In 1989, the tragic murder of actress Rebecca Schaeffer highlighted the privacy and safety risks associated with the availability of personal information in state motor-vehicle records. Her stalker obtained her address through California motor-vehicle records, leading to her death. In response, Congress passed the Driver’s Privacy Protection Act in 1994. The law restricted the disclosure and resale of personal information from state motor-vehicle records, with exceptions for legitimate purposes like law enforcement and public safety.
At the time, Congress addressed a growing technological issue. Technological advancements made state motor-vehicle records more accessible, yet existing laws lagged. Over 30 years later, technology has evolved again. Now, companies such as Flock Safety can independently gather license-plate information without relying on state motor-vehicle databases. Flock’s license-plate-reader system captures license-plate images, vehicle characteristics, dates, times, and camera locations. It operates independently of DMV databases, creating a significant distinction.
The Driver’s Privacy Protection Act governs personal information in state motor-vehicle records. It does not regulate all vehicle information a private company can observe publicly. The issue arises when private companies create identification and tracking data without government records. Automated cameras can record license plates, times, and locations. A single observation may seem minor, yet repeated data can reveal a vehicle’s history.
No government record is needed for a company to build a database around a license plate, potentially bypassing the Driver’s Privacy Protection Act. Despite this, privacy concerns that led to the act remain relevant. Automated license-plate readers present a valid argument. Law enforcement uses them for finding stolen vehicles and investigating crimes, supporting public safety. However, public safety should not excuse unchecked surveillance.
Key questions focus on post-recording actions. How long is data retained? Who accesses it? With whom is it shared? Can data collected for one purpose serve another? Flock has addressed some concerns. On August 13, the company announced reducing its recommended data retention period for license-plate-reader data from 30 days to seven days, along with additional safeguards like misuse detection and accountability measures.
This change deserves acknowledgment. Seven days is significantly shorter than 30 days, and Flock’s system automatically deletes data on a rolling schedule. Still, seven days is a recommendation, not a fixed limit. Retention varies based on a customer’s contract and state or local laws. This highlights the need to balance public safety and privacy. Viewing a vehicle on a public road is an observation; a searchable database transforms it into potentially revealing history.
The Driver’s Privacy Protection Act did not grant absolute anonymity on public roads. Instead, it acknowledged the dangers of collecting and using identifying information without limits. Modern technology offers alternate ways to acquire movement data without government involvement. Cameras now create records without government input. This does not warrant banning automated license-plate readers but suggests updating privacy laws to reflect current technology. Americans should balance public safety and personal privacy with reasonable regulations.
The Driver’s Privacy Protection Act was suitable for 1994’s technology. Now, our privacy laws must evolve for the technology of 2026.

Leave a Reply