Only a handful of states actually sell their registration data, and even then the Shelby Amendment requires states to allow drivers to opt out of this data, so states that sell data are not selling complete data in the first place.
What is the Federal Driver’s Privacy Protection Act (DPPA) and the Shelby amendment?
The DPPA was enacted by Congress in 1994, as an amendment to 103 H.R. 3355, the Violent Crime Control and Law Enforcement Act of 1994, and is Public Law No. 103-322 codified and amended by Public Law 106-69. It can be found within Title XXX, Section 300001. The DPPA aims to protect the privacy of personal information of drivers that is put together by the State Department of Motor Vehicles (DMV). The DPPA was amended on June 1, 2000, with the Shelby Amendment, which is sometimes mistakenly referred to as “The Shelby Act.” The Shelby Amendment requires states to obtain a driver’s consent before giving out any personal information whether for an individual or in bulk. The DPPA allows the following information to be used as defined in 18 U.S.C. § 2721: