{"database": "press", "table": "releases", "rows": [["http://www.billnelson.senate.gov/newsroom/press-releases/nelson-asks-feds-to-investigate-state-s-sale-of-driving-records", "Nelson asks feds to investigate state\u2019s sale of driving records", "2016-11-18", "2016", "2016-11", "Democrat", "House", "FL", "Bill Nelson", "N000032", "www.billnelson.senate.gov", null, null, "legacy", "WASHINGTON, D.C. \u2013 U.S. Sen. Bill Nelson (D-FL) is calling on the federal government to investigate the state of Florida\u2019s practice of selling residents\u2019 personal information to private companies.\nNelson made the request in a letter sent today to Attorney General Loretta Lynch. The move comes after reports that the Florida Department of Highway Safety and Motor Vehicles has sold the personal information of more than 15 million licensed Florida drivers to at least 75 companies in the last two years. The state was paid more than $150 million for the information.\n\u201cIn this new era, when identity thieves are causing real damage to millions of hardworking families, the fact that the state is making a profit by selling Floridians\u2019 personal information on the open market is simply unconscionable,\u201d Nelson wrote.\nNelson is asking the Department of Justice to investigate whether the State of Florida is violating a decades-old federal law that prohibits private companies from accessing an individual\u2019s driving record for marketing purposes without their express consent.\nThe law, known as the Driver's Privacy Protection Act, was passed by Congress in 1994 to respond to growing concerns about states\u2019 use of the personal information contained in the millions of drivers records kept on file. While the law does allow states to sell a driver\u2019s information for some limited purposes including statistical analysis, it forbids the sale of this information for marketing purposes without an individual\u2019s express consent.\nFollowing is a copy of Nelson\u2019s letter to DOJ and a recent background article on the issue:\nNovember 18, 2016\nLoretta Lynch  \n\tAttorney General  \n\tU.S. Department of Justice  \n\t950 Pennsylvania Avenue, NW  \n\tWashington, DC 20530-0001\nDear Attorney General Lynch,\nI am concerned that the State of Florida may be violating the Driver's Privacy Protection Act of 1994 (18 U.S. Code \u00a7 2721) by selling the personal information of more than 15 million licensed drivers in Florida without their express consent.\nThe Driver's Privacy Protection Act of 1994 was enacted to protect Americans\u2019 personal information after the brutal murder of Rebecca Schaeffer, a 21-year old actress who was brutally shot and killed in 1989 by a fan who tracked her down using her California driver registration records. In an attempt to limit the disclosure of such information, the act now prevents a state from selling someone\u2019s personal information to a private company for marketing purposes without their express consent.\nIn this new era, when identity thieves are causing real damage to millions of hardworking families, the fact that the state is making a profit by selling Floridians\u2019 personal information on the open market is simply unconscionable. I ask that your agency investigate whether the State of Florida is fully adhering to the intent of the law, as any deviation could be severely harmful to the millions of people who trusted the state to keep their information safe.\nI appreciate your immediate attention to this matter.\nSincerely,  \n FOX 13 Investigates: The state's license to sell your driver records \nBy Tina Jensen  \n\tPublished: Oct. 31, 2016\nTAMPA (FOX 13) - The Florida Department of Highway Safety and Motor Vehicles sells your private driver records in bulk to more than 75 companies -- large and small -- without knowing how the federally protected information is actually being used by the buyer, a FOX 13 investigation has found.\nIn the past two years, the state DHSMV brought in $150 million from bulk sales of driver information about its 15.5 million licensed drivers and 18 million registered vehicles, data that is transmitted to most of the buyers on a periodic basis.\nDespite the department's repeated claims that the DHSMV \"heavily vets\" any company that wants a pipeline to private data to ensure the company meets one of the federally allowable reasons to access the information under the Driver Privacy Protection Act, a FOX 13 investigation has found the department's background checks primarily consist of staffers looking up whether the company has an active business registration with the state.\nThe extent of Florida's driver data sales practices, reported for the first time by FOX 13 Investigates, raises questions about why the department is putting private information in the hands of third parties without providing oversight as to how the data is actually being used by the buyer.