By Christopher Keleher

“Aggravating” is one way to describe a parking ticket. But when the ticket displays the car owner's name and address, it becomes dangerous, at least according to the Seventh Circuit. The court's en banc decision of Senne v. Village of Palatine held that the Illinois Village of Palatine violated the Driver's Privacy Protection Act (“DPPA”), 18 U.S.C. §2721, by including Jason Senne's name and address on a $20 parking ticket issued to him. [FN1]                                                    

For those Illinois, Indiana and Wisconsin municipalities that include identifying information on parking tickets, the ruling is problematic. The DPPA includes statutory liquidated damages of $2,500 per violation and a four-year statute of limitations. [FN2] From there, the math is easy. Exposure for some municipalities will be in the millions and, in a perverse twist, hit the most aggressive ticketers hardest.                                                                              

Protecting privacy was Congress' motivation in enacting the DPPA, and legislative intent was Senne's fulcrum. An exasperated dissent argued that in emphasizing privacy, the majority ignored provisions of the DPPA exempting law enforcement. Before considering who had the better of the argument, the DPPA is examined.

The essentials of the DPPA

State DMVs are a marketer's goldmine. Congress discovered that many states had lucrative arrangements selling driver's license information to businesses. [FN3]But a more nefarious information breach occurred when Robert Bardo obtained the address of actress Rebecca Schaeffer from a California DMV. [FN4] Bardo, an obsessed fan who had been stalking Schaeffer for three years, went to her home and killed her. [FN5] This tragedy compelled Congress to pass the DPPA in 1994.      

The DPPA prohibits states from disclosing a driver's personal information without the driver's express consent. A private cause of action lies against persons and entities that disclose “personal information ... from a motor vehicle record.”[FN6] “Personal information” includes a Social Security number, driver identification number, name or address. [FN7] Each violation of the DPPA incurs statutory liquidated damages of not less than $2,500, attorneys' fees and punitive damages.[FN8] But the DPPA has numerous exceptions, and curiously, the law would not have prevented Rebecca Schaeffer's death. Robert Bardo hired a private investigator to get Schaeffer's information from the DMV, and private investigators are exempt under the DPPA. [FN9]

An authorized recipient of personal information “may resell or redisclose [personal information] only for a use permitted under [section 2721(b)].” [FN10]That section provides 14 exceptions or “permissible uses.” Most of the exceptions, as the Eleventh Circuit observed, “are tied to a particular occupation or organization and its corresponding lawful need for the information.” [FN11] Those relevant to Senne include:

(1) For use by any government agency, including any court *11 or law enforcement agency, in carrying out its functions ....

(4) For use in connection with any civil, criminal, administrative, or arbitral proceeding in any Federal, State, or local court ... including the service of process, investigation in anticipation of litigation, and the execution or enforcement of judgments .... [FN12]

Additional exceptions relate to research activities, insurance claim investigations, commercial driver's licenses and toll facilities. [FN13]

Case law interpreting the DPPA is relatively limited. The Supreme Court upheld the law as a constitutional exercise of Congress' commerce power because the DPPA regulates the sale of drivers' information in interstate commerce. [FN14]Additionally, the Eleventh Circuit rejected qualified immunity for state officials sued for selling driver's license information to marketers, finding the statutory rights created by the DPPA enforceable both directly and under 42 U.S.C. §1983.[FN15] Finally, the Seventh Circuit determined a publishing company did not violate the DPPA by purchasing and reselling information from DMV records because an authorized recipient of personal information can do so. [FN16]

Thus, while courts have explored the contours of the DPPA, no case interpreted the statute's law enforcement exceptions until Senne.                                                                      

Senne's parking violation

Jason Senne was issued a citation for violating Palatine's ordinance prohibiting overnight street parking. [FN17] The ticket was printed electronically on an authorized form and placed on Senne's windshield. Senne discovered the ticket five hours later. [FN18] As Senne's vehicle was parked on a public street, the ticket was there as well.

