INF 1128 Form – The INF 1128 Form, officially known as the California DMV Information Security Statement, is a mandatory compliance document for anyone with access to California Department of Motor Vehicles (DMV) record information. Updated as REV. 7/2025, this form ensures strict protection of sensitive personal data under federal and state privacy laws.
Whether you operate a commercial requester account, government agency, or any business handling DMV records, the INF 1128 is required upon initial access authorization and must be re-certified annually. Below is your complete, up-to-date guide—including the official direct download link, step-by-step instructions, and everything you need to stay compliant.
What Is the INF 1128 Form?
The INF 1128 Information Security Statement is a two-page California DMV form that requires individuals to formally acknowledge and agree to security policies for handling DMV record information.
Key details:
- Official Title: Information Security Statement
- Revision: REV. 7/2025 (July 2025)
- Purpose: To certify that the signer has read, understands, and will comply with DMV information security rules
- Legal Basis: Driver’s Privacy Protection Act (18 U.S.C. §§ 2721–2725) and California Government Code § 19572
By signing, individuals certify under penalty of perjury that they understand the rules and accept potential consequences for violations, including disciplinary action, termination, or civil/criminal prosecution.
Who Must Complete the INF 1128 Form?
The form is required for any individual—employees, agents, contractors, or third parties—who has direct or incidental access to DMV record information. This includes:
- Commercial Requester Account (CRA) holders
- Government Requester Account users
- Motor carrier services, employer pull notice programs, and records research companies
- Dealers, manufacturers, and service providers processing vehicle or driver data
Both initial certification and annual re-certification are mandatory. The form applies whether access occurs inside or outside the organization.
Why Is the INF 1128 Required?
California DMV records contain highly sensitive personal information protected by strict federal and state privacy laws. The INF 1128 ensures accountability by:
- Preventing unauthorized access, use, or disclosure of DMV data
- Enforcing compliance with the Driver’s Privacy Protection Act
- Protecting individuals from identity theft and privacy violations
- Allowing DMV audit staff to verify security controls during reviews
Failure to comply can result in severe penalties, including civil liability, criminal prosecution, and loss of DMV account access.
Direct Download: Official INF 1128 PDF (REV. 7/2025)
Download the latest INF 1128 Form here (official California DMV link):
https://www.dmv.ca.gov/portal/uploads/2025/08/INF-1128-R7-2025-ASB-WWW.pdf
This is the current version (REV. 7/2025). Always use the official DMV PDF to ensure compliance—third-party copies may be outdated.
How to Fill Out the INF 1128 Form (Step-by-Step)?
The form has two main sections:
Section 1 – Initial Certification
- Read the full security policies and responsibilities.
- Complete the execution details (City, County, State, ZIP Code).
- Print your full name.
- Sign and date the form.
- Provide the name of the government or commercial entity representative and the entity name.
Section 2 – Annual Re-Certification
- Used for yearly renewals (space for up to 25 individuals).
- Each person prints their name, signs, and dates to confirm they have re-read and understand the security policies.
Important: No checkboxes are required. The form is retained at your worksite—no submission to DMV is needed unless requested during an audit.
Annual Re-Certification Requirements
- Must be completed every year for all authorized individuals.
- Keep a current list of everyone with DMV record access.
- Retain signed INF 1128 forms and the access list:
- For the life of the account
- Plus two years after account deactivation or termination
- Make forms available immediately upon DMV audit request.
Where to Keep INF 1128 Forms?
Forms are never mailed to the DMV (except during audits). Store them securely at the Requester Account Holder’s worksite. This includes commercial and government entities. Proper record retention demonstrates compliance during DMV reviews.
Key Security Policies Outlined in INF 1128
Signers agree to:
- Use DMV information only for authorized purposes
- Never access, disclose, or use data for personal gain or impermissible reasons
- Protect records from unauthorized access
- Report any suspected misuse immediately
The form explicitly quotes penalties under the Driver’s Privacy Protection Act and warns of disciplinary action up to termination.
Frequently Asked Questions (FAQ) About INF 1128
Do I need to submit INF 1128 to the DMV?
No. Keep it on file at your worksite and produce it only if DMV audit staff request it.
Is the 2025 version different from older ones?
Yes—always use REV. 7/2025 for current compliance.
Who keeps the forms for contractors or agents?
The Requester Account Holder is responsible.
Can I fill it out electronically?
The official PDF supports digital signatures where permitted, but wet signatures are traditionally used for legal validity.
Stay Compliant with INF 1128 – Download Today
Protecting DMV record information is not optional—it’s a legal requirement. Download the official INF 1128 REV. 7/2025 PDF now and ensure every authorized user completes and re-certifies annually.
Official Download Link:
INF 1128 Information Security Statement PDF
For more details on requester accounts, visit the official California DMV pages for Government Requester Accounts or Commercial Requester Accounts. Always refer to dmv.ca.gov for the most current forms and instructions.
Last updated: April 2026 – Based on official California DMV sources.