Browse Definitions :
Definition

Driver's Privacy Protection Act (DPPA)

Contributor(s): Corinne Bernstein

The Driver's Privacy Protection Act (DPPA) is a United States federal law designed to protect the personal identifiable information (PII) of licensed drivers from improper use or disclosure. Congress passed the DPPA in 1994 in response to complaints that state agencies were selling drivers’ information to direct marketing and auto insurance companies to augment revenue.

The DPPA requires all states to safeguard the privacy of personal information in an individual's motor vehicle record, including the driver's name, address, phone number, Social Security number, driver identification number, photograph, height, weight, gender, age, certain medical or disability information and, in some states, fingerprints. The DPPA makes it illegal to obtain driver information for unlawful purposes or to make false representations to obtain such information. Under the law, criminal fines can be levied for non-compliance and individuals have a private right of action, including actual and punitive damages, as well as attorneys’ fees. 

Under the DPPA, drivers’ personal information may be obtained from motor vehicle departments for certain uses, including:

  • Legitimate government agency functions
  • Matters of auto safety, theft, emissions and product recalls
  • Insurance purposes
  • Notices for towed or impounded cars
  • Use by licensed investigators or security services
  • Use by private toll transportation facilities
  • Motor vehicle not-for-profit market research and surveys

Drivers’ information is also available in response to requests for individuals’ records if the state has received permission from the individual. Records of each additional disclosure must be kept identifying each person or entity that is receiving the disclosure and for what purpose, and the disclosure records must be retained for five years. The legislation does not protect information a driver's traffic violations, license status or accidents.

Many states have laws to supplement the DPPA. Whether DPPA applies to records of vehicles owned by corporations, proprietorships, partnerships, limited liability partnerships, associations, estates, lienholders or trusts varies by state.

This was last updated in October 2017

Continue Reading About Driver's Privacy Protection Act (DPPA)

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

Powered by:

SearchCompliance

SearchSecurity

SearchHealthIT

SearchDisasterRecovery

  • business continuity plan (BCP)

    A business continuity plan (BCP) is a document that consists of the critical information an organization needs to continue ...

  • disaster recovery team

    A disaster recovery team is a group of individuals focused on planning, implementing, maintaining, auditing and testing an ...

  • cloud insurance

    Cloud insurance is any type of financial or data protection obtained by a cloud service provider. 

SearchStorage

  • RAID 6 (redundant array of independent disks)

    RAID 6, also known as double-parity RAID, uses two parity stripes on each disk. It allows for two disk failures within the RAID ...

  • hard disk drive (HDD)

    A computer hard disk drive (HDD) is a non-volatile memory hardware device that controls the positioning, reading and writing of ...

  • byte

    In most computer systems, a byte is a unit of data that is eight binary digits long. Bytes are often used to represent a ...

Close