The ticket, which doubled as a return envelope to pay the fine, had the caption: IN THE NAME AND BY THE AUTHORITY OF THE VILLAGE OF PALATINE, ILLINOIS, A MUNICIPAL CORPORATION, PLAINTIFF VS JASON SENNE. [FN19]

Senne's home address, driver's license number, date of birth, sex, height and weight were then listed. The citation also outlined Senne's legal options. He could mail a check or money order for $20, pay in person at the Palatine Police Department, or request a hearing. Finally, the ticket specified that process was served:

I certify that I served a copy of the citation by affixing it to the Respondent's vehicle, and further state under the penalty of perjury as provided in Ill. Rev. Stat., Ch. 110, Sec. 1-109 that the above facts are true and correct .... [FN20]

Senne's ticket constituted service of process not only under Illinois law, [FN21]but also via a Palatine ordinance that permits administrative complaints to be served by affixing them to the property where the violation occurs. [FN22]

Senne's class action

Senne alleged the Village of Palatine violated his privacy rights under the DPPA by including personal information on his parking ticket. While Senne averred the ticket was in plain view of the public, the only person alleged to see the ticket was Senne himself. [FN23] The putative class action sought $80 million in statutory liquidated damages - $2,500 for each of the 32,000 potential class members receiving parking tickets in Palatine over the last four years. [FN24]

Before Senne certified the class, Palatine moved to dismiss under Federal Rule of Civil Procedure 12(b)(6). Palatine first argued there was no disclosure of Senne's information because Senne failed to allege that anyone other than himself saw the ticket. But even if there was a disclosure, it was permitted because Palatine was enforcing traffic and parking ordinances. [FN25] Further, the ticket was an administrative complaint against Senne, and leaving it on his windshield was an authorized service of process. [FN26]

The district court granted Palatine's Motion to Dismiss, and the Seventh Circuit affirmed in a 2-1 decision. [FN27] The majority, Judges Easterbrook and Flaum, determined Palatine disclosed Senne's personal information but did not violate the DPPA because the citation initiated an administrative complaint against Senne and effectuated service of process. [FN28] The court rejected Senne's argument that Palatine facilitated crime by publicizing a vehicle owner's personal information. Nor was the court concerned that the personal information did not aid service of process. Even if including identifying information on the ticket is “unnecessary, foolish, and a poor security practice,” the DPPA “does not impose best practices on municipalities.” [FN29]

Judge Ripple dissented, claiming Palatine violated the DPPA because it disclosed information unnecessary for service of process. [FN30] He contended the DPPA's exceptions must be interpreted with congressional intent (protecting privacy) in mind, and therefore the permissible uses must be read narrowly. [FN31]That view would ultimately prevail.

The en banc decision

Rehearing the case en banc, the Seventh Circuit reversed the district court and revived the suit. With Judge Ripple writing for the majority, the court first determined that including Senne's personal information on the citation and placing it on his car was a disclosure. Under the DPPA, state DMVs may not “disclose or otherwise make available to any person or entity” personal information. [FN32] The court determined that attaching the phrase “‘or otherwise make available’ to the term ‘disclose’ leaves little doubt about the breadth of the transactions Congress intended to regulate.” [FN33] That no one else was alleged to have seen Senne's ticket was of no import. Placing the ticket on the windshield was “sufficient to come within the activity regulated by the statute regardless of whether another person viewed the information ....” [FN34]

The court next considered whether Palatine's disclosure was permitted under§ 2721(b)(1) or (4). Conceding the ticket was service of process and a function of Palatine's police department, the court nevertheless refused to apply either exception because of Congress' “overarching purpose of privacy protection” in drafting the DPPA. [FN35]

The court reached its determination as follows. Sections 2721(b)(1) and (4)both begin with the words “for use.” Honoring the statutory construction principle that meaning must be given to every word, the court determined “for use” performed “a critical function” in the statute. [FN36] “For use” contained “the necessary limiting principle” to the exceptions in § 2721(b)(1) and (4). [FN37] In authorizing a disclosure “for use,” Congress intended that the information disclosed be used only for the purpose identified in the exception. [FN38] When disclosed information does not effectuate the exception's purpose, neither § 2721(b)(1) nor (4) will apply. In support of this reading, the court emphasized the DPPA's legislative history. The court also noted that Rebecca Schaeffer's murder was a consequence of “open access to government records.” [FN39] Thus, based on Congress' privacy concerns, the disclosed information must be appropriate or necessary for the purpose stated in the exception.

