A vehicle owner lookup by VIN or license plate will tell you plenty about the car and almost nothing about the person who owns it. The federal Driver’s Privacy Protection Act, at 18 U.S.C. §§ 2721–2725, bars state motor vehicle departments from releasing an owner’s name, address, or phone number unless the requester fits one of fourteen specific exceptions. Title history, odometer readings, lien status, and salvage or flood branding are fair game for anyone running a VIN. The identity behind the registration is not.
What a VIN or Plate Search Will and Won’t Show You
The DPPA targets the link between a vehicle and a specific person, not the mechanical biography of the car. So a standard vehicle history report from a reputable provider will show you title transfers, accident reports, odometer disclosures, salvage or flood designations, and recorded liens. Traffic violation records and license status also sit outside the DPPA’s definition of protected personal information.
What stays locked is the owner’s name, home address, phone number, and driver identification number. More sensitive data, including photographs, Social Security numbers, and medical or disability information, is treated as “highly restricted” and cannot be released at all without the individual’s express consent, apart from a handful of narrow exceptions such as law enforcement operations and court proceedings.
If you paid a lookup site expecting a name and got a title report instead, that gap is the law working as designed, not a defect in the service.
Who Can Legally Get the Owner’s Name
The DPPA lists fourteen permissible uses that override its general prohibition on disclosure. If you don’t fit one, no state DMV will hand over the owner’s identity, and no legitimate data broker should either.
- Federal, state, and local government agencies carrying out official duties, including law enforcement and regulatory enforcement.
- Vehicle manufacturers and their agents issuing recall notices or addressing emissions and safety defects.
- Insurers investigating claims, underwriting policies, verifying coverage, or pursuing subrogation after a collision.
- Parties to a civil, criminal, or administrative proceeding, including for enforcing judgments and court orders.
- Businesses verifying information a customer voluntarily provided, or recovering a debt or security interest.
- Licensed private investigators and security services operating under a valid license, for purposes the statute permits.
- Tow and impound companies sending the required owner notification.
- Researchers doing analytical work, provided they do not publish personal details or use the data to contact individuals.
Personal curiosity is not on the list. Wanting to identify the car parked outside your house, tracking down someone you saw in a parking lot, or building a marketing list all fall outside every permissible use. Bulk distribution of DMV data for surveys or solicitations is only allowed where the state has obtained express consent from each individual first.
The One Workaround: Written Consent From the Owner
There is one path that sidesteps every other qualification. Under the DPPA, any requester can obtain motor vehicle records if the individual whose information is at stake has authorized the release in writing.
This is the route that matters in private transactions. Buying a used car and want to confirm the seller’s name matches the title? Ask the seller to sign a written authorization. Landlords, employers running driving-related background checks, and lenders verifying a borrower’s vehicle ownership all commonly rely on this pathway.
The consent has to be specific and documented. A vague verbal agreement won’t satisfy the DMV. The authorization needs to identify the person granting consent, the requester, and the records being released. Some states publish their own consent or power-of-attorney forms for this purpose.
Why Online “Owner Lookup” Sites Usually Can’t Deliver
Dozens of websites advertise reverse plate searches and owner lookups, and anyone researching this topic has probably already tried one. Here is the honest picture.
The DPPA directly regulates state motor vehicle departments and their officers, employees, and contractors. Private data aggregators that compile vehicle information from other sources, such as county property records, insurance databases, or publicly filed liens, are not bound by the statute in the same direct way. Some of these companies do display a name attached to a vehicle, but that data did not necessarily come from a state DMV system, and the accuracy of privately compiled records varies wildly. Paying $20 does not guarantee you will receive the current registered owner.
When private companies do obtain personal information from a state DMV under a permissible use, the DPPA imposes resale restrictions. The recipient can only redisclose the data for another permissible use listed in the statute. So even legitimate paid services aren’t going to hand a stranger a home address on request.
How a Qualified Requester Files With the DMV
If you do fit a permissible use, the request runs through the state motor vehicle agency. You’ll need the exact VIN or license plate number and, in most states, a formal records request form with a DPPA disclosure section where you identify your specific permissible use.
Checking the box is not enough. Agencies expect supporting documentation matching the category you selected. Insurance professionals typically submit a claim number, policy reference, or professional license number. Attorneys and litigants provide a court case number, subpoena, or court order. Licensed investigators include their investigator license number and a description of the authorized purpose. Towing companies submit tow documentation along with proof of authorization to operate. Recall-related requests require proof of affiliation with the manufacturer. Every requester also needs valid government-issued photo identification.
Fees are generally modest. Based on data compiled by the Bureau of Justice Assistance, most states charge between $2 and $15 per vehicle record search, with more for certified copies or detailed title histories. Colorado charges $2.20 for a standard search; Michigan charges $11 to $12; Kansas charges $15 for a registration record and $30 for a full title history. Budget roughly $5 to $15 for a typical request. Incomplete forms or mismatched justifications cause delays or outright denials, and the agency logs who accessed each record and why.
What Happens If Someone Looks You Up Without a Legal Reason
The DPPA has real teeth. Knowingly obtaining or disclosing personal information from motor vehicle records for an unauthorized purpose is a federal criminal offense, prosecuted by the U.S. Attorney’s office. Making false representations to a state DMV to get protected records is separately prohibited. Convictions carry criminal fines and a permanent federal record.
The person whose information was improperly accessed can also sue in federal court. Courts may award actual damages or liquidated damages of at least $2,500 per violation, whichever is greater, plus punitive damages when the violation involved willful or reckless disregard of the law. The defendant also pays the plaintiff’s reasonable attorney fees and court costs. In cases involving systematic violations, the per-violation minimum adds up quickly.
The DPPA itself does not contain a statute of limitations. Federal courts have applied the general four-year federal catch-all under 28 U.S.C. § 1658(a). The clock starts when the violation occurs, not when the affected person discovers it, and unauthorized lookups often go unnoticed for years.
Looking Up Your Own Record
You can request your own motor vehicle record directly from your state DMV without navigating any permissible-use hurdles. The DPPA restricts disclosure to third parties, not to the person whose information is on file. Most states charge the same modest fee for a self-request as for an authorized third-party search.
What you generally cannot get is a log of everyone who has looked at your record. Most state DMV systems don’t offer vehicle owners an access history for their registration information. The audit trail exists for regulatory enforcement, not individual transparency. If you suspect someone pulled your records without authorization, the civil lawsuit is the remedy, and the four-year clock may already be running.