How a $20 Parking Ticket Became An $80 Million Liability
Summary: “Aggravating” is one way to describe a parking ticket. But when the ticket displays the car owner's name and address, it becomes dangerous, at least according to the Seventh Circuit.
How a $20 Parking Ticket Became An $80 Million Liability
By Christopher Keleher
“Aggravating” is one way to describe a parking ticket. But when the ticket displays the car owner's name and address, it becomes dangerous, at least according to the Seventh Circuit. The court's en banc decision of Senne v. Village of Palatine held that the Illinois Village of Palatine violated the Driver's Privacy Protection Act (“DPPA”), 18 U.S.C. §2721, by including Jason Senne's name and address on a $20 parking ticket issued to him. [FN1]
For those Illinois, Indiana and Wisconsin municipalities that include identifying information on parking tickets, the ruling is problematic. The DPPA includes statutory liquidated damages of $2,500 per violation and a four-year statute of limitations. [FN2] From there, the math is easy. Exposure for some municipalities will be in the millions and, in a perverse twist, hit the most aggressive ticketers hardest.
Protecting privacy was Congress' motivation in enacting the DPPA, and legislative intent was Senne's fulcrum. An exasperated dissent argued that in emphasizing privacy, the majority ignored provisions of the DPPA exempting law enforcement. Before considering who had the better of the argument, the DPPA is examined.
The essentials of the DPPA
State DMVs are a marketer's goldmine. Congress discovered that many states had lucrative arrangements selling driver's license information to businesses. [FN3]But a more nefarious information breach occurred when Robert Bardo obtained the address of actress Rebecca Schaeffer from a California DMV. [FN4] Bardo, an obsessed fan who had been stalking Schaeffer for three years, went to her home and killed her. [FN5] This tragedy compelled Congress to pass the DPPA in 1994.
The DPPA prohibits states from disclosing a driver's personal information without the driver's express consent. A private cause of action lies against persons and entities that disclose “personal information ... from a motor vehicle record.”[FN6] “Personal information” includes a Social Security number, driver identification number, name or address. [FN7] Each violation of the DPPA incurs statutory liquidated damages of not less than $2,500, attorneys' fees and punitive damages.[FN8] But the DPPA has numerous exceptions, and curiously, the law would not have prevented Rebecca Schaeffer's death. Robert Bardo hired a private investigator to get Schaeffer's information from the DMV, and private investigators are exempt under the DPPA. [FN9]
An authorized recipient of personal information “may resell or redisclose [personal information] only for a use permitted under [section 2721(b)].” [FN10]That section provides 14 exceptions or “permissible uses.” Most of the exceptions, as the Eleventh Circuit observed, “are tied to a particular occupation or organization and its corresponding lawful need for the information.” [FN11] Those relevant to Senne include:
(1) For use by any government agency, including any court *11 or law enforcement agency, in carrying out its functions ....
(4) For use in connection with any civil, criminal, administrative, or arbitral proceeding in any Federal, State, or local court ... including the service of process, investigation in anticipation of litigation, and the execution or enforcement of judgments .... [FN12]
Additional exceptions relate to research activities, insurance claim investigations, commercial driver's licenses and toll facilities. [FN13]
Case law interpreting the DPPA is relatively limited. The Supreme Court upheld the law as a constitutional exercise of Congress' commerce power because the DPPA regulates the sale of drivers' information in interstate commerce. [FN14]Additionally, the Eleventh Circuit rejected qualified immunity for state officials sued for selling driver's license information to marketers, finding the statutory rights created by the DPPA enforceable both directly and under 42 U.S.C. §1983.[FN15] Finally, the Seventh Circuit determined a publishing company did not violate the DPPA by purchasing and reselling information from DMV records because an authorized recipient of personal information can do so. [FN16]
Thus, while courts have explored the contours of the DPPA, no case interpreted the statute's law enforcement exceptions until Senne.
Senne's parking violation
Jason Senne was issued a citation for violating Palatine's ordinance prohibiting overnight street parking. [FN17] The ticket was printed electronically on an authorized form and placed on Senne's windshield. Senne discovered the ticket five hours later. [FN18] As Senne's vehicle was parked on a public street, the ticket was there as well.
The ticket, which doubled as a return envelope to pay the fine, had the caption: IN THE NAME AND BY THE AUTHORITY OF THE VILLAGE OF PALATINE, ILLINOIS, A MUNICIPAL CORPORATION, PLAINTIFF VS JASON SENNE. [FN19]
Senne's home address, driver's license number, date of birth, sex, height and weight were then listed. The citation also outlined Senne's legal options. He could mail a check or money order for $20, pay in person at the Palatine Police Department, or request a hearing. Finally, the ticket specified that process was served:
I certify that I served a copy of the citation by affixing it to the Respondent's vehicle, and further state under the penalty of perjury as provided in Ill. Rev. Stat., Ch. 110, Sec. 1-109 that the above facts are true and correct .... [FN20]
Senne's ticket constituted service of process not only under Illinois law, [FN21]but also via a Palatine ordinance that permits administrative complaints to be served by affixing them to the property where the violation occurs. [FN22]
Senne's class action
Senne alleged the Village of Palatine violated his privacy rights under the DPPA by including personal information on his parking ticket. While Senne averred the ticket was in plain view of the public, the only person alleged to see the ticket was Senne himself. [FN23] The putative class action sought $80 million in statutory liquidated damages - $2,500 for each of the 32,000 potential class members receiving parking tickets in Palatine over the last four years. [FN24]
Before Senne certified the class, Palatine moved to dismiss under Federal Rule of Civil Procedure 12(b)(6). Palatine first argued there was no disclosure of Senne's information because Senne failed to allege that anyone other than himself saw the ticket. But even if there was a disclosure, it was permitted because Palatine was enforcing traffic and parking ordinances. [FN25] Further, the ticket was an administrative complaint against Senne, and leaving it on his windshield was an authorized service of process. [FN26]
The district court granted Palatine's Motion to Dismiss, and the Seventh Circuit affirmed in a 2-1 decision. [FN27] The majority, Judges Easterbrook and Flaum, determined Palatine disclosed Senne's personal information but did not violate the DPPA because the citation initiated an administrative complaint against Senne and effectuated service of process. [FN28] The court rejected Senne's argument that Palatine facilitated crime by publicizing a vehicle owner's personal information. Nor was the court concerned that the personal information did not aid service of process. Even if including identifying information on the ticket is “unnecessary, foolish, and a poor security practice,” the DPPA “does not impose best practices on municipalities.” [FN29]
Judge Ripple dissented, claiming Palatine violated the DPPA because it disclosed information unnecessary for service of process. [FN30] He contended the DPPA's exceptions must be interpreted with congressional intent (protecting privacy) in mind, and therefore the permissible uses must be read narrowly. [FN31]That view would ultimately prevail.
