Your driving record isn't public information anyone can look up — but it isn't locked away from everyone except you, either. Federal law spells out a specific, limited list of who can access it and why. Here's what the Driver's Privacy Protection Act (DPPA) actually says, in plain terms.

The Short Version

The DPPA prohibits state motor vehicle agencies from disclosing your personal information from a driving record except for a defined set of permitted purposes — government and law enforcement functions, insurance, certain employer verification, licensed investigators, and a few others — or when you've given your consent. It's a permission list, not an open door.

Who Can Legally Access Your Driving Record

The law lists 14 specific permitted uses. Grouped by who's actually requesting, the main categories are:

  • Government agencies, carrying out their official functions.
  • Courts and law enforcement, in connection with legal proceedings, investigations, and enforcement.
  • Insurance companies, for underwriting, claims investigation, anti-fraud efforts, and rating.
  • Employers, their agents, or insurers — but narrowly: specifically to verify information about a commercial driver's license holder, as required under federal commercial-vehicle safety law. This is narrower than many people assume; it doesn't give every employer blanket access. See MVR vs. Driving Record: What Employers Need to Know for the full employer-side picture.
  • Businesses you've already given information to, to verify it, prevent fraud, or pursue a legal obligation such as debt recovery.
  • Licensed private investigators and security services, for purposes otherwise permitted under the law.
  • Tow companies, to notify the owner of a towed or impounded vehicle.
  • Private toll facility operators, in connection with toll collection and enforcement.
  • Researchers, for statistical purposes only, without contacting individuals.
  • Anyone you've given consent to — this is the category most personal requests (a landlord, a family member helping you, a curious third party) actually fall under, and it requires your express or written consent, not just a stated reason.

A Stricter Rule for Your Most Sensitive Information

Certain details on your record — including your photo, Social Security number, and any medical or disability information — get extra protection as "highly restricted personal information." Even within the permitted-use list above, this category can generally only be disclosed without your express consent for government, court, insurance, or the specific employer/CDL-verification purpose — a narrower set than the full 14 categories.

Consent isn't one single thing under this law — it covers two different situations:

  • An individual request with your consent (someone asking for your record specifically, with your written or express permission) is permitted with fewer restrictions on how the requester can use it afterward.
  • Bulk distribution for marketing or surveys requires your express, opted-in consent specifically — states cannot sell your information in bulk for marketing on an opt-out basis. This changed with a 2000 amendment that replaced an earlier opt-out standard with the current opt-in requirement.

DPPA vs. FCRA: Not the Same Law

These two federal laws get confused often, because they both touch driving records in employment contexts, but they do different jobs. The DPPA controls what a state is allowed to release and to whom. The Fair Credit Reporting Act (FCRA) separately governs how employers and background-check companies must handle your information once they have it — disclosure, your consent, and your right to dispute errors, when a driving record is used as part of an employment background check. If you're specifically asking about the employer/background-check side of this, MVR vs. Driving Record: What Employers Need to Know covers FCRA in detail.

What Happens If Someone Violates the DPPA?

This isn't a purely symbolic rule. Someone who knowingly obtains or discloses your personal information for a use the law doesn't permit can face a criminal fine, and you personally have the right to bring a civil claim against them. A state motor vehicle agency with a pattern of noncompliance can face a civil penalty of up to $5,000 per day from the U.S. Attorney General. Making a false statement to obtain someone's information is separately unlawful, regardless of what you do with it afterward.

Can States Add Their Own Rules?

Yes — the federal law sets a floor, not a ceiling. States can authorize additional uses under their own law, as long as those uses relate to motor vehicle operation or public safety, and many states layer additional restrictions on top of the federal minimum rather than fewer. This is one more reason the exact experience of requesting or protecting a record can vary by state even though the underlying federal law is the same everywhere.

Frequently Asked Questions

Can my employer pull my driving record without telling me?

Generally no, if it's being used as part of a background check — FCRA requires disclosure and your consent in that context, separate from the DPPA question of whether the state was allowed to release it. See our employer-focused guide for the specifics.

Can a stranger look up my driving record just out of curiosity?

Not legally, without falling into one of the permitted categories or getting your consent. That said, the DPPA restricts what the state can disclose — it doesn't make it a criminal act for someone to simply wonder about your driving history.

Does the DPPA cover my vehicle registration too, or just my driving record?

The same law and the same personal-information protections generally apply to motor vehicle records broadly, which includes registration information tied to your name, not just violation history.

Can I find out who has requested my driving record?

This isn't guaranteed nationally — whether your state tracks and discloses a request history to you varies. Check with your specific state's motor vehicle agency.

Sources & Methodology

This guide is based directly on the statutory text of the Driver's Privacy Protection Act:

Federal law changes infrequently but not never, and individual states may adopt additional restrictions beyond the federal minimum. This guide reflects the statute as currently in effect; for a specific legal situation, confirm with your state's motor vehicle agency or an attorney.

This article is for general educational purposes only and isn't legal advice. For guidance on your specific situation, consult a licensed attorney.

Next step: If the employer/background-check angle is what brought you here, that's covered in full in MVR vs. Driving Record: What Employers Need to Know.