\n\"I firmly believe the state really needs to take a more proactive approach in screening these people, verifying why they're using the information and that they're using the information for the proper purposes,\" said attorney Brandon Robinson with Stetson University College of Law in St. Petersburg.\nFOX 13 spent more than four months researching who has been buying your driver information.\nSome of the 75 entities who receive driver data from the state of Florida on a regular basis are major, global companies such as Acxiom and Experian.\nOthers on the list were difficult to identify: there were businesses that seemed to have no websites, no storefronts, and no answers when we tried to contact them.\nAmong the findings:\nNo state registration: Despite the state's self-described heavy vetting process, some of the businesses are not registered in the state of Florida. At least one business owner who signed contracts with the state had only expired, out-of-state business registrations.\nBuilding a mystery: Some of the companies purchasing bulk data from the state DHSMV seem to have no footprint apart from a business registration. In some cases, even the building out of which the business is said to operate raises more questions.\nOne of the businesses, according to its state registration, operates out of a condominium near Fort Lauderdale. There was no response to voicemails left on a number connected with the business.\nClass action lawsuits: Some of the companies on the state's sales list have been sued over allegations they misused driver data purchased from several states, including Florida.\nFOX 13 first started investigating whether the state is truly vetting data buyers after noticing a concerning correlation between Florida residents' transactions with the DHSMV and then receiving direct marketing ads.\nThe mailers utilize private driver information -- make, model and year of the car an individual drives -- and seem to be mailed to a person's home address soon after a driver provides information to a motor vehicle office.\nUnder the federal DPPA law, companies are not supposed to access private driver records for marketing purposes without an individual's expressed permission.\nOne would have to take the initiative to put the permission in writing to allow for this, because you are automatically opted out.\nRobinson started receiving similar direct marketing ads after he recently bought and registered a car.\n\"It had to have been through the state records,\" he said. \"Within a week? I mean, no one else could get the information that fast.\"\nThe risk goes beyond junk mail. If marketers got a hold of your private information, then who else can?\nApart from traffic citations, all the information pertaining to your driver record -- including your home address, date of birth, and details about the car you drive -- is private and protected under the federal Driver Privacy Protection Act.\nCongress enacted the DPPA in the mid-'90s, responding to growing concerns that states were using sales of citizens' motor vehicle information as a revenue generator and that the practice posed considerable risks to an individual's privacy, financial security, and physical safety.\nLawmakers carved out several wide-ranging exceptions to the law, allowing certain business interests to access the information under certain conditions.\nFor instance, the data can be obtained for a research or statistical report, though the DPPA neither defines who qualifies as a researcher, nor who qualifies as a statistician.\nAccording to the state DSHSMV, many businesses qualify for the DPPA exemptions.\n\"Heavily Vetted\"\nThe DHSMV, through a spokesperson, repeatedly denied a connection between the direct marketing mailers and insisted the department vets any entity that wants to buy private information from the department.\n\"Anyone who comes to the department and requests that is heavily vetted,\" said DHSMV spokesperson Alexis Bakofsky in a June interview in Tallahassee.\n\"We go through numerous processes to vet,\" she later repeated.\n\"And all those agencies are heavily vetted by the department,\" she repeated yet again.\nShe was unable to provide details.\nFOX 13 repeatedly asked the state to describe how they screen these companies to make sure they'll use your information legally.\nSeveral weeks after the interview, the department sent an email saying DHSMV staffers vet the companies by confirming they have a registered business name with the state.\nAnd that's it.\nRobinson with Stetson Law says that's a problem.\n\"All they had to do to get the records is basically swear by penalty of perjury that they're using that information for an allowable purpose,\" he said, adding that it's relatively easy to register a business name with the state. Registrations usually do not include a description of what kind of services the businesses provide.