The en banc decision
Rehearing the case en banc, the Seventh Circuit reversed the district court and revived the suit. With Judge Ripple writing for the majority, the court first determined that including Senne's personal information on the citation and placing it on his car was a disclosure. Under the DPPA, state DMVs may not “disclose or otherwise make available to any person or entity” personal information. [FN32] The court determined that attaching the phrase “‘or otherwise make available’ to the term ‘disclose’ leaves little doubt about the breadth of the transactions Congress intended to regulate.” [FN33] That no one else was alleged to have seen Senne's ticket was of no import. Placing the ticket on the windshield was “sufficient to come within the activity regulated by the statute regardless of whether another person viewed the information ....” [FN34]
The court next considered whether Palatine's disclosure was permitted under§ 2721(b)(1) or (4). Conceding the ticket was service of process and a function of Palatine's police department, the court nevertheless refused to apply either exception because of Congress' “overarching purpose of privacy protection” in drafting the DPPA. [FN35]
The court reached its determination as follows. Sections 2721(b)(1) and (4)both begin with the words “for use.” Honoring the statutory construction principle that meaning must be given to every word, the court determined “for use” performed “a critical function” in the statute. [FN36] “For use” contained “the necessary limiting principle” to the exceptions in § 2721(b)(1) and (4). [FN37] In authorizing a disclosure “for use,” Congress intended that the information disclosed be used only for the purpose identified in the exception. [FN38] When disclosed information does not effectuate the exception's purpose, neither § 2721(b)(1) nor (4) will apply. In support of this reading, the court emphasized the DPPA's legislative history. The court also noted that Rebecca Schaeffer's murder was a consequence of “open access to government records.” [FN39] Thus, based on Congress' privacy concerns, the disclosed information must be appropriate or necessary for the purpose stated in the exception.
Determining the disclosure must align with the exception's purpose, the court doubted Senne's name and address were needed for the parking ticket. Nevertheless, whether Senne's information effectuated § 2721(b)(1) or (4) was a question reserved for remand. The court also deferred on damages, deeming any discussion of the issue “premature.” [FN40] Buried in a footnote, this was little solace for the dissent.
The en banc dissent
Judges Flaum, Easterbrook, Posner and Sykes dissented. Judge Flaum argued the DPPA's text and legislative history conveyed no intent “to limit the information that may be disclosed in connection with a particular exception.” [FN41] Judge Flaum criticized the majority's “for use” interpretation because it injected a threshold determination of “appropriateness” or ““necessity” not found in the statute. This exposed municipalities “to substantial liability for incorrectly predicting exactly what information will be used in the course of carrying out an exception.” [FN42]
Echoing Judge Flaum, Judge Posner found the DPPA did not limit permissible uses to what was appropriate or necessary. Nor was there evidence Congress intended to restrict police from displaying personal information on parking tickets. “The majority's free interpretation of the Act ... is unlikely to do any good” but rather “bound to do harm.” [FN43] Judge Posner scoffed at the danger a name and address on a ticket posed, describing it as “a problem that so far as anyone knows or can guess has never arisen and will never arise.” [FN44] The result of the decision was ruinous, but certainly foreseeable: “costly and time-consuming litigation and pointless wealth transfers from taxpayers to violators of the parking laws.” [FN45] Thus, the majority's refusal to consider the issue of damages was “short sighted.” [FN46] Palatine filed a petition for writ of certiorari, which is pending as of this writing.
Senne's statutory interpretation
At the heart of Senne is the clash between privacy and policing. And while the majority's privacy concerns are compelling, the dissent's statutory interpretation appears more convincing.
Protecting privacy is a laudable goal, and the DPPA's drafters were wise to pursue it. But even they knew that one's identifying information is not sacrosanct. The law's 14 exceptions confirm that personal information will enter the public sphere. Moreover, there is no privacy interest in personal information contained in public records. Senne appears to have overlooked these points.
Senne's implications
Indiana municipalities are now exposed to the prospect of $2,500 in damages per ticket for conduct the DPPA does not apprise them is prohibited. The Senne majority downplayed concerns about the $80 million in damages as “premature.” But with each ticket issued over four years incurring statutory liquidated damages of not less than $2,500, attorneys' fees and punitive damages, the issue looms large. To that end, the Association of Governmental Risk Pools filed an amicus brief in support of Palatine's petition for certiorari. [FN55] The amicus warned Senne will cost local governments “tens of millions of dollars, and potentially billions nationally.” [FN56] The effect: “Local governments, particularly in the present economy, will be crippled.” [FN57] Given the DPPA's statutory framework of liquidated damages and a four-year statute of limitations, it is hard to describe the amicus' concerns as overblown.