GPS. A permit holder shall ensure each dockless vehicle in their fleet is equipped with on-board GPS technology that does not rely on a user’s mobile device to obtain spatial information. Publicly Accessible Application Program Interface (API).The permit holder shall provide a publicly accessible API. The permit holder shall ensure that:The public API is in a gbfs.json file format; There are no “stations” in the parlance of GBFS, therefore both station_status.json and station_information.json should return an empty list; FreE-Bicycle-status.json is required; The field “vehicle_type” is added to the public API to describe the vehicle type, which may be:“Bicycle”; “E-Bicycle”; “Scooter”; or Another type of specified permitted vehicle; The Department is instructed on how to request authentication, if the public API requires authentication; The location of the public API is provided to the Department; and A smart phone-based application used to rent dockless vehicles is not considered the public API program interface required by <cite data-path="14.02.01.22|B.|(1)">§B(1) of this regulation</cite>. The permit holder shall provide access to at least 50 requests per hour. The Department shall post the location of the public API to the Department’s website. Mobility Data Specification (MDS) Policy API.A permit holder shall:Provide an MDS Policy API to the Department for a dockless vehicle trip in Baltimore City, including trips which:Start in Baltimore City; End in Baltimore City; or Pass through Baltimore City; Adhere to an MDS of 1.0 or newer, as set by the OMF; Post the MDS Policy API on GitHub under the OMF Mobility Data specification; Provide API endpoints, including:A trip; A status change; A vehicle; and Real-time data; Update or add endpoints to the MDS Policy API within:Sixty days of notification from the Department for required published endpoints; and Ninety days for beta endpoints; Change vehicle status to ‘Unknown’ if a vehicle is suspected to be:Vandalized; or Missing for five or more days; Ensure GPS data are transmitted from a dockless vehicle on-trip at a minimum frequency of once per 30 seconds; Develop and maintain a working Wi-Fi connection to ingest MDS Policy API endpoints provided by the Department; and Share current data through the MDS Policy API at least once per 24 hours. The Department may require additional or updated endpoints published by OMF. The Department may share the MDS Policy API with a third-party aggregator in accordance with <cite data-path="14.02.01.22|C.|(4)">§C(4) of this regulation</cite> for the purpose of:Secure data storage; and Analysis. To share data with a third-party aggregator in accordance with <cite data-path="14.02.01.22|C.|(3)">§C(3) of this regulation</cite>, the Department shall enter into a memorandum of understanding with a third-party aggregator that:Includes a provision governing the public release of data by a third-party aggregator; and Is made available for a permit holder to review prior to being finalized. Reporting.Time Sensitive Reports. A permit holder shall report the following to the Department within 24 hours of notice:Non-deployment request at a location by an adjacent property owner for verification by the Department; A vehicle that is in a location where the permit holder cannot retrieve it, including a body of water; and An issue that could affect public safety, including:A report of criminal activity involving a dockless vehicle; A report of a crash involving a dockless vehicle; Contact with the Baltimore City Police Department; Contact with the Baltimore City Fire Department; or A defect in equipment. Monthly Reports. A permit holder shall provide the Department with a monthly report by the tenth business day following the final day of the month which:Uses the Department’s reporting template; Is in Excel or CSV format; Includes:A report of each dockless vehicle lost due to theft or vandalism; Aggregated repair information on a permit holder’s dockless vehicle fleet by model of vehicle and type of repair; Each illegal parking request from the public; Each customer complaint received with response time noted; A record of attendance at a City meeting; The number of people in attendance at a community event; A summary of marketing efforts; The number of users that took a trip on a dockless vehicle during the reporting period; The number of rides by low-income pass users during the reporting period; The number of rides by cash users during the reporting period; The number of rides by non-smart phone users during the reporting period; The number of users provided for in <cite data-path="14.02.01.22|D.|(2)|(c)|(ix)">§(2)(c)(ix)</cite><cite data-path="14.02.01.22|D.|(2)|(c)|(xi)">-(xi)</cite> of <cite data-path="14.02.01.22">this regulation</cite> disaggregated by the type of plan and user home zip code; The number of users of the low-income pass; and An update to maintenance or operational plan. Software Issues and Hacking Events. A permit holder shall:Notify the Department of a change to a data portal, including a response to a notification from the Department regarding:A software glitch; An issue with hacking; or A data portal; Acknowledge a notification from the Department about data and reporting within 24 hours; Provide the Department with a plan for addressing an identified problem; Provide a progress update to the Department once per 48 hours while the problem persists; and Permanently fix an issues within 60 days of receiving notice of the problem. User Privacy. A permit holder shall protect user privacy by:Complying with Payment Card Industry Data Security Standards for an electronic payment; Notifying a user of a mobile device feature that the mobile application accesses; and Not releasing personal user data to an entity:Unrelated to operations; or That intends to use the data in a commercial sale to a third party.