Criminal Justice Information Systems

§ 20.1 — Purpose.

It is the purpose of these regulations to assure that criminal history record information wherever it appears is collected, stored, and disseminated in a manner to ensure the accuracy, completeness, currency, integrity, and security of such information and to protect individual privacy.

§ 20.2 — Authority.

These regulations are issued pursuant to sections 501 and 524(b) of the Omnibus Crime Control and Safe Streets Act of 1968, as amended by the Crime Control Act of 1973, Public Law 93-83, 87 Stat. 197, 42 U.S.C. 3701, et seq. (Act), 28 U.S.C. 534, Public Law 92-544, 86 Stat. 1115, and Public Law 117-159, 136 Stat. 1331.

§ 20.3 — Definitions.

As used in these regulations:

(a) Act means the Omnibus Crime Control and Safe Streets Act, 42 U.S.C. 3701, et seq., as amended.

(b) Administration of criminal justice means performance of any of the following activities: Detection, apprehension, detention, pretrial release, post-trial release, prosecution, adjudication, correctional supervision, or rehabilitation of accused persons or criminal offenders. The administration of criminal justice shall include criminal identification activities and the collection, storage, and dissemination of criminal history record information.

(c) Control Terminal Agency means a duly authorized state, foreign, or international criminal justice agency with direct access to the National Crime Information Center telecommunications network providing statewide (or equivalent) service to its criminal justice users with respect to the various systems managed by the FBI CJIS Division.

(d) Criminal history record information means information collected by criminal justice agencies on individuals consisting of identifiable descriptions and notations of arrests, detentions, indictments, informations, or other formal criminal charges, and any disposition arising therefrom, including acquittal, sentencing, correctional supervision, and release. The term does not include identification information such as fingerprint records if such information does not indicate the individual’s involvement with the criminal justice system.

(e) Criminal history record information system means a system including the equipment, facilities, procedures, agreements, and organizations thereof, for the collection, processing, preservation, or dissemination of criminal history record information.

(f) Criminal history record repository means the state agency designated by the governor or other appropriate executive official or the legislature to perform centralized recordkeeping functions for criminal history records and services in the state.

(g) Criminal justice agency means:

(1) Courts; and

(2) A governmental agency or any subunit thereof that performs the administration of criminal justice pursuant to a statute or executive order, and that allocates a substantial part of its annual budget to the administration of criminal justice. State and federal Inspector General Offices are included.

(h) Dealer has the meaning set forth for that term in section 921(a)(11) of title 18, United States Code.

(i) Direct access means having the authority to access systems managed by the FBI CJIS Division, whether by manual or automated methods, not requiring the assistance of or intervention by any other party or agency.

(j) Disposition means information disclosing that criminal proceedings have been concluded and the nature of the termination, including information disclosing that the police have elected not to refer a matter to a prosecutor or that a prosecutor has elected not to commence criminal proceedings; or disclosing that proceedings have been indefinitely postponed and the reason for such postponement. Dispositions shall include, but shall not be limited to, acquittal, acquittal by reason of insanity, acquittal by reason of mental incompetence, case continued without finding, charge dismissed, charge dismissed due to insanity, charge dismissed due to mental incompetency, charge still pending due to insanity, charge still pending due to mental incompetence, guilty plea, nolle prosequi, no paper, nolo contendere plea, convicted, youthful offender determination, deceased, deferred disposition, dismissed-civil action, found insane, found mentally incompetent, pardoned, probation before conviction, sentence commuted, adjudication withheld, mistrial-defendant discharged, executive clemency, placed on probation, paroled, or released from correctional supervision.

(k) Executive order means an order of the President of the United States or the Chief Executive of a state that has the force of law and that is published in a manner permitting regular public access.

(l) Federal Service Coordinator means a non-Control Terminal Agency that has a direct telecommunications line to the National Crime Information Center network.

(m) Fingerprint Identification Records System or “FIRS” means the following FBI records: Criminal fingerprints and/or related criminal justice information submitted by authorized agencies having criminal justice responsibilities; civil fingerprints submitted by federal agencies and civil fingerprints submitted by persons desiring to have their fingerprints placed on record for personal identification purposes; identification records, sometimes referred to as “rap sheets,” which are compilations of criminal history record information pertaining to individuals who have criminal fingerprints maintained in the FIRS; and a name index pertaining to all individuals whose fingerprints are maintained in the FIRS. See the FIRS Privacy Act System Notice periodically published in the Federal Register for further details.