Determining the disclosure must align with the exception's purpose, the court doubted Senne's name and address were needed for the parking ticket. Nevertheless, whether Senne's information effectuated § 2721(b)(1) or (4) was a question reserved for remand. The court also deferred on damages, deeming any discussion of the issue “premature.” [FN40] Buried in a footnote, this was little solace for the dissent.

The en banc dissent

Judges Flaum, Easterbrook, Posner and Sykes dissented. Judge Flaum argued the DPPA's text and legislative history conveyed no intent “to limit the information that may be disclosed in connection with a particular exception.” [FN41] Judge Flaum criticized the majority's “for use” interpretation because it injected a threshold determination of “appropriateness” or ““necessity” not found in the statute. This exposed municipalities “to substantial liability for incorrectly predicting exactly what information will be used in the course of carrying out an exception.” [FN42]

Echoing Judge Flaum, Judge Posner found the DPPA did not limit permissible uses to what was appropriate or necessary. Nor was there evidence Congress intended to restrict police from displaying personal information on parking tickets. “The majority's free interpretation of the Act ... is unlikely to do any good” but rather “bound to do harm.” [FN43] Judge Posner scoffed at the danger a name and address on a ticket posed, describing it as “a problem that so far as anyone knows or can guess has never arisen and will never arise.” [FN44] The result of the decision was ruinous, but certainly foreseeable: “costly and time-consuming litigation and pointless wealth transfers from taxpayers to violators of the parking laws.” [FN45] Thus, the majority's refusal to consider the issue of damages was “short sighted.” [FN46] Palatine filed a petition for writ of certiorari, which is pending as of this writing.

Senne's statutory interpretation

At the heart of Senne is the clash between privacy and policing. And while the majority's privacy concerns are compelling, the dissent's statutory interpretation appears more convincing.

The object of statutory interpretation is to determine Congress' intent. [FN47]This intent is best exemplified by the statute's language. [FN48]Congress' desire to exempt municipalities under the DPPA is demonstrated three ways. First,§ 2721(b)(1) permits the disclosure of personal information by any government agency “in carrying out its functions.” Enforcing traffic laws is a common government function. Second, § 2721(b)(4) permits disclosure for an “administrative or arbitral proceeding.” Palatine processes parking tickets through administrative proceedings, and Senne's citation initiated that process. Third, “service of process” is a permissible use under § 2721(b)(4). When the Palatine police ticketed Senne's car, process was served per Illinois law and Palatine ordinance.
 
The DPPA's plain language exempting local government in carrying out its functions and conducting administrative proceedings demonstrates Congress' intent not to ensnare municipalities in the law's onerous penalty scheme. Yet under the majority's reading of the DPPA, the rule swallows the exceptions.
 
A statute must be read as a whole, not piecemeal. [FN49] Plaguing the majority's statutory interpretation is its elevation of the phrase “for use” in § 2721(b)(1) and (4). Essentially bridging language from the subsection's introductory paragraph, the court transformed these perfunctory words into the DPPA's most prominent. Black's Law Dictionary defines “for use” as “for the benefit or advantage of another.” [FN50] But this meaning was disregarded. The court instead read “for use” as disclosing information “only in a manner that does not exceed the scope of the authorized statutory exception.” [FN51] There is no indication Congress intended this. Indeed, Congress never qualified the phrase “for use” to limit disclosure to what information is appropriate or necessary.
 
To narrow the DPPA's exceptions, the clarity of § 2721(b)(1) and (4)necessitated the majority magnify legislative intent. In doing so, the court sacrificed the statute's plain text for floor speeches.
 
Furthermore, the court provided no clear standard for determining what “exceed[s] the scope of the authorized statutory exception.” District courts must thus discern what information is needed to further an exception's purpose. Yet they are rudderless. The DPPA says nothing about what information is appropriate or necessary.
 
