Stories
Slash Boxes
Comments

SoylentNews is people

posted by janrinok on Tuesday September 10 2019, @01:25AM   Printer-friendly
from the always-have,-always-will dept.

Arthur T Knackerbracket has found the following story:

Departments of Motor Vehicles in states around the country are taking drivers' personal information and selling it to thousands of businesses, including private investigators who spy on people for a profit, Motherboard has learned. DMVs sell the data for an array of approved purposes, such as to insurance or tow companies, but some of them have sold to more nefarious businesses as well. Multiple states have made tens of millions of dollars a year selling data.

Motherboard has obtained hundreds of pages of documents from DMVs through public records requests that lay out the practice. Members of the public may not be aware that when they provide their name, address, and in some cases other personal information to the DMV for the purposes of getting a driver's license or registering a vehicle, the DMV often then turns around and offers that information for sale.

Many of the private investigators that DMVs have sold data to explicitly advertise that they will surveil spouses to see if they're cheating.

"You need to learn what they’ve been doing, when they’ve been doing it, who they’ve been doing it with and how long it has been going on. You need to see proof with your own eyes," reads the website of Integrity Investigations, one private investigator firm that buys data from DMVs.

"Under this MOU [memorandum of understanding], the Requesting Party will be provided, via remote electronic means, information pertaining to driver licenses and vehicles, including personal information authorized to be released," one agreement between a DMV and its clients reads.

Multiple DMVs stressed to Motherboard that they do not sell the photographs from citizens' driver licenses or social security numbers.

Some of the data access is done in bulk, while other arrangements allow a company to lookup specific individuals, according to the documents. Contracts can roll for months at a time, and records can cost as little as $0.01 each, the documents add.

“The selling of personally identifying information to third parties is broadly a privacy issue for all and specifically a safety issue for survivors of abuse, including domestic violence, sexual assault, stalking, and trafficking," Erica Olsen, director of Safety Net at the National Network to End Domestic Violence, told Motherboard in an email. "For survivors, their safety may depend on their ability to keep this type of information private."

The sale of this data to licensed private investigators is perfectly legal, due to the Driver's Privacy Protection Act (DPPA), a law written in the '90s before privacy became the cultural focus that it is today, but which critics believe should be changed. The process of becoming a licensed private investigator varies from state to state, and can be strict, according to multiple sources close to the industry. Some states, however, allow licensing to be granted on a local level or investigators to operate without a license.

The DPPA was created in 1994 after a private investigator, hired by a stalker, obtained the address of actress Rebecca Schaeffer from a DMV. The stalker went on to murder Schaeffer. The purpose of the law was to restrict access to DMV data, but it included a wide range of exemptions, including for the sale to private investigators.

"The DPPA is one of several federal laws that should now be updated," Marc Rotenberg, president and executive director of privacy activism group EPIC, wrote in an email. "I would certainly reduce the number of loopholes," he added, referring to how the law might be changed.

[...] He added that if the DMV data has been abused by private investigators, "Congress should take a close look at the Driver’s Privacy Protection Act, and, if necessary, close loopholes that are being abused to spy on Americans."


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by optotronic on Tuesday September 10 2019, @02:06AM (5 children)

    by optotronic (4285) on Tuesday September 10 2019, @02:06AM (#892006)

    The state requires us to provide the information so we can drive or have identification, then they sell it?! We have no other option, other than moving, perhaps.

    How is this tolerable? I haven't read the article because I get a 404 page on the article link. Maybe if I allowed the 22 referenced domains to run scripts...

    Are we lucky the IRS isn't doing this yet? Or are they?

    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 0) by Anonymous Coward on Tuesday September 10 2019, @02:33AM

    by Anonymous Coward on Tuesday September 10 2019, @02:33AM (#892024)

    How is this tolerable?

    Why don't you tell us? You're obviously tolerating it right now.