(n) Firearm has the meaning set forth for that term in section 921(a)(3) of title 18, United States Code.

(o) Importer has the meaning set forth for that term in section 921(a)(9) of title 18, United States Code.

(p) Interstate Identification Index System or “III System” means the cooperative federal-state system for the exchange of criminal history records, and includes the National Identification Index, the National Fingerprint File, and, to the extent of their participation in such system, the criminal history record repositories of the states and the FBI.

(q) Manufacturer has the meaning set forth for that term in section 921(a)(10) of title 18, United States Code.

(r) National Crime Information Center or “NCIC” means the computerized information system, which includes telecommunications lines and any message switching facilities that are authorized by law, regulation, or policy approved by the Attorney General of the United States to link local, state, tribal, federal, foreign, and international criminal justice agencies for the purpose of exchanging NCIC related information. The NCIC includes, but is not limited to, information in the III System. See the NCIC Privacy Act System Notice periodically published in the Federal Register for further details.

(s) National Fingerprint File or “NFF” means a database of fingerprints, or other uniquely personal identifying information, relating to an arrested or charged individual maintained by the FBI to provide positive identification of record subjects indexed in the III System.

(t) National Identification Index or “NII” means an index maintained by the FBI consisting of names, identifying numbers, and other descriptive information relating to record subjects about whom there are criminal history records in the III System.

(u) Nonconviction data means arrest information without disposition if an interval of one year has elapsed from the date of arrest and no active prosecution of the charge is pending; information disclosing that the police have elected not to refer a matter to a prosecutor, that a prosecutor has elected not to commence criminal proceedings, or that proceedings have been indefinitely postponed; and information that there has been an acquittal or a dismissal.

(v) For purposes of 28 CFR 20.33(e), person has the meaning set forth for that term in section 921(a)(1) of title 18, United States Code.

(w) State means any state of the United States, the District of Columbia, the Commonwealth of Puerto Rico, and any territory or possession of the United States.

(x) Statute means an Act of Congress or of a state legislature or a provision of the Constitution of the United States or of a state.

§ 20.20 — Applicability.

(a) The regulations in this subpart apply to all State and local agencies and individuals collecting, storing, or disseminating criminal history record information processed by manual or automated operations where such collection, storage, or dissemination has been funded in whole or in part with funds made available by the Law Enforcement Assistance Administration subsequent to July 1, 1973, pursuant to title I of the Act. Use of information obtained from the FBI Identification Division or the FBI/NCIC system shall also be subject to limitations contained in subpart C.

(b) The regulations in this subpart shall not apply to criminal history record information contained in:

(1) Posters, announcements, or lists for identifying or apprehending fugitives or wanted persons;

(2) Original records of entry such as police blotters maintained by criminal justice agencies, compiled chronologically and required by law or long standing custom to be made public, if such records are organized on a chronological basis;

(3) Court records of public judicial proceedings;

(4) Published court or administrative opinions or public judicial, administrative or legislative proceedings;

(5) Records of traffic offenses maintained by State departments of transportation, motor vehicles or the equivalent thereof for the purpose of regulating the issuance, suspension, revocation, or renewal of driver’s, pilot’s or other operators’ licenses;

(6) Announcements of executive clemency.

(c) Nothing in these regulations prevents a criminal justice agency from disclosing to the public criminal history record information related to the offense for which an individual is currently within the criminal justice system. Nor is a criminal justice agency prohibited from confirming prior criminal history record information to members of the news media or any other person, upon specific inquiry as to whether a named individual was arrested, detained, indicted, or whether an information or other formal charge was filed, on a specified date, if the arrest record information or criminal record information disclosed is based on data excluded by paragraph (b) of this section. The regulations do not prohibit the dissemination of criminal history record information for purposes of international travel, such as issuing visas and granting of citizenship.

§ 20.21 — Preparation and submission of a Criminal History Record Information Plan.

A plan shall be submitted to OJARS by each State on March 16, 1976, to set forth all operational procedures, except those portions relating to dissemination and security. A supplemental plan covering these portions shall be submitted no later than 90 days after promulgation of these amended regulations. The plan shall set forth operational procedures to—

(a) Completeness and accuracy. Insure that criminal history record information is complete and accurate.

