A license plate number is public in the sense that anyone can read it, and that fact leads drivers to assume the owner is public too. Federal law says otherwise. A motor vehicle record sits behind a purpose test, and a lookup without a permitted reason can end in a federal claim, a fine, and a lost job for the person who ran it. A plate number is a label that any driver can read, and the file behind it stays closed to the public.
The gap between a plate on a bumper and a name in a file is the whole subject of this page. Officials misuse a login, private parties pay for a shortcut, and websites sell a guess. The sections below cover the statute, the permitted purposes, the penalties, and the places to report a search that had no business happening. A driver who knows the route can act before the trail goes cold, and the first stage is a written request form.
What the Federal Privacy Law Covers
The Driver Privacy Protection Act limits who may obtain personal information from a motor vehicle record, and it applies in every state, North Carolina included. The North Carolina License Plate page carries the full index of topics. Congress passed it after a stalker used a plate number to find a woman who had moved across the country. The law does not ban lookups; it limits them to a list of purposes and requires the requester to certify the reason in writing.
The Statute
18 U.S.C. 2721 sets the permitted uses, 2722 covers obtaining data under false pretenses, 2723 covers disclosure, and 2724 sets the civil remedy. The sections work as one scheme, so a single lookup can violate the obtaining rule, the misrepresentation rule, and the disclosure rule at once. A court reads the four together rather than as separate offenses with separate tests.
A Permitted Purpose
The list includes use by a government agency in carrying out its functions, use in connection with a court proceeding, use by an insurer in connection with a claim, and use by a tow operator to notify an owner. Readers comparing totals can use the license plate lookup. A private curiosity has no place on the list. A business that wants to market to drivers fails the test without a signed consent from each one.
The Certification
A requester signs a statement that names the permitted purpose, and that signature holds the system together. A false certification exposes the requester to criminal liability and to a civil claim. An agency that hands over data without a certification carries its own risk. The paper trail is what makes a later investigation possible at all.
What Counts as Personal Information
The protected data includes the name, address, driver license number, photograph, Social Security number, and medical or disability details. A plate number on its own is not personal data, and that detail confuses drivers. The plate becomes protected the moment it joins a record that carries a name. A page that shows only a plate and a vehicle model may sit outside the law.
The State Layer
North Carolina adds its own rules for record requests and charges a fee for copies. A request goes through form MVR-605A, and the state reviews the stated purpose before release. A local agency may hold its own records, and the same federal limits follow the file. The state rules tighten the process without replacing the federal floor.
Core Details
The figures below set out the exposure for a bad lookup and the route for a record request. A parallel case sits in the plate reader rules. A single violation can carry a liquidated sum, and a willful pattern can add punitive damages and fees. Read the table before signing a purpose statement, since a false line on a form is the fastest path to a federal claim.
| Item | Figure |
|---|---|
| Federal statute | 18 U.S.C. 2721 through 2725 |
| Liquidated damages | $2,500 per violation |
| Punitive damages | Available for willful conduct |
| Attorney fees | Recoverable by the plaintiff |
| Criminal fine | Up to $5,000 |
| State request form | MVR-605A |
| Copy of a registration | $5 |
| Complaint route | Agency and NCDMV |
| State customer line | (919) 715-7000 |
Who May Request a Record
The permitted list is narrower than drivers assume, and it turns on the reason rather than on the job title. A bank does not qualify. A private investigator qualifies only when the request ties to a permitted purpose. A journalist gets no special pass, though a court record may carry the same data. The certification separates a lawful request from a guess.
Insurers and Tow Operators
An insurer may pull a record to settle a claim, verify coverage, or investigate fraud, and the purpose must connect to an actual policy. A tow operator may pull a record to notify an owner about a stored vehicle. Both uses end when the claim or the storage ends. A file kept for marketing fails the test.
Attorneys and Process Servers
An attorney may obtain a record in connection with litigation, and a process server often works under that umbrella. The purpose must name a case. A lawyer who pulls a plate for a friend has left the permitted purpose behind. A subpoena is the cleaner route when a case exists, since it creates a record the court can review.
Government Agencies
Agency use is permitted when it carries out a government function, and that phrase stretches wide. An officer running a plate during a traffic stop fits. The state fee schedule carry the same paperwork from another angle. An officer running a plate for a date does not. A clerk looking up a neighbor fits neither. The agency function belongs to the job, not to the person holding the login.
