← Global Privacy Laws Research Library
18 U.S.C. §§ 2721-2725 (2024 edition)
Driver's Privacy Protection Act
Prepared by Shubhank Suman · Last reviewed
CURRENT / IN FORCE
- Legal character
- Statute
- Region
- North America
What it covers
A State department of motor vehicles may not knowingly disclose personal information from a motor vehicle record except for the permissible uses listed in section 2721(b), such as government functions, vehicle safety, legal proceedings and insurance. Highly restricted personal information such as photographs and medical information needs express consent. Resale and redisclosure are limited, false representations to obtain records are unlawful, and there are criminal fines and a civil action with liquidated damages.
Why it matters
It limits use of driver records for marketing, data brokerage and locating individuals.
Refer to it when
Use it when obtaining, using or reselling information from US State driver or vehicle records.
AI, privacy and cybersecurity relevance
- AI: Low
- Privacy: High
- Cyber: Low
AI
LOW RELEVANCE
No AI-specific provisions.
Privacy
HIGH RELEVANCE
Restricts use of motor vehicle record data.
Cybersecurity
LOW RELEVANCE
No security obligations.
Applicability
State motor vehicle departments and anyone who obtains or uses motor vehicle record information.
Current validity
CURRENT. Enacted 1994, as amended. Read the official PDF on this page for the operative text.
Read first
Section 2725 → 2721 → 2722 → 2724.
Provisions / sections covered
Section 2721 – Prohibition and permissible uses
General ban and the list of permissible uses.
Section 2722 – Additional unlawful acts
Obtaining records for an impermissible use or by false representation.
Section 2723 – Penalties
Criminal fines and civil penalties against non-complying States.
Section 2724 – Civil action
Actual damages, liquidated damages of at least $2,500 and other relief.
Section 2725 – Definitions
Personal information and highly restricted personal information.
Subject-matter tags
- Consent
- Security
- Enforcement and penalties
Subject-matter tags describe what the indexed text discusses. They are not legal conclusions.
Related instruments in this library
- HIPAA: United StatesLaw · Current (amended)Same jurisdiction; assess applicability separately.
- NIST Artificial Intelligence Risk Management Framework (AI RMF 1.0)Framework · Voluntary / non-bindingSame jurisdiction; assess applicability separately.
- Stored Communications Act – 18 U.S.C. Chapter 121Law · CurrentSame jurisdiction; assess applicability separately.
- Video Privacy Protection Act – 18 U.S.C. § 2710Law · CurrentSame jurisdiction; assess applicability separately.
- Cybersecurity Information Sharing Act of 2015Law · CurrentSame jurisdiction; assess applicability separately.
- Federal Information Security Modernization Act of 2014 (FISMA)Law · CurrentSame jurisdiction; assess applicability separately.
Document page in the Knowledge Base - full text or PDF where it is available for this record.
This library locates primary and official sources. It does not interpret the law and it is not legal advice.