The Evolving Challenge of Vehicle Privacy in the Age of Technology
In 1989, the tragic murder of actress Rebecca Schaeffer highlighted significant privacy and safety risks due to the accessibility of personal data in state motor-vehicle records. Her assassin obtained her home address through these records, leading to public outcry. This incident sparked action from Congress, resulting in the Driver’s Privacy Protection Act (DPPA) of 1994.
The DPPA introduced essential precautions against the uncontrolled release and sale of personal data from motor-vehicle records by the government. It permitted exceptions for law enforcement and public safety. The law was a response to the technological advancements of the time, which made accessing state motor-vehicle records easier.
Fast forward over 30 years, and technology has advanced once again. Companies like Flock Safety now collect license-plate information without needing access to state databases. Their system records license-plate images, vehicle characteristics, and other data independent of DMV records. This technological shift brings up new privacy concerns, as the DPPA only governs state records, not data observed independently on public roads.
Imagine driving and having your license plate recorded by an automated camera. Each observation might seem minor, but together they create a detailed record of your vehicle’s movements. This information, although never directly sourced from a DMV record, poses new privacy issues since companies can establish databases tracking vehicles based solely on frequently observed data.
Automated license-plate readers can serve beneficial purposes. Law enforcement uses them for locating stolen vehicles and responding to public safety issues. However, the critical questions focus on data management post-collection. The duration of data retention, access permissions, and the potential for data repurposing are paramount considerations.
Recently, Flock Safety made changes. As of August 13, they suggest reducing the default retention period of their license-plate-reader data from 30 days to seven. They also implemented safeguards against misuse. Although a step forward, the suggested seven days can be exceeded based on customer agreements and applicable laws, illustrating the nuanced balance between public safety and privacy protections.
The DPPA was not intended as an absolute privacy shield on public roads. It recognized the dangers of indiscriminately collected and distributed identifying information. In today’s context, new technologies necessitate updated privacy laws that reflect current capabilities, not just those from 1994.
The privacy laws of the future must bridge the gap between public safety needs and personal privacy rights. This balance ensures that while public safety efforts are effective, privacy concerns are also adequately addressed.
Americans should not have to choose between public safety and personal privacy when reasonable rules can protect both.
The challenge lies in crafting policies that protect both safety and privacy, adapting laws to contemporary technology.
About the author: Shaun M. Simmons, a seasoned security professional, works as an independent security contractor and grassroots political organizer in Idaho.