Driver's Privacy Protection Act

The Driver's Privacy Protection Act of 1994 (also referred to as the "DPPA"), Title XXX of the Violent Crime Control and Law Enforcement Act, is a United States federal statute governing the privacy and disclosure of personal information gathered by state Departments of Motor Vehicles. The law was passed in 1994; it was introduced by Rep. Jim Moran in 1992, after an increase in opponents of abortion rights using public driving license databases to track down and harass abortion providers and patients, most notably besieging Susan Wicklund's home for a month and following her daughter to school.^[1] It is currently codified at Chapter 123 of Title 18 of the United States Code.^[2]

Substantive provisions of the act

The statute prohibits the disclosure of personal information (as defined in 18 U.S.C. § 2725) without the express consent of the person to whom such information applies, with the exception of certain circumstances set forth in 18 U.S.C. § 2721. These rules apply to Departments of Motor Vehicles as well as other "authorized recipient[s] of personal information", and imposes record-keeping requirements on those "authorized recipients".

The permissible uses are:^[3]

1. For any government agency to carry out its functions
2. For use in connection with "matters of motor vehicle or driver safety and theft", including
   1. disclosure "in connection with matters of motor vehicle or driver safety and theft, motor vehicle emissions, motor vehicle product alterations, recalls, or advisories, performance monitoring of motor vehicles and dealers by motor vehicle manufacturers"
   2. removal of non-owner records from the original owner records of motor vehicle manufacturers to carry out the purposes of the Automobile Information Disclosure Act, the Motor Vehicle Information and Cost Saving Act, the National Traffic and Motor Vehicle Safety Act of 1966, the Anti-Car Theft Act of 1992, and the Clean Air Act
3. For use in the normal course of business by a legitimate business or its agents, employees, or contractors, but only to:
   1. verify the accuracy of personal information
   2. correct information
4. For use in connection with any matter before a court or arbitration proceeding.
5. For producing statistical reports and other research, provided that personal information is not published.
6. For use by insurance companies.
7. For providing notice to owners of towed vehicles.
8. For use by licensed private investigation agencies, for a permitted DPPA use.
9. For use by employers.
10. For use by private toll transportation facilities.
11. For response to requests from motor vehicle departments.
12. For the bulk distribution or surveys, marketing materials, or solicitations (opt-in only).
13. When written consent of the individual is provided.
14. For other users specifically authorized by state laws.

The act also makes it illegal to obtain drivers' information for unlawful purposes or to make false representations to obtain such information.^[4] The act establishes criminal fines for noncompliance,^[5] and establishes a civil cause of action for drivers against those who unlawfully obtain their information.^[6]

Legislative history

After Rebecca Schaeffer was murdered in 1989 by a deranged fan who located her through DMV records, laws were changed drastically, regarding the release of such records.

The bill was introduced simultaneously during the 103rd United States Congress in the House of Representatives (as H.R. 3365^[7]) and the Senate (as S. 1589^[8] on 26 October 1993. It was eventually signed by President Bill Clinton as part of Public Law 103-322 on 13 September 1994.^[9]

Jurisprudence

The statute's constitutionality was upheld by the U.S. Supreme Court against a Tenth Amendment challenge in Reno v. Condon.^[10] In Maracich v. Spears, 570 U.S. ___ (2013), the Supreme Court ruled that the Act's litigation exception did not extend to attorneys' solicitation of new clients.

References

External links

• Information on the DPPA at the Electronic Privacy Information Center.