(1) Complete records should be maintained at a central State repository. To be complete, a record maintained at a central State repository which contains information that an individual has been arrested, and which is available for dissemination, must contain information of any dispositions occurring within the State within 90 days after the disposition has occurred. The above shall apply to all arrests occurring subsequent to the effective date of these regulations. Procedures shall be established for criminal justice agencies to query the central repository prior to dissemination of any criminal history record information unless it can be assured that the most up-to-date disposition data is being used. Inquiries of a central State repository shall be made prior to any dissemination except in those cases where time is of the essence and the repository is technically incapable of responding within the necessary time period.

(2) To be accurate means that no record containing criminal history record information shall contain erroneous information. To accomplish this end, criminal justice agencies shall institute a process of data collection, entry, storage, and systematic audit that will minimize the possibility of recording and storing inaccurate information and upon finding inaccurate information of a material nature, shall notify all criminal justice agencies known to have received such information.

(b) Limitations on dissemination. Insure that dissemination of nonconviction data has been limited, whether directly or through any intermediary only to:

(1) Criminal justice agencies, for purposes of the administration of criminal justice and criminal justice agency employment;

(2) Individuals and agencies for any purpose authorized by statute, ordinance, executive order, or court rule, decision, or order, as construed by appropriate State or local officials or agencies;

(3) Individuals and agencies pursuant to a specific agreement with a criminal justice agency to provide services required for the administration of criminal justice pursuant to that agreement. The agreement shall specifically authorize access to data, limit the use of data to purposes for which given, insure the security and confidentiality of the data consistent with these regulations, and provide sanctions for violation thereof;

(4) Individuals and agencies for the express purpose of research, evaluative, or statistical activities pursuant to an agreement with a criminal justice agency. The agreement shall specifically authorize access to data, limit the use of data to research, evaluative, or statistical purposes, insure the confidentiality and security of the data consistent with these regulations and with section 524(a) of the Act and any regulations implementing section 524(a), and provide sanctions for the violation thereof. These dissemination limitations do not apply to conviction data.

(c) General policies on use and dissemination. (1) Use of criminal history record information disseminated to noncriminal justice agencies shall be limited to the purpose for which it was given.

(2) No agency or individual shall confirm the existence or nonexistence of criminal history record information to any person or agency that would not be eligible to receive the information itself.

(3) Subsection (b) does not mandate dissemination of criminal history record information to any agency or individual. States and local governments will determine the purposes for which dissemination of criminal history record information is authorized by State law, executive order, local ordinance, court rule, decision or order.

(d) Juvenile records. Insure that dissemination of records concerning proceedings relating to the adjudication of a juvenile as delinquent or in need or supervision (or the equivalent) to noncriminal justice agencies is prohibited, unless a statute, court order, rule or court decision specifically authorizes dissemination of juvenile records, except to the same extent as criminal history records may be disseminated as provided in paragraph (b) (3) and (4) of this section.

(e) Audit. Insure that annual audits of a representative sample of State and local criminal justice agencies chosen on a random basis shall be conducted by the State to verify adherence to these regulations and that appropriate records shall be retained to facilitate such audits. Such records shall include, but are not limited to, the names of all persons or agencies to whom information is disseminated and the date upon which such information is disseminated. The reporting of a criminal justice transaction to a State, local or Federal repository is not a dissemination of information.

(f) Security. Wherever criminal history record information is collected, stored, or disseminated, each State shall insure that the following requirements are satisfied by security standards established by State legislation, or in the absence of such legislation, by regulations approved or issued by the Governor of the State.

(1) Where computerized data processing is employed, effective and technologically advanced software and hardware designs are instituted to prevent unauthorized access to such information.

(2) Access to criminal history record information system facilities, systems operating environments, data file contents whether while in use or when stored in a media library, and system documentation is restricted to authorized organizations and personnel.

(3)(i) Computer operations, whether dedicated or shared, which support criminal justice information systems, operate in accordance with procedures developed or approved by the participating criminal justice agencies that assure that:

(a) Criminal history record information is stored by the computer in such manner that it cannot be modified, destroyed, accessed, changed, purged, or overlaid in any fashion by non-criminal justice terminals.

(b) Operation programs are used that will prohibit inquiry, record updates, or destruction of records, from any terminal other than criminal justice system terminals which are so designated.

(c) The destruction of records is limited to designated terminals under the direct control of the criminal justice agency responsible for creating or storing the criminal history record information.

(d) Operational programs are used to detect and store for the output of designated criminal justice agency employees all unauthorized attempts to penetrate any criminal history record information system, program or file.