Businesses With Consent
A business may obtain a record when the driver gives written consent, and the consent must name the purpose. A dealer, a rental company, or a parking operator can build a lawful process around that signature. A consent buried in a long contract is weak. A separate page with a stated purpose holds up better in court.
Misuse Inside an Agency
Most of the data sits behind a login, and the misuse that follows is quiet. A clerk looks up a neighbor. An officer runs a plate from a bar. A dispatcher checks a former partner. Each search leaves a timestamp and a user name, and each one creates a federal claim when the purpose fails. The audit trail is the only thing that catches it.
Curiosity Searches
A search with no case number is the most frequent form of misuse, and it is the easiest to prove. The log shows a query and a missing purpose. An agency that reviews its log weekly catches the pattern early. An agency that reviews once a year catches a habit. The difference shows up in the number of complaints that end in discipline.
The Lookup That Follows a Person
A single lookup can reveal a home address, and a series of lookups can map a schedule. An official who runs a plate after a protest, a breakup, or a zoning dispute turns a database into a tracking tool. Federal law treats that pattern as a civil rights problem, and a department can face a claim for a policy that allowed it.
Audit Trails
A modern records system logs the user, the time, the plate, and the stated reason. A supervisor can pull a report by user or by plate. A department that never runs the report holds the evidence and ignores it. A plaintiff who obtains the log through discovery can show a pattern that the agency never examined.
The Discipline Gap
Penalties inside an agency range from a written warning to termination, and the range is wide for the same conduct. A union contract can slow a removal. A small department may have no policy at all. A state licensing board can act when the person holds a credential. The gap between agencies is one reason federal claims matter.
Misuse by Private Parties
A private party rarely has a login, and that limits the damage without removing it. The routes run through a friend at an agency, a paid middleman, or a data broker with an old file. Each route depends on someone who breaks a rule. The federal statute reaches the person who asks and the person who looks.
Stalkers and Abusive Partners
A plate is easy to see in a driveway, and an abuser who knows the number can ask a contact to run it. The resulting address can put a survivor at risk, which is why the federal law exists. A protective order does not stop a lookup, but a documented request can support a federal claim and a criminal referral.
Recovery and Repo Firms
A recovery agent has a lawful reason to locate a financed car, and that reason covers one specific account. An agent who runs plates for other clients has left the purpose behind. A company that buys a batch of records from a contact exposes itself to a claim for each record. The business model collapses under a single audit.
Data Brokers
A broker that assembles names, addresses, and plate numbers from public and private sources sells a product the law restricts. A file built before a move can be stale, and a stale file can send a driver to the wrong door. A broker with no permitted purpose cannot cure the defect by calling the data public.
Civil and Criminal Exposure
The law offers two tracks, and a bad lookup can trigger both. A private plaintiff sues for damages, and a prosecutor can bring a criminal charge for false representation. An agency can fire the employee in the same week. The tracks run on different clocks, and a settlement on one does not end the other.
Damages
A plaintiff may recover actual damages or a liquidated amount, plus punitive damages for willful conduct and attorney fees. The liquidated figure makes a small case worth filing, since the plaintiff does not have to prove a dollar loss. A pattern of lookups multiplies the award. A court can order the agency to change its policy.
Criminal Penalties
A person who knowingly obtains, discloses, or uses personal data under false pretenses faces a federal fine and up to a year in prison for a first offense. The charge is rare, and it usually follows a referral from an agency investigation. A state charge for computer trespass or official misconduct may follow the same conduct.
Discipline and License Loss
An employee who misuses a login can lose the job and the pension that came with it. A licensed professional can face a board complaint, and a peace officer can lose certification. A termination letter often becomes an exhibit in the civil case. The career cost usually exceeds the fine by a wide margin.
Settlements and Consent Orders
An agency that settles a claim often agrees to training, audit reports, and a public statement of policy. A consent order can outlast the employee who caused the problem. A plaintiff who asks for an audit clause gets a remedy that helps the next driver. A settlement without that clause closes one file and changes nothing.
Enforcement in Practice
Enforcement runs through a few channels, and each one produces a different record. A federal civil case ends in a docket entry. An agency investigation ends in a personnel file. A state audit ends in a report. The public sees the docket and the report, and the personnel file stays closed in most cases.
