DPPA

Also known as: Driver’s Privacy Protection Act, 18 USC §2721

By Korey Sharp-Paar · Reviewed by the Fast Trucking Compliance team

Definition

The Driver’s Privacy Protection Act (DPPA), 18 USC §2721, is the federal statute that restricts who may obtain personal information from a state Department of Motor Vehicles, requiring a permissible purpose for any release of an MVR or driver record. Passed in 1994, it makes it unlawful for a state DMV to disclose personal information from a motor vehicle record except for one of its enumerated permissible purposes. For motor carriers the operative purposes are §2721(b)(9), verifying information about a CDL holder, and §2721(b)(13), the driver’s express written consent. A driver whose record is obtained or used without a permissible purpose can sue for actual damages of not less than $2,500, plus punitive damages for willful violations and attorneys’ fees (18 USC §2724(b)). Carriers keep the signed driver consent in the DQ file alongside the MVR.

Authoritative source

18 USC §2721 - Driver’s Privacy Protection Act

DPPA & FCRA Driver Consent

The Driver's Privacy Protection Act (18 USC §2721) and the Fair Credit Reporting Act both require written driver consent before an MVR pull. Sample language inside.

Related terms

FCRA(Fair Credit Reporting Act)
MVR(Motor Vehicle Record)
DQ File(Driver Qualification File)

← Back to glossary