(e) The programs specified in paragraphs (f)(3)(i) (b) and (d) of this section are known only to criminal justice agency employees responsible for criminal history record information system control or individuals and agencies pursuant to a specific agreement with the criminal justice agency to provide such programs and the program(s) are kept continuously under maximum security conditions.

(f) Procedures are instituted to assure that an individual or agency authorized direct access is responsible for (1) the physical security of criminal history record information under its control or in its custody and (2) the protection of such information from unauthorized access, disclosure or dissemination.

(g) Procedures are instituted to protect any central repository of criminal history record information from unauthorized access, theft, sabotage, fire, flood, wind, or other natural or manmade disasters.

(ii) A criminal justice agency shall have the right to audit, monitor and inspect procedures established above.

(4) The criminal justice agency will:

(i) Screen and have the right to reject for employment, based on good cause, all personnel to be authorized to have direct access to criminal history record information.

(ii) Have the right to initiate or cause to be initiated administrative action leading to the transfer or removal of personnel authorized to have direct access to such information where such personnel violate the provisions of these regulations or other security requirements established for the collection, storage, or dissemination of criminal history record information.

(iii) Institute procedures, where computer processing is not utilized, to assure that an individual or agency authorized direct access is responsible for

(a) The physical security of criminal history record information under its control or in its custody and

(b) The protection of such information from unauthorized access, disclosure, or dissemination.

(iv) Institute procedures, where computer processing is not utilized, to protect any central repository of criminal history record information from unauthorized access, theft, sabotage, fire, flood, wind, or other natural or manmade disasters.

(v) Provide that direct access to criminal history record information shall be available only to authorized officers or employees of a criminal justice agency and, as necessary, other authorized personnel essential to the proper operation of the criminal history record information system.

(5) Each employee working with or having access to criminal history record information shall be made familiar with the substance and intent of these regulations.

(g) Access and review. Insure the individual’s right to access and review of criminal history information for purposes of accuracy and completeness by instituting procedures so that—

(1) Any individual shall, upon satisfactory verification of his identity, be entitled to review without undue burden to either the criminal justice agency or the individual, any criminal history record information maintained about the individual and obtain a copy thereof when necessary for the purpose of challenge or correction;

(2) Administrative review and necessary correction of any claim by the individual to whom the information relates that the information is inaccurate or incomplete is provided;

(3) The State shall establish and implement procedures for administrative appeal where a criminal justice agency refuses to correct challenged information to the satisfaction of the individual to whom the information relates;

(4) Upon request, an individual whose record has been corrected shall be given the names of all non-criminal justice agencies to whom the data has been given;

(5) The correcting agency shall notify all criminal justice recipients of corrected information; and

(6) The individual’s right to access and review of criminal history record information shall not extend to data contained in intelligence, investigatory, or other related files and shall not be construed to include any other information than that defined by § 20.3(b).

§ 20.22 — Certification of compliance.

(a) Each State to which these regulations are applicable shall with the submission of its plan provide a certification that to the maximum extent feasible action has been taken to comply with the procedures set forth in the plan. Maximum extent feasible, in this subsection, means actions which can be taken to comply with the procedures set forth in the plan that do not require additional legislative authority or involve unreasonable cost or do not exceed existing technical ability.

(b) The certification shall include—

(1) An outline of the action which has been instituted. At a minimum, the requirements of access and review under § 20.21(g) must be completely operational;

(2) A description of any legislation or executive order, or attempts to obtain such authority that has been instituted to comply with these regulations;

(3) A description of the steps taken to overcome any fiscal, technical, and administrative barriers to the development of complete and accurate criminal history record information;

(4) A description of existing system capability and steps being taken to upgrade such capability to meet the requirements of these regulations; and

(5) A listing setting forth categories of non-criminal justice dissemination. See § 20.21(b).

§ 20.23 — Documentation: Approval by OJARS.

Within 90 days of the receipt of the plan, OJARS shall approve or disapprove the adequacy of the provisions of the plan and certification. Evaluation of the plan by OJARS will be based upon whether the procedures set forth will accomplish the required objectives. The evaluation of the certification(s) will be based upon whether a good faith effort has been shown to initiate and/or further compliance with the plan and regulations. All procedures in the approved plan must be fully operational and implemented by March 1, 1978. A final certification shall be submitted on March 1, 1978.

(a) July 31, 1978—Submission of certificate of compliance with:

(1) Individual access, challenge, and review requirements;

(2) Administrative security;

(3) Physical security to the maximum extent feasible.

(b) Thirty days after the end of a State’s next legislative session—Submission to OJARS of a description of State policy on dissemination of criminal history record information.

