Can I Run a License Plate? Who’s Allowed and the Penalties

If you’re wondering whether you can run a license plate to find out who owns a car, the short answer is no — not unless you fall into one of roughly fourteen categories of people federal law lets access that information. The plate on the bumper is public. The registered owner’s name, home address, and other identifying details behind it are protected by the federal Driver’s Privacy Protection Act, and pulling them without a permitted reason is a federal violation that carries both civil damages and criminal exposure.

The Plate Itself Isn’t the Protected Part

A lot of confusion about license plate lookups comes from mixing up two different things. The plate number is visible to anyone who walks past your car, and it is not “personal information” under federal law. What the Driver’s Privacy Protection Act protects is the data that comes back when someone uses that plate number to query a state DMV database.

The statute defines personal information as things that identify a specific person: photographs, Social Security numbers, driver identification numbers, names, addresses (five-digit ZIP codes excluded), telephone numbers, and medical or disability information. A tighter tier called “highly restricted personal information” covers photographs, Social Security numbers, and medical or disability data, and those items require the individual’s express consent or a narrower set of purposes to release.¹

So a plate is a search key. The owner information behind it is what the law guards. State DMVs and their employees or contractors are prohibited from releasing that information except for a set of specific purposes listed in the statute.²

Who Is Actually Allowed to Run a Plate

The DPPA lists roughly fourteen permissible uses. Each one exists because Congress decided a specific function outweighed the driver’s privacy interest. The main categories:

Government agencies, courts, and law enforcement carrying out official functions, along with private contractors working on their behalf.
Vehicle safety recalls, emissions compliance, theft investigations, and manufacturer performance monitoring.
Parties in civil, criminal, administrative, or arbitration proceedings — for service of process, pre-litigation investigation, or enforcing judgments.
Insurers and insurance support organizations handling claims, anti-fraud work, and underwriting.
Licensed private investigators and licensed security services, for any purpose the statute otherwise permits.
Legitimate businesses verifying information a customer already provided, and only then to correct errors or pursue fraud, debt recovery, or a security interest against that customer.
Researchers producing studies or statistics, provided the personal information is not published, re-disclosed, or used to contact anyone.
Notifying owners of towed or impounded vehicles.
Employers verifying commercial driver information.
Private toll road operators processing toll violations.

States can also permit bulk distribution of records for surveys or marketing, but only where the individual has opted in.²

Police

Officers have the broadest access. They can run a plate during a traffic stop, in the course of a criminal investigation, or for any official duty. Interconnected databases return registration details, owner information, and flags for stolen vehicles or outstanding warrants. The National Crime Information Center tracks stolen vehicles and stolen plates, and the Nlets network lets an officer in one state pull registration data from another.³ Queries are generally logged, which is meant to deter personal lookups.

Licensed Private Investigators

A licensed PI can access records for any purpose the DPPA otherwise permits. They typically go through authorized data brokers that verify the license and require a stated permissible purpose before releasing results. Common uses include insurance fraud, missing-person work, and civil litigation support.

Businesses, Insurers, and Repossession Agents

A business can verify information a customer already gave it, and if that information turns out to be wrong, can obtain corrected data for fraud prevention, debt recovery, or enforcing a security interest.² A repossession agent locating a car for a lender with a valid lien fits. A company running plates to build a marketing list without opt-in consent does not.

What About an Ordinary Person?

If you have no professional role, no lawsuit, no lien, and no other qualifying reason, you cannot walk into a DMV and get the registered owner’s name from a plate. The DPPA’s default is non-disclosure. Curiosity — even sincere curiosity about a hit-and-run you witnessed, a car parked outside your house, or someone who cut you off — is not a permissible use.

Online services that advertise “free license plate lookups” generally return only publicly available data: vehicle make, model, year, sometimes accident or title history. They cannot legally hand you the owner’s name or address unless you qualify under one of the DPPA’s categories. And lying on a records request form about why you need the information is itself a federal violation, separate from anything you do with the data afterward.⁴

The practical path for a private person who thinks a particular vehicle was involved in a crime or an incident against them is to report it to police or, if a lawsuit is being contemplated, to work through an attorney or a licensed investigator who has a permissible purpose.

Getting Your Own Record, or Authorizing Someone Else

You can request your own motor vehicle record from your state’s DMV. The DPPA’s restrictions focus on third-party access, so there is no federal barrier to seeing your own file. You submit a written or online request, provide identification to verify you are the person named in the record, and pay a processing fee. Fees and turnaround times are set by the state, and most DMVs process self-requests within a few weeks.

If someone else needs your record and doesn’t fit a permissible use, the statute allows disclosure with your written consent.² That’s the mechanism behind an employer asking you to authorize release of your driving record during a background check.

What Happens If You Run a Plate Without a Lawful Reason

The DPPA gives the person whose information was accessed a private right of action in federal court. You don’t have to wait for a prosecutor to act. Anyone who knowingly obtains, discloses, or uses personal information from a motor vehicle record for a purpose the statute doesn’t allow is liable for actual damages of no less than $2,500 per violation, punitive damages where the violation was willful or reckless, and reasonable attorney’s fees.⁵

The $2,500 figure is a floor, not a ceiling, and the plaintiff does not have to prove they lost $2,500 in actual harm. Because damages accrue per violation, an entity that ran hundreds of unauthorized lookups faces potential liability in the hundreds of thousands. That structure has made the DPPA a frequent basis for class actions against data brokers and employers.

On the criminal side, a knowing violation is punishable by a federal fine set under the general federal fine schedule. A state DMV that maintains a policy or practice of substantial noncompliance can be hit by the Attorney General with civil penalties of up to $5,000 per day of noncompliance.⁶

States commonly add their own penalties on top. Unauthorized access to a DMV database can be a misdemeanor or felony under state law, particularly where the access involved fraud or an intent to stalk or harass. Officers who run plates for personal reasons can face termination, loss of law enforcement certification, or criminal prosecution depending on the state.

If you believe your own motor vehicle records were accessed without authorization, the combination of the $2,500 minimum per violation and recoverable attorney’s fees means a single unauthorized lookup can support a viable federal lawsuit.⁵

1
Office of the Law Revision Counsel. 18 USC 2725 – Definitions
2
Office of the Law Revision Counsel. 18 USC 2721 – Prohibition on Release and Use of Certain Personal Information From State Motor Vehicle Records
3
United States Department of Justice. National Crime Information Systems
4
Office of the Law Revision Counsel. 18 USC 2722 – Additional Unlawful Acts
5
Office of the Law Revision Counsel. 18 USC 2724 – Civil Action
6
Office of the Law Revision Counsel. 18 USC 2723 – Penalties