Cases That Reach Court
The reported cases tend to follow a pattern: an official with a login, a person with a reason to look, and a plaintiff who obtained the log. A single lookup is hard to prove without the audit. A series of lookups over months leaves a trail a subpoena can pull. The docket is public, and the facts are usually plain.
Agency Firings and Referrals
A department that finds a bad lookup can fire the employee, refer the file to a prosecutor, and notify the person whose record was pulled. The three stages rarely happen together. A referral without notice leaves the victim without a civil claim. A notice without a referral leaves the conduct unpunished.
State Audits
An audit of a records system can find shared logins, missing purpose codes, and accounts that stayed active after an employee left. Each finding is a control failure that makes misuse easier. A report that names the failures gives a council a reason to fund a fix. The audit itself does not punish anyone.
What a Victim Can Prove
A victim who has the log, a date, and a name has most of a case. A victim who has only a suspicion has almost nothing. The records request is the first stage, and the reply often shows whether a query happened. An attorney can subpoena the rest once a filing is underway.
Why Finder Sites Cannot Deliver
A search for a plate number returns pages of offers to reveal an owner, and almost none of them can do it. The data is closed, and the sites know it. What they sell is a subscription, an old public record, or a guess built from a name that happened to match. A driver who pays learns nothing and exposes a card number.
What They Sell
A finder site sells a report that mixes vehicle history, recall data, and a name pulled from a marketing list. The name may belong to a previous owner, a lienholder, or a person with a similar plate in another state. The site disclaims accuracy in small print. A refund request usually meets a wall.
The Guess
A plate number is short, and a model match narrows a list. A site can guess an owner from a voter file, a property record, or a social profile. A guess that lands on the wrong person can send a driver to a stranger door. The wrong address is not a harmless error when a dispute is involved.
The Scam
Some sites charge a fee, deliver nothing, and bill again the next month. Others collect a plate number and a payment card for a list they sell. A chargeback is the practical remedy, and a report to the attorney general adds a record. A site that promises an owner name for a plate is a warning sign on its own.
How to Report a Misuse
A driver who suspects a bad lookup has three places to go, and each one keeps a different record. The agency handles discipline. The state DMV handles the records system. A federal court handles damages. Starting with the agency is cheap and fast, and a written request creates the paper that the other two routes need.
Start With the Agency
A written complaint to the records custodian should name the plate, the date, and the reason for suspicion. Ask for the query log and the policy in the same letter. A reply that denies the request without a legal citation is a useful document. Keep every envelope and every email in one folder.
File With the State
The DMV accepts complaints about record misuse, and its customer line can point to the right unit. A state complaint can trigger a review of an agency account. The review may not produce a public report, and the complainant may hear only that the matter closed. The filing still creates a record.
Go to Court
A federal claim under the privacy statute has a short window, and the clock starts when the violation is discovered. An attorney who handles privacy cases can evaluate the log in an hour. A demand letter often produces a settlement before a filing. The fee award makes a small claim viable.
Frequently Asked Questions
Drivers ask a short list of questions about plate lookups, and most of them turn on who is asking and why. The questions below cover the federal statute, the price of a record, the finder sites, and the first stage after a suspicious search. Each answer reflects the law as written and the practice at state offices.
Is it illegal to look up a license plate in North Carolina?
It depends on the purpose. A lookup tied to a permitted reason, such as a claim, a court case, or a government function, is legal. A lookup for curiosity, a date, or revenge is not. The person who runs the search and the person who asks for it can both face a claim.
What can I get for my own plate record?
You can request your own record with form MVR-605A and pay the listed fee. The reply shows the registered owner, the vehicle, and the lienholder. A copy of a registration costs a few dollars. The request goes through the state, and a local agency may hold a separate file.
Can a website really find an owner from a plate number?
No. Owner data is closed under federal law, and a site that claims to deliver it is guessing, reselling an old record, or running a scam. A report from one of those sites often names the wrong person. A chargeback and a complaint are the useful responses.
What happens to an official who runs a plate for personal reasons?
The agency can fire the employee, and a prosecutor can file a federal charge for obtaining data under false pretenses. The person whose record was pulled can sue for damages and fees. A state licensing board can act when the employee holds a credential.
How long do I have to file a claim?
The federal statute sets a short window, and it starts when the violation is discovered rather than when the lookup happened. A driver who suspects misuse should request the log right away. An attorney can confirm the deadline, which may differ from the state limit on similar claims.