In early November, the California Department of Motor Vehicles improperly shared private data with the IRS and the Department of Homeland Security, according to KTLA.
A story published earlier this year by Motherboard revealed that DMVs in many states have sold data to private investigator firms, which is legal under federal law.
The Driver Privacy Protection Act was passed in 1994 in an effort to protect data obtained by the DMV to ensure privacy of personal information. Prior to the law, anyone could obtain the address or similar information of an individual through driving records at a DMV. Other exceptions exist under the DPPA that permit the DMV to sell data to consumer credit reporting companies and LexisNexis.
Read more about that report here.