  • (Score: 1) by Ethanol-fueled on Tuesday September 10 2019, @02:33AM

    by Ethanol-fueled (2792) on Tuesday September 10 2019, @02:33AM (#892025) Homepage

    Uh...yeah, Mr. FBI agent, perhaps you also want to convince us all to be sovereign citizens, or maybe you want us to drive that big van full of gasoline into Baltimore or something, even offering us a lot of money to do it, or offering us a lot of money to find somebody for you who is willing to do it.

    No thanks. I believe in peace and love and multiculturalism.

  • (Score: 3, Informative) by optotronic on Tuesday September 10 2019, @01:03PM

    by optotronic (4285) on Tuesday September 10 2019, @01:03PM (#892188)

    On my desktop computer I was able to read the article and did a little research. The posted BMV policy for Ohio certainly attempts to make the sale of driver license records sound more palatable:
    https://www.bmv.ohio.gov/more-records-personalinfo.aspx [ohio.gov]

    The other Ohio information I found is from 2010, and may be outdated:
    https://www.cleveland.com/open/2010/07/ohio_collects_millions_selling.html [cleveland.com]

    None of this makes me happy, but I've postponed my letter to my state senator for now. I have more thinking to do.

    As for those who think violence is the first response to undesirable government action... did you miss some high school classes?

  • (Score: 3, Interesting) by edIII on Tuesday September 10 2019, @09:34PM

    by edIII (791) on Tuesday September 10 2019, @09:34PM (#892391)

    It's been like this forever. In order to have a drivers license, you needed to surrender your privacy. These days the DMV has biometric records, fingerprints, birth records, and is usually cross-referenced against the IRS with a SOS#. Not to mention, your personal address. I can't recall specifically, but I wouldn't be surprised if the DMV was collecting phone numbers and email addresses.

    DMVs have never protected citizen data. Not once. At least not beyond the rudimentary network protections that exist, and at a policy level, there are numerous entities and organizations that gain access to this information. It's always been known that a dirty PI can get you an address or phone number on somebody. There are online portals for businesses that provide this as a service.

    You do have an OPTION. It's a rather simple one. LIE, LIE, and then LIE SOME MORE. I've never once given accurate information to a government entity. Maybe a phone number, but never an address. Not even the unPatriot Act bullshit with the banks revealed my personal address and secured information, because I deliberately perform fraud (well quasi-fraud). I've rented trailers in people's backyards, and performed other tricks to get a seemingly legit address to pass the banks and the DMV systems. The DMV will verify birth records, while the banks verify where you actually live by demanding proof of ownership, leasing, or a rental agreement.

    A lot of times it depends on the zoning, but if you can find a mail service business in a residential zoned space, they will show up to information systems as residential. After a bit of work, my drivers license lists my mail service's address instead of mine. So if you do any research, or just plain walk in and demand my info, the mail service business will give you a copy of my drivers license which lists their own address :)

    Actively lying is your only real defense. Your only other option is to have your privacy completely and totally erased. Anybody with a little bit of money and an active interest in you, can find you, or DOX you. Don't even get me started on the amount of information that most people reveal to social media and tech companies. That often eclipses whatever damage the DMV could do to you, and is apparently accessible to any "affiliate business" performing "marketing" on their behalf.

    A real and true option to solve this would be to allow everyone's personal address (where they actually sleep) to be protected information by law. A new mail service business, supported by a team of lawyers, could allow you to present this "managed" address to government and private entities. The main difference is that this service would be legally allowed to represent your interests as a service provided by lawyers. They could legally accept summons, answer subpoenas, and reveal your personal address to law enforcement requesting it. As your lawyer too, they have ways to contact you, making that address as official and viable as say the ones used for domain name privacy.

     

    --
    Technically, lunchtime is at any moment. It's just a wave function.
  • (Score: 2) by Chocolate on Wednesday September 11 2019, @04:21AM

    by Chocolate (8044) on Wednesday September 11 2019, @04:21AM (#892526) Journal

    Easy.

    Step 1: Bend over
    Step 2: ...

    --
    Bit-choco-coin anyone?