necessary requirements of this subsection have been met; (C) In accordance with Article 7 of this chapter, the "Georgia Uniform Commercial Driver's License Act"; (D) To a judge, prosecuting official, or law enforcement agency for use in investigations or prosecutions of alleged criminal or unlawful activity, or to the driver's licensing agency of another state; (E) Pursuant to a request from a public or private school system concerning any person currently employed or an applicant for employment as a school bus driver who agrees in writing to allow the department to release the information; (F) With the written release of the driver, to a rental car company for use in the normal course of its business; provided, however, that, notwithstanding the definition of personal information under Code Section 40-5-1 , personal information furnished under this subparagraph shall be limited to name, address, driver identification number, and medical or disability information. Such access shall be provided and funded through the GeorgiaNet Division of the Georgia Technology Authority, and the department shall bear no costs associated with such access; and (G) For use in the normal course of business by a legitimate business or its agents, employees, or contractors, but only: (i) To verify the accuracy of personal information submitted by the individual to the business or its agents, employees, or contractors; and (ii) If such information as so submitted is not correct or is no longer correct, to obtain the correct information, but only for the purposes of preventing fraud by, pursuing legal remedies against, or recovering on a debt or security interest against, the individual; provided, however, that, notwithstanding the definition of personal information under Code Section 40-5-1 , personal information furnished under this subparagraph shall be limited to name, address, and driver identification number and shall not include photographs, fingerprints, computer images, or medical or disability information. The personal information obtained by a business under this subparagraph shall not be resold or redisclosed for any other purpose without the written consent of the individual. Furnishing of information to a business under this subparagraph shall be pursuant to a contract entered into by such business and the state which specifies, without limitation, the consideration to be paid by such business to the state for such information and the frequency of updates. (2) Nothing in this Code section shall preclude the department from confirming or verifying the status of a driver's license or permit. (d) (1) The commissioner shall designate members of the department to be the official custodians of the records of the department. No disclosure or release of operating records or personal information shall be made without the signed written approval of a designated custodian; except that such approval shall not be required for any release or disclosure through the GeorgiaNet Division of the Georgia Technology Authority pursuant to the signed written consent of the driver, provided that any such signed written consent shall be retained for a period of not less than four years by the party requesting the information; and except that such approval shall not be required for any release or disclosure of information made electronically through the GeorgiaNet Division of the Georgia Technology Authority in accordance with a contract authorized by subparagraph (c)(1)(B) or as provided in subsection (f) of this Code section. The custodians may certify copies or compilations, including extracts thereof, of the records of the department. (2) In response to a subpoena or upon the request of any judicial official, the department shall provide a duly authenticated copy of any record or other document. This authenticated copy may consist of a photocopy or computer printout of the requested document certified by the commissioner or the commissioner's duly authorized representative. (e) Upon written request, the department may provide copies of any record or personal information from any driver's record for use by any appropriate governmental official, entity, or agency for the purposes of carrying out official governmental functions or legitimate governmental duties; provided, however, that, notwithstanding the definition of personal information under Code Section 40-5-1 , personal information furnished under this subsection shall be limited to name, address, driver identification number, and medical or disability information. (f) The department is specifically authorized to disseminate the following records and information: (1) To the United States Selective Service System and the Georgia Crime Information Center, compilations of the names, most current addresses, license or identification card numbers, and dates of birth of licensees or applicants for licenses or applicants for or holders of identification cards issued under this chapter, or, in the case of the United States Selective Service System, any other information from the license or identification card application as necessary for purposes of registration of persons therewith. Such information shall only be used in the fulfillment of the legitimate governmental duties of the United States Selective Service System and the Georgia Crime Information Center and shall not be further disseminated to any person. Information transmitted to the United States Selective Service System pursuant to this paragraph shall be provided in an electronic format; (2) To the military branches of the United States Department of Defense, compilations of the names, dates of birth, sex, and most current addresses of licensees between the ages of 16 and 24 for the sole purpose of mailing recruiting and job opportunity information, provided that the department shall not be required to provide such a compilation more than once every two months; (3) To the Department of Human Services, compilations of the names, dates of birth, and most current addresses of licensees or applicants for licenses. Any information provided pursuant to this subsection shall only be used by the Department of Human Services in connection with the recovery of delinquent child support payments under Article 1 of Chapter 11 of Title 19, known as the "Child Support Recovery Act"; (4) To a local fire or law enforcement department, a copy of the abstract of the driving record of any applicant for employment or any current employee and to the Georgia Bureau of Investigation for the purpose of providing a local fire or law enforcement department with the abstract through the Criminal Justice Information System. It shall be unlawful for any person who receives an abstract of the driving record of an individual under this subsection to disclose any information pertaining to such abstract or to make any use thereof except in the performance of official duties with the local fire or law enforcement department; (5) The information required to be made