Opinion ID: 2828917
Heading Depth: 2
Heading Rank: 2

Heading: “Use” of the Personal Information

Text: Several Local Entities argue that they cannot be liable under the DPPA because even if Law Enforcement Does “obtain[ed]” Drivers’ personal information, the information was never used. In support of this argument, Local Entities point to Cook v. ACS State & Local Solutions, Inc., 663 F.3d 989, 994 (8th Cir. 2011), in which we stated that “the DPPA is concerned with the ultimate use of drivers’ personal information, not how that information is obtained.” This argument plucks our statement from Cook and leaves behind the context. Cook involved the question whether a company violates the DPPA if it obtains personal information in bulk for future use or resale to third parties. Id. at 991. We held that because the intended future use of the information was for a legitimate purpose permitted under the DPPA, the fact that much of the information obtained was not “used” immediately, or at all, did not render the bulk obtainment unlawful. Id. at 994, 997. Defendants argue that this holding indicates that the DPPA is violated only when information is actually used for an improper purpose. But in fact, Cook stands for the contrary proposition. Under Cook, the fact that personal information is never put to use does not retroactively alter the purpose for which it was obtained. By the same logic, the fact that Law Enforcement Does never “used” Drivers’ personal information would not change the fact that the information was obtained for a purpose not permitted under the DPPA, in violation of § 2724. Furthermore, to read § 2724 as requiring use of the information, as some Defendants suggest, would render the word “obtains” superfluous because the provision separately prohibits impermissible “use[].” It is clear that under § 2724, obtaining Drivers’ information without a permissible Their contention that qualified immunity applies to Law Enforcement Does’ conduct because the meaning of “obtain” is unclear also fails for the same reason. Cf. Collier v. Dickinson, 477 F.3d 1306, 1312 (11th Cir. 2007) (“The words of the DPPA alone are ‘specific enough to establish clearly the law applicable to particular conduct and circumstances and to overcome qualified immunity.’” (quoting Vinyard v. Wilson, 311 F.3d 1340, 1350 (11th Cir. 2002))). -17- purpose, regardless of whether that information is subsequently used, violates the DPPA.