Your License Plate Has a Paper Trail: Who's Buying Your Motor-Vehicle File, State by State

Here's a fun fact to bring up at your next tailgate: your state government probably knows how much you weigh. Not a guess — an actual number, self-reported (or eyeballed by a clerk) when you applied for or renewed your driver's license. And in a handful of states, that stat sits inside a record that, under the right circumstances, can end up in somebody else's hands.

Weight is the trivia. The real story is the rest of the file: your full name, home address, date of birth, license number, and in many cases your vehicle's make, model, and plate. That's the motor-vehicle record, or MVR — and how freely it flows out of your state's DMV is a patchwork that would surprise most drivers.

The Federal Rule That Supposedly Locked the Door

In 1994, Congress passed the Driver's Privacy Protection Act after a string of scary incidents — most famously the murder of actress Rebecca Schaeffer, stalked through DMV records. The DPPA made it illegal for state agencies to hand out personal info from driving records without a permissible use: things like insurance underwriting, court orders, government business, and — the loophole everyone loves — "legitimate business needs" with written consent.

Sounds airtight, right? Except fourteen states got grandfathered in as "opt-out" states, where your info kept flowing until you affirmatively asked it to stop. Some of those states eventually flipped to opt-in. Others didn't. And even in opt-in states, the exceptions swallow a lot of the rule.

Who's Actually Reading Your File

Run down the list of DPPA-permitted users and the picture gets clearer:

• Insurers. This is the big one. Your MVR — accidents, violations, even lapses in coverage — is the raw material of your premium. If you've ever wondered how a new carrier quoted you before you handed over a thing, this is how.
• Employers and background screeners. Anyone you've authorized to run a check can pull your driving history.
• Towing companies and parking operators. Several states explicitly let them request owner info tied to a plate for legitimate purposes.
• Private investigators and skip tracers. With a permissible-use attestation, a licensed PI can request records — and historically, some abused that privilege with loose paperwork.
• The brokers themselves. Resellers aggregate DMV data into commercial databases, which is where the trail usually goes cold for the average person trying to figure out who has what.

The States That Slammed the Door

After a few high-profile abuses — journalists tracing stalking cases back to broker-sourced DMV data, lawsuits over consent-form mills — a number of states tightened up hard. California is about as restrictive as it gets: personal info is largely off-limits unless a specific statutory exception applies, and even plate-to-owner lookups are limited to narrow categories like law enforcement and licensed businesses with documented need.

Other states landed somewhere in the middle. Some release only the "driving record" (violations, status, points) rather than the personal identifiers underneath. Some charge fees steep enough to discourage casual fishing expeditions. A few require the requester to certify a specific DPPA purpose per query, creating a paper trail that deters bulk abuse.

Then there's the other end of the spectrum: states that will sell you a batch file. Historically, certain agencies sold lists of licensed drivers or registered vehicle owners to qualified buyers for marketing and research. That practice has shrunk dramatically, but it hasn't vanished everywhere — and "qualified buyer" is doing a lot of work in that sentence.

The Weight Question, Answered

So can someone buy your weight? Almost certainly not. Height, weight, and hair color live on the license face, but most states classify them as non-releasable personal information under their DPPA implementations, or strip them from commercial products entirely. They mostly surface in law-enforcement contexts. Your address and license number? Far more exposed, historically speaking.

How to Check Where Your State Stands

Want to know your exposure? Three moves:

1. Look up your DMV's "records disclosure" or DPPA page. Every state posts one. The key phrases to search for: "opt-out," "restricted use," and "permissible uses."
2. Ask if you're flagged as restricted. In many states you can file a request to mark your record as non-releasable or to check whether a restricted-use flag is already active. Some states let you do this online; others want a notarized form, because of course they do.
3. Pull your own record. Every state lets you request your own MVR for a few dollars. It's worth seeing exactly what a permitted requester would see — including any errors that could be inflating your insurance rate.

The Bottom Line

The DPPA turned 30 years old recently, and it's aged like a paper map: the core idea holds, the details don't fit the modern data economy. Records that once lived in one state database now get ingested, resold, and recombined by brokers in ways the 1994 Congress never imagined.

The practical takeaway is boring but real: your state's disclosure policy is the single biggest variable in who can see your driving file. Fifteen minutes on your DMV's website — and possibly one form — can move you from the "default public" column to the "restricted" column. Given what's in that file, including the number nobody asked you to verify, that's fifteen minutes well spent.