The Driver's Privacy Protection Act (DPPA) is a federal law that limits the disclosure of an individual's personal information. Personal information includes an individual's photograph, social security number, driver's license number, name, address, telephone number, and medical or disability information. The DPPA does not protect information on vehicular accidents, driving violations, and driver status.

The DPPA is not absolute; there are eleven circumstances under which the DMV may release an individual's personal information.
These are:

• Use by any government agency or any private person or entity acting on behalf of a Federal, State, or local agency
• Use in connection with matters of motor vehicle or driver safety and theft
• Use by a business to verify personal information submitted by an individual in order to prevent fraud
• Use in connection with any proceeding in any court or self-regulating body
• Research activities as long as the personal information is not further disclosed
• Use by any insurer or insurance support organization
• Notifying owners that their vehicle has been towed or impounded
• Use by any licensed private investigative agency or licensed security service for purposes permitted by the DPPA
• Use by an employer to obtain or verify information relating to a holder of a commercial driver's license
• Use in connection with private toll facilities or
• If the individual has consented to the release of their information.