Federal and state laws limit who can see your driver's license records and what they can do with them
Your driver's license information is protected by the Driver's Privacy Protection Act (DPPA), a federal law passed in 1994, and by state privacy laws that often go further. The DPPA restricts access to your personal information from state motor vehicle records — your name, address, phone number, Social Security number, medical information, and photograph. It applies to all 50 states and the District of Columbia.
States also maintain their own privacy protections for driver's license data. Some states, like California and New York, have enacted laws that are stricter than the federal baseline. These state laws may limit data sharing more narrowly, require explicit consent for certain uses, or impose higher penalties on violators. The combination of federal and state law creates overlapping protections that vary depending on where you live and who is requesting your information.
Key Takeaways
- The Driver's Privacy Protection Act is the main federal law that restricts access to driver's license records and requires a legal reason to obtain that information.
- States can and do pass their own privacy laws that provide stronger protections than the DPPA, so your state's rules may be more restrictive than federal requirements.
- Law enforcement, courts, insurance companies, and certain other entities have legitimate reasons to access your records, but most private individuals and businesses cannot.
- Violations of the DPPA can result in civil lawsuits against the person or organization that wrongfully obtained your information, and some states allow criminal penalties as well.
Who the DPPA allows to access your driver's license records
The DPPA permits access to your motor vehicle records only for specific, lawful purposes. Law enforcement agencies can obtain your information for investigations and enforcement. Courts can access records in connection with legal proceedings. Insurance companies can request records for underwriting and claims purposes. Employers can obtain records for hiring, employment, or safety-sensitive positions. Rental car companies, towing services, and other businesses with a direct business relationship to you may also have access.
Government agencies beyond law enforcement — such as child support enforcement offices, tax authorities, and licensing boards — can access your records when they have a legitimate government function. However, these entities must follow specific procedures and document their reasons for requesting the information. Private individuals, data brokers, and most businesses cannot straightforward request your driver's license records without a legal reason.
What happens when someone obtains your information without permission
If someone obtains your driver's license information in violation of the DPPA, you have the right to sue them in federal court. You can recover actual damages (money you lost as a result), statutory damages of at least $2,500 per violation, and attorney's fees. If the violation was intentional and willful, you may recover punitive damages — additional money meant to punish the wrongdoer — which can be substantial.
Some states also allow criminal prosecution for DPPA violations. A person who knowingly obtains motor vehicle records under false pretenses can face criminal charges, fines, and imprisonment depending on the state. State attorneys general and law enforcement agencies actively investigate cases where data brokers, private investigators, or other entities have illegally sold or shared driver's license information.
State-specific protections that go beyond the DPPA
California's Consumer Privacy Act (CCPA) and similar state laws give residents additional rights over their personal information, including data from driver's license records. These laws allow you to request what information a company holds about you, ask that it be deleted, and opt out of the sale of your data. Some states require explicit consent before your information can be shared with third parties, even for purposes the DPPA would allow.
New York, Texas, and other states have passed laws that restrict the sale of driver's license photographs and information to data brokers and private investigators. Some states also allow you to request that your address be kept confidential on your driver's license if you are a victim of domestic violence, stalking, or human trafficking. Check your state's motor vehicle department website to learn what protections explore where you live and what options you have to limit access to your records.
How to limit access to your driver's license information
Most states allow you to request that your personal information be kept confidential or restricted from public access. You typically submit a form to your state's Department of Motor Vehicles or equivalent agency. Some states offer this as an opt-in choice when you renew your license; others require a separate request. The process and restrictions vary by state — some states will restrict all non-essential information, while others limit only your address or photograph.
If you are concerned about your safety, many states have programs specifically for domestic violence victims, stalking victims, or people in witness protection. These programs may allow you to use an alternate address on your license or keep your information completely confidential from public records searches. Contact your state's motor vehicle department or a local domestic violence organization to learn what options are available to you.
Data brokers and the secondary market for driver's license information
Data brokers — companies that collect and sell personal information — have historically obtained driver's license records through employees or contractors who had legitimate access and then sold that data to private investigators, marketers, and other buyers. The DPPA prohibits this practice, but enforcement has been inconsistent. Some brokers have faced lawsuits and settlements for selling driver's license information obtained under false pretenses.
In recent years, states and the Federal Trade Commission have increased enforcement against data brokers who violate the DPPA. Several major data brokers have agreed to stop selling driver's license information or to implement stricter verification procedures. However, the secondary market for this data persists, which is why many privacy advocates recommend taking advantage of state confidentiality options and monitoring your credit reports for signs of identity theft.
What to do if your driver's license information has been misused
If you discover that your driver's license information was obtained or used without permission, document what happened and gather any evidence — emails, letters, or notices that show the unauthorized access. Check your credit reports through the three major bureaus (Equifax, Experian, and TransUnion) for fraudulent accounts or inquiries. If you see signs of identity theft, place a fraud alert or credit freeze on your accounts.
Report the violation to your state's attorney general office and to the Federal Trade Commission at ReportFraud.ftc.gov. If you believe a specific company violated the DPPA, you may have grounds for a civil lawsuit. Many attorneys who handle DPPA cases work on a contingency basis, meaning they take a percentage of any settlement or judgment rather than charging upfront fees. Contact your state bar association for referrals to attorneys who handle privacy violations.
Frequently Asked Questions
Can my employer access my driver's license records without my permission?
Your employer can obtain your driver's license records if they have a legitimate business reason — such as hiring you for a position that requires driving or verifying your identity. However, they must follow DPPA procedures and cannot obtain the information under false pretenses. Most employers request this information directly from you rather than from the state.
What information from my driver's license is protected by the DPPA?
The DPPA protects your name, address, phone number, Social Security number, medical information, photograph, and signature. It also protects information about your driving record, vehicle registration, and license status. However, some information — such as your name and address — may be available through other public records sources that are not covered by the DPPA.
Can I sue someone who obtained my driver's license information illegally?
Yes. The DPPA allows you to bring a civil lawsuit in federal court against anyone who obtains your information in violation of the law. You can recover actual damages, statutory damages of at least $2,500 per violation, and attorney's fees. If the violation was intentional, you may also recover punitive damages.
Does the DPPA explore to information I posted on social media or public websites?
No. The DPPA protects only information held by state motor vehicle departments. Information you voluntarily post online or share publicly is not covered by the DPPA, though other privacy laws may explore depending on what information it is and where you live.
How do I request that my driver's license information be kept confidential?
Contact your state's Department of Motor Vehicles and ask about confidentiality options. Most states have a form you can submit to restrict access to your personal information. Some states offer this automatically for certain groups, such as law enforcement officers or domestic violence victims, while others require you to request it.