Opinion ID: 1036114
Heading Depth: 3
Heading Rank: 3

Heading: The DPPA

Text: Under the DPPA, state DMVs, individuals, organizations, and entities may not disclose personal information drawn from motor vehicle records unless permitted by statute. 4 18 U.S.C. §§ 2721(a) (state entities), 2722(a) (private individuals and entities); see also Reno, 528 U.S. at 149-50 (upholding constitutionality of DPPA). The default rule is one of non-disclosure, but the statute also identifies fourteen exceptions -- 4 Personal information includes an individual's photograph, social security number, driver identification number, name, address (but not the 5-digit zip code), telephone number, and medical or disability information. 18 U.S.C. § 2725(3). -16- permissible uses -- for which disclosure is allowed. See 18 U.S.C. § 2721(b). In relevant part, Personal information [protected by the DPPA] . . . may be disclosed as follows: . . . (6) For use by any insurer or insurance support organization, or by a self-insured entity, or its agents, employees, or contractors, in connection with claims investigation activities, antifraud activities, rating or underwriting. . . . (8) For use by any licensed private investigative agency or licensed security service for any purpose permitted under this subsection. Id. § 2721(b)(6), (8). The DPPA also regulates the resale and redisclosure of protected personal information: An authorized recipient of personal information (except a recipient under subsection (b)(11) or (12)) may resell or redisclose the information only for a use permitted under subsection (b) (but not for uses under subsection (b)(11) or (12)). -17- Id. § 2721(c). 5 Authorized recipient is not defined by statute. But see Reno, 528 U.S. at 146 (citing section 2721(c) and declaring that DPPA regulates resale and redisclosure by private persons who have obtained [drivers' personal] information from a state DMV). The DPPA creates a civil cause of action for those whose information has been improperly used or disclosed. See 18 U.S.C. § 2724(a). Certain civil remedies may be imposed against any person who knowingly obtains, discloses or uses personal information , from a motor vehicle record, for a purpose not permitted by the DPPA . Id. These remedies vary; the court may award:
damages in the amount of $2,500;
reckless disregard of the law;
litigation costs reasonably incurred; and 5 Individuals may consent to disclosure of their personal information, see id. § 2721(b)(13), and subsections (b)(11) and (b)(12) of section 2721 capture those scenarios. Gordon never consented to the release of his personal information. -18- (4) such other preliminary and equitable relief a s the court determines to be appropriate. Id. § 2724(b).