(c) Six months after the end of a State’s legislative session—Submission to OJARS of a brief and concise description of standards and operating procedures to be followed by all criminal justice agencies covered by OJARS regulations in complying with the State policy on dissemination.

(d) Eighteen months after the end of a State’s legislative session—Submission to OJARS of a certificate attesting to the conduct of an audit of the State central repository and of a random number of other criminal justice agencies in compliance with OJARS regulations.

§ 20.24 — State laws on privacy and security.

Where a State originating criminal history record information provides for sealing or purging thereof, nothing in these regulations shall be construed to prevent any other State receiving such information, upon notification, from complying with the originating State’s sealing or purging requirements.

§ 20.25 — Penalties.

Any agency or individual violating subpart B of these regulations shall be subject to a civil penalty not to exceed $10,000 for a violation occurring before September 29, 1999, and not to exceed $11,000 for a violation occurring on after September 29, 1999. For civil penalties assessed after August 1, 2016, whose associated violations occurred after November 2, 2015, see the civil penalty amount as provided in 28 CFR 85.5. In addition, OJARS may initiate fund cut-off procedures against recipients of OJARS assistance.

§ 20.30 — Applicability.

The provisions of this subpart of the regulations apply to the III System and the FIRS, and to duly authorized local, state, tribal, federal, foreign, and international criminal justice agencies to the extent that they utilize the services of the III System or the FIRS. This subpart is applicable to both manual and automated criminal history records.

§ 20.31 — Responsibilities.

(a) The Federal Bureau of Investigation (FBI) shall manage the NCIC.

(b) The FBI shall manage the FIRS to support identification and criminal history record information functions for local, state, tribal, and federal criminal justice agencies, and for noncriminal justice agencies and other entities where authorized by federal statute, state statute pursuant to Public Law 92-544, 86 Stat. 1115, Presidential executive order, or regulation or order of the Attorney General of the United States.

(c) The FBI CJIS Division may manage or utilize additional telecommunication facilities for the exchange of fingerprints, criminal history record related information, and other criminal justice information.

(d) The FBI CJIS Division shall maintain the master fingerprint files on all offenders included in the III System and the FIRS for the purposes of determining first offender status; to identify those offenders who are unknown in states where they become criminally active but are known in other states through prior criminal history records; and to provide identification assistance in disasters and for other humanitarian purposes.

(e) The FBI may routinely establish and collect fees for noncriminal justice fingerprint-based and other identification services as authorized by Federal law. These fees apply to Federal, State and any other authorized entities requesting fingerprint identification records and name checks for noncriminal justice purposes.

(1) The Director of the FBI shall review the amount of the fee periodically, but not less than every four years, to determine the current cost of processing fingerprint identification records and name checks for noncriminal justice purposes.

(2) Fee amounts and any revisions thereto shall be determined by current costs, using a method of analysis consistent with widely accepted accounting principles and practices, and calculated in accordance with the provisions of 31 U.S.C. 9701 and other Federal law as applicable.

(3) Fee amounts and any revisions thereto shall be published as a notice in the Federal Register.

(f) The FBI will collect a fee for providing noncriminal name-based background checks of the FBI Central Records System through the National Name Check Program pursuant to the authority in Pub. L. 101-515 and in accordance with paragraphs (e)(1), (2) and (3) of this section.

§ 20.32 — Includable offenses.

(a) Criminal history record information maintained in the III System and the FIRS shall include serious and/or significant adult and juvenile offenses.

(b) The FIRS excludes arrests and court actions concerning nonserious offenses, e.g., drunkenness, vagrancy, disturbing the peace, curfew violation, loitering, false fire alarm, non-specific charges of suspicion or investigation, and traffic violations (except data will be included on arrests for vehicular manslaughter, driving under the influence of drugs or liquor, and hit and run), when unaccompanied by a § 20.32(a) offense. These exclusions may not be applicable to criminal history records maintained in state criminal history record repositories, including those states participating in the NFF.

(c) The exclusions enumerated above shall not apply to federal manual criminal history record information collected, maintained, and compiled by the FBI prior to the effective date of this subpart.

§ 20.33 — Dissemination of criminal history record information.