\nDriver Data to Data Brokers\nThe state of Florida sells your data to Acxiom and Experian, two large data brokers.\nBoth have been the subject of multiple congressional inquiries about how they use the information they collect.\n\"The average American is almost certainly unaware of the largely unregulated space in which these companies have been operating while they've been amassing detailed information about individuals' lives,\" said Sen. Al Franken, D-Minn., during a hearing of the Senate Committee on the Judiciary last November.\nPatrick Tucker, a technology expert and the author of \"The Naked Future: What Happens in a World that Anticipates Your Every Move,\" says the sales of private and protected driver data to data brokers deserve extra scrutiny, because the DPPA specifically prohibits use of driver data for marketing.\n\"The entire point [of data brokering] is to connect people that are creating data to people who want to sell them thing,\" he said. \"That is marketing. That is their entire business model.\"\nTucker questions how data brokers could keep driver information entirely separate from their marketing operations, no matter what the stated reasons were for the purchase.\n\"Why would you collect all this information from all these places,\" he said, \"if not for creating better, more specific, more responsive groups of people that you can then sell people when doing targeted marketing?\"\nNeither Acxiom nor Experian responded to requests for comment.\nFederal Class Action Lawsuits\nThe DPPA contains criminal punishments and civil remedies for violations. On the civil side, the law contains a provision for $2,500 per violation.\nSome of the companies on the states sales list have been involved in lawsuits alleging misuse of driver data. Two federal class action lawsuits have been filed in the past few months:\nCross-Sell: In 2014, the state of Florida signed a three-year agreement to sell protected driver records to Cross-Sell, a business that describes itself as a \"market research and analytics company.\"\nAccording to a federal class action lawsuit alleging violations of the Federal Driver Privacy Protection Act, the state of Nebraska banned the company from buying private driver records after the state found evidence they had been released to marketing companies.\nCross-Sell did not respond to requests for comment.\nNational Recall and Data Services: According to a federal class action lawsuit filed against the business and its owner Charles Holley, the company released private driver data to marketing companies in violation of federal law.\nThe lawsuit also says Holley has been banned from buying driver information from several other states after those states found evidence he was misusing it. Holley did not respond to requests for comment.\nThe DHSMV was giving National Recall and Data Services a direct pipeline to your personal information -- until one day after FOX 13 asked about it.\nAccording to an email from Bakofsky, the department requested an \"attestation regarding their data use\" six months ago, but National Recall and Data Services did not send one.\n\"Not having received any notice from the company within the 180-day period, the department has revoked the MOU [Memorandum of Understanding] within the rights of the agreement,\" Bakofsky said.\nFOX 13 sent several the DHSMV several requests for a copy of his entire contract with the state, specifically asking for the public record that detailed how Holley planned to use your private and protected driver records.\nLast Friday, the DHSMV it could not provide the public record because it was \"not in the vendor file.\"\n\"As you are aware, the department has continued to examine the process related to data records,\" a spokesperson said in an email. \"This part of the process is certainly something that the department will review closer to ensure clerical errors like this do not happen in the future.\"\nDuring the course of this investigation, FOX 13 asked DHSMV Executive Director Terry Rhodes about companies that buy Floridians' driver records from her department, but have been found to be in violation of the DPPA by other state DMVs. Neither Rhodes, nor a spokesperson, responded to the question.", 1, "2026-03-30T12:14:52Z", "2026-03-30T12:14:52Z"]], "columns": ["url", "title", "date", "year", "month", "party", "chamber", "state", "member_name", "bioguide_id", "domain", "scraper", "source", "date_source", "text", "has_text", "collected_at", "updated_at"], "primary_keys": ["url"], "primary_key_values": ["http://www.billnelson.senate.gov/newsroom/press-releases/nelson-asks-feds-to-investigate-state-s-sale-of-driving-records"], "units": {}, "query_ms": 0.8922959677875042, "source": "dwillis/congress-press", "source_url": "https://github.com/dwillis/congress-press", "license": "MIT", "license_url": "https://github.com/dwillis/congress-press/blob/main/LICENSE"}