Drivers Privacy Protection Act (DPPA)
About
The DPPA is a federal law that regulates and restricts who has access to the information in DMV records.
The DPPA restricts:
- the use of a vehicle plate number or a vehicle identification number to search for the name of a vehicle owner
- the use of the name of a driver to find the mailing address or the residence of the driver
- a search for the names and the addresses of the previous owners of a vehicle
The DPPA also regulates how a recipient of DMV records can share information with another person or organization. The law allows the DMV to release personal information only for the purposes that the DPPA defines.
For more information see the
- Driver's Privacy Protection Act (PDF) (MV-15DPPA) for the full text of the law
- Request for DMV Records (PDF) (MV-15) for descriptions of the permissible uses of DMV records
If you are unsure if you may ask for another person's record see Permissible Uses for Personal Information.
Restricted Information
The DPPA restricts how personal information is released. The DPPA defines personal information as information that identifies a person including:
- photographs
- Social Security Number (SSN)
- Client Identification Number (CID)
- name
- address (but not the 5-digit ZIP code)
- telephone number
- medical information
- disability information
The DMV does not release photographs, Social Security Numbers, telephone numbers, medical information, or disability information. This information is not available even to those persons who request the information and have a DPPA permissible use. This information is only obtainable via "so ordered" subpoena signed by a NY State or federal judge.
The DPPA does NOT restrict information about:
- traffic accidents
- traffic violations
- status of a driver license
Sharing Information
Most DMV records contain personal information and other information that is not personal. You may share the information you receive if
- you remove the information that is personal and only share the information that is not personal
- the other person has a permissible use
-
When you share information with another person who has a permissible use, you must keep a record of the transaction for five years. The transaction record must include the name of the driver who is identified in the record; the recipient of the personal information; an explanation of the permissible use that the recipient has for the information.
-
There are criminal fines and civil liabilities for violations of the DPPA. Refer to sections 2722, 2733, and 2744 of the Driver's Privacy Protection Act (PDF) (MV-15DPPA) for more information.