(a) Criminal history record information contained in the III System and the FIRS may be made available:

(1) To criminal justice agencies for criminal justice purposes, which purposes include the screening of employees or applicants for employment hired by criminal justice agencies;

(2) To federal agencies authorized to receive it pursuant to federal statute or Executive order;

(3) For use in connection with licensing or employment, pursuant to Public Law 92-544, 86 Stat. 1115, or other federal legislation, and for other uses for which dissemination is authorized by federal law. Refer to § 50.12 of this chapter for dissemination guidelines relating to requests processed under this paragraph;

(4) For issuance of press releases and publicity designed to effect the apprehension of wanted persons in connection with serious or significant offenses;

(5) To criminal justice agencies for the conduct of background checks under the National Instant Criminal Background Check System (NICS);

(6) To noncriminal justice governmental agencies performing criminal justice dispatching functions or data processing/ information services for criminal justice agencies; and

(7) To private contractors pursuant to a specific agreement with an agency identified in paragraphs (a)(1) or (a)(6) of this section and for the purpose of providing services for the administration of criminal justice pursuant to that agreement. The agreement must incorporate a security addendum approved by the Attorney General of the United States, which shall specifically authorize access to criminal history record information, limit the use of the information to the purposes for which it is provided, ensure the security and confidentiality of the information consistent with these regulations, provide for sanctions, and contain such other provisions as the Attorney General may require. The power and authority of the Attorney General hereunder shall be exercised by the FBI Director (or the Director’s designee).

(b) The exchange of criminal history record information authorized by paragraph (a) of this section is subject to cancellation if dissemination is made outside the receiving departments, related agencies, or service providers identified in paragraphs (a)(6) and (a)(7) of this section.

(c) Nothing in these regulations prevents a criminal justice agency from disclosing to the public factual information concerning the status of an investigation, the apprehension, arrest, release, or prosecution of an individual, the adjudication of charges, or the correctional status of an individual, which is reasonably contemporaneous with the event to which the information relates.

(d) Criminal history records received from the III System or the FIRS shall be used only for the purpose requested and a current record should be requested when needed for a subsequent authorized use.

(e) NCIC Gun File records that are necessary to verify whether a firearm offered for sale to a licensed firearms importer, manufacturer, or dealer has been stolen may be made available to a person licensed as an importer, manufacturer, or dealer of firearms. Information disseminated to such licensees shall be limited solely to the purpose of verifying whether firearms offered for sale to licensees have been stolen.

§ 20.34 — Individual’s right to access criminal history record information.

The procedures by which an individual may obtain a copy of his or her identification record from the FBI to review and request any change, correction, or update are set forth in §§ 16.30-16.34 of this chapter. The procedures by which an individual may obtain a copy of his or her identification record from a state or local criminal justice agency are set forth in § 20.34 of the appendix to this part.

§ 20.35 — Criminal Justice Information Services Advisory Policy Board.

(a) There is established a CJIS Advisory Policy Board, the purpose of which is to recommend to the FBI Director general policy with respect to the philosophy, concept, and operational principles of various criminal justice information systems managed by the FBI’s CJIS Division.

(b) The Board includes representatives from state and local criminal justice agencies; members of the judicial, prosecutorial, and correctional segments of the criminal justice community; a representative of federal agencies participating in the CJIS systems; and representatives of criminal justice professional associations.

(c) All members of the Board will be appointed by the FBI Director.

(d) The Board functions solely as an advisory body in compliance with the provisions of the Federal Advisory Committee Act. Title 5, United States Code, Appendix 2.

§ 20.36 — Participation in the Interstate Identification Index System.

(a) In order to acquire and retain direct access to the III System, each Control Terminal Agency and Federal Service Coordinator shall execute a CJIS User Agreement (or its functional equivalent) with the Assistant Director in Charge of the CJIS Division, FBI, to abide by all present rules, policies, and procedures of the NCIC, as well as any rules, policies, and procedures hereinafter recommended by the CJIS Advisory Policy Board and adopted by the FBI Director.

(b) Entry or updating of criminal history record information in the III System will be accepted only from state or federal agencies authorized by the FBI. Terminal devices in other agencies will be limited to inquiries.

§ 20.37 — Responsibility for accuracy, completeness, currency, and integrity.

It shall be the responsibility of each criminal justice agency contributing data to the III System and the FIRS to assure that information on individuals is kept complete, accurate, and current so that all such records shall contain to the maximum extent feasible dispositions for all arrest data included therein. Dispositions should be submitted by criminal justice agencies within 120 days after the disposition has occurred.

§ 20.38 — Sanction for noncompliance.

Access to systems managed or maintained by the FBI is subject to cancellation in regard to any agency or entity that fails to comply with the provisions of subpart C of this part.