available to organ procurement organizations pursuant to subsection (d) of Code Section 40-5-25 and subsection (e) of Code Section 40-5-100 and for the purposes set forth in such Code sections; (6) (A) The information required to be made available regarding voter registration pursuant to Code Sections 21-2-221 and 21-2-221.2 and for the purposes set forth in such Code sections; and (B) Information sufficient for use in verifying a registered voter's identity or the identity of an applicant for voter registration by the Secretary of State, the county election superintendent, or the county registrar, including name, address, date of birth, gender, driver identification number, photograph, and signature; (7) The data required to be made available to The Council of Superior Court Clerks of Georgia and the Administrative Office of the Courts pursuant to Code Section 15-12-40.1 . Such data shall be provided to The Council of Superior Court Clerks of Georgia and the Administrative Office of the Courts upon request in the electronic format required by the council for such purposes and without any charge for such data; (8) To the Department of Revenue, information sufficient for use in the detection and prevention of fraudulent tax returns, including name, address, date of birth, gender, driver identification number, photograph, and signature. Such information may be provided in electronic format by means of bulk transfer. Any information provided pursuant to this paragraph shall only be used by the Department of Revenue in connection with the detection and prevention of fraudulent tax returns; and (9) To the Department of Natural Resources, information sufficient for use in the detection and prevention of fraud in applications for licenses, permits, and registrations issued by it and to confirm residency of an applicant, including name, address, date of birth, gender, driver identification number or identification number, status of driver's license, date of driver's license issuance and driver's license cancellation, type of driver's license or identification card issued, and any other information required by the Department of Natural Resources to detect and prevent fraud in applications for licenses, permits, and registrations issued by it. Any information provided pursuant to this paragraph shall only be used by the Department of Natural Resources in connection with the detection and prevention of fraud in applications for licenses, permits, and registrations issued by it, to confirm residency of an applicant, and in fulfilment of its obligations under Article 1 of Chapter 11 of Title 19, known as the "Child Support Recovery Act." Such information may be provided in electronic format by means of bulk transfer or by electronic connection. (g) The drivers' records and personal information disseminated by the department pursuant to this Code section may be used only by the authorized recipient and only for the authorized purpose. It shall be unlawful to disclose, distribute, or sell such records or information to an unauthorized recipient or for an unauthorized purpose. It shall be a violation of this Code section to make a misrepresentation or false statement in order to obtain access to or information from the department's records. Any person who knowingly and willfully violates the provisions of this Code section shall be guilty of a misdemeanor of a high and aggravated nature and, upon conviction thereof, shall be punished as provided in Code Section 17-10-4 . (h) The department shall maintain for four years a record of each release of a driver's operating record or personal information, including the name and address of the requesting party, the date of the release, and the provision of law authorizing the release. Such record of releases shall be reported to the affected driver upon written application by the driver, except that the department shall not report any information about the existence of a release made in connection with a criminal investigation which is ongoing and which involves, though not necessarily focuses upon, such driver. Upon receipt of an application from a driver for such record of releases, the department shall have three business days to determine whether an ongoing criminal investigation is involved, and such determination shall be in the discretion of the commissioner. Where a release is not reported to a driver because the underlying release involved an ongoing criminal investigation, the records concerning the underlying release shall be maintained for four years after the criminal investigation is closed and such records shall during such period after closure of the investigation be subject to disclosure upon application by the driver. (i) The provisions of this Code section shall apply, where relevant, to the maintenance and disclosure of the department's records regarding state identification cards issued under Article 5 of this chapter. (j) The commissioner is authorized to promulgate any rules, regulations, or policies as are necessary to carry out the provisions of this Code section, including the promulgation of regulations limiting the retention of conviction and withdrawal information on a driving record. Notwithstanding the foregoing, any regulation relating to the retention of conviction and withdrawal information on a driving record shall apply the same retention schedule to both commercial and noncommercial drivers. In accordance with paragraph (6) of subsection (a) of Code Section 50-25-4 , reasonable fees shall be assessed for furnishing information from records or data bases pursuant to provisions of this Code section; provided, however, that the fee for furnishing an abstract of a driver's record shall not exceed $10.00. (k) (1) The department, pursuant to rules and regulations promulgated by the commissioner, may periodically review all records maintained pursuant to this Code section and shall correct those records which contain known improper, false, fraudulent, or invalid information. (2) Not later than July 31, 2006, the department shall destroy all records of fingerprints obtained on and after April 15, 1996, and prior to July 1, 2006, from applicants for drivers' licenses, identification cards, and identification cards for persons with disabilities issued by the department and shall compile and make available for public inspection a list of all persons or entities to whom the department provided such fingerprint records. Notwithstanding the provisions of this paragraph, fingerprint images electronically stored on existing drivers' licenses will be destroyed upon application for a renewal of the driver's license. (l) In any case in which the release or transmittal of one or more driver's records is authorized under this Code section or any other provision of law, the commissioner may determine the method of release or transmittal of the record or records, including without limitation release or transmittal by mail or by means of the internet or other electronic means.