The majority's interpretation also raises federalism concerns. Unless Congress conveys its purpose clearly, “it will not be deemed to have significantly changed the federal-state balance.” [FN52] More so here where Congress did not want the DPPA's exceptions to impede local government. Limiting the use of driver's information by police was not Congress' aim -- Sen. Harkin stated the DPPA “will not in any way undermine law enforcement or community policing efforts.” [FN53]Yet Senne's interpretation of the law does just that. Local authorities use driver's personal information for many permissible purposes. However, due to Senne's reading of § 2721 (b)(1) and (4), the DPPA will pervade the daily functions of every municipality in the Seventh Circuit.
 
Senne's privacy concerns

Protecting privacy is a laudable goal, and the DPPA's drafters were wise to pursue it. But even they knew that one's identifying information is not sacrosanct. The law's 14 exceptions confirm that personal information will enter the public sphere. Moreover, there is no privacy interest in personal information contained in public records. Senne appears to have overlooked these points.

The DPPA has curbed the flow of personal information from DMVs to people who lack a legitimate basis for such information. But with advances in technology, this success is fleeting. Passed in 1994, the DPPA did not envision how the Internet would shatter traditional notions of privacy. Whether volunteered through Facebook, Twitter or LinkedIn, or dredged up through countless “people finder” sites, the Internet is awash in personal information. And for those willing to pay a fee, many websites will divulge individuals' financial, employment and family information. Some sites even claim that users can access vehicle owners' information via a license plate number.
 
In light of the more efficient and effective means of obtaining personal information, Palatine's inclusion of drivers' names and addresses on parking tickets is insignificant. No epidemic of individuals using parking tickets to commit identity theft or violent crimes exists. Nor, as Senne's counsel conceded, are there even isolated incidents. [FN54] In sum, the evil the DPPA sought to prevent was stalkers using the DMV to locate their intended victims, not police including a name on a parking ticket.

Senne's implications

Indiana municipalities are now exposed to the prospect of $2,500 in damages per ticket for conduct the DPPA does not apprise them is prohibited. The Senne majority downplayed concerns about the $80 million in damages as “premature.” But with each ticket issued over four years incurring statutory liquidated damages of not less than $2,500, attorneys' fees and punitive damages, the issue looms large. To that end, the Association of Governmental Risk Pools filed an amicus brief in support of Palatine's petition for certiorari. [FN55] The amicus warned Senne will cost local governments “tens of millions of dollars, and potentially billions nationally.” [FN56] The effect: “Local governments, particularly in the present economy, will be crippled.” [FN57] Given the DPPA's statutory framework of liquidated damages and a four-year statute of limitations, it is hard to describe the amicus' concerns as overblown.

Senne did reserve the possibility that it might be permissible to include the vehicle owner's name on a ticket. But this is unfeasible since the recipient will know who the owner is. Furthermore, this argument would likely fail due to Saukstelis v. City of Chicago. [FN58] InSaukstelis, plaintiffs argued that parking tickets with license plate numbers but not names failed to confer proper notice. The Seventh Circuit disagreed, holding that a license plate number was enough to identify a vehicle owner. [FN59] Since a license plate number suffices to identify an individual, a name or address is unnecessary as a matter of law. As such, Palatine's efforts on remand will be futile, possibly rendering the parking ticket issued to Jason Senne the most costly in history.

Legal Articles Additional Disclaimer

Lawyer.com is not a law firm and does not offer legal advice. Content posted on Lawyer.com is the sole responsibility of the person from whom such content originated and is not reviewed or commented on by Lawyer.com. The application of law to any set of facts is a highly specialized skill, practiced by lawyers and often dependent on jurisdiction. Content on the site of a legal nature may or may not be accurate for a particular state or jurisdiction and may largely depend on specific circumstances surrounding individual cases, which may or may not be consistent with your circumstances or may no longer be up-to-date to the extent that laws have changed since posting. Legal articles therefore are for review as general research and for use in helping to gauge a lawyer's expertise on a matter. If you are seeking specific legal advice, Lawyer.com recommends that you contact a lawyer to review your specific issues. See Lawyer.com's full Terms of Use for more information.