Certified Information Privacy Professional – United States (CIPP/US) — Question 37

Under the Driver’s Privacy Protection Act (DPPA), which of the following parties would require consent of an individual in order to obtain his or her Department of Motor Vehicle information?

Answer options

• A. Law enforcement agencies performing investigations.
• B. Insurance companies needing to investigate claims.
• C. Attorneys gathering information related to lawsuits.
• D. Marketers wishing to distribute bulk materials.

Correct answer: D

Explanation

Under the DPPA, marketers seeking to distribute bulk materials must obtain consent from individuals before accessing their DMV information, as this is considered a non-essential use. In contrast, law enforcement agencies, insurance companies, and attorneys have legitimate reasons and exceptions under the law that allow them to access such information without needing consent.