FMCSA demanded Social Security numbers and other private data on 17 million commercial drivers from state-run database

The Federal Motor Carrier Safety Administration demanded on July 23, 2026 that the American Association of Motor Vehicle Administrators turn over the entire Commercial Driver's License Information System — names, dates of birth, and Social Security numbers for roughly 17 million commercial drivers — threatening to cut federal funding for the state-owned database if AAMVA refused. The Department of Homeland Security issued its own subpoena for the same records on August 11, and on August 13 a coalition of states sued in the Eastern District of Virginia, arguing the demands violate federal privacy law and that FMCSA's stated licensing rationale masks an intent to share the data with DHS for immigration enforcement.

On July 23, 2026, the Federal Motor Carrier Safety Administration (FMCSA), an operating administration within the Department of Transportation, demanded that the American Association of Motor Vehicle Administrators (AAMVA) turn over the entire Commercial Driver's License Information System (CDLIS) — the names, dates of birth, Social Security numbers, and license records of roughly 17 million commercial drivers, dating back five years — despite never before having sought access to the database. States own and maintain CDLIS; AAMVA operates it under contract with DOT so that states can verify a CDL applicant's identity, medical fitness, and out-of-state driving history before issuing or renewing a license. When AAMVA raised concerns about its legal obligations to the states, FMCSA threatened to terminate more than $10 million of AAMVA's federal grants and contracts unless it complied, and AAMVA indicated it intended to turn the records over by August 17 absent a court order blocking the transfer.

Updates

2026-08-11 — DHS subpoenaed AAMVA for the same CDLIS records [2]

On August 11, 2026, AAMVA received a subpoena from the Department of Homeland Security also demanding access to the CDLIS database. States later argued in their lawsuit that FMCSA's and DHS's overlapping demands for the same records showed that FMCSA's stated license-verification rationale masked an intent to share the data with DHS for immigration enforcement.

2026-08-13 — Coalition of states sued to block the transfer [1, 2, 3]

On August 13, 2026, a coalition of more than 20 states, the District of Columbia, and Pennsylvania sued the Department of Transportation and the Department of Homeland Security in the U.S. District Court for the Eastern District of Virginia, seeking to block the transfer of CDLIS records and to preserve AAMVA's federal funding while the litigation proceeds. The lawsuits allege the demands violate the Privacy Act of 1974, the Driver's Privacy Protection Act, and the Administrative Procedure Act, along with state privacy laws and AAMVA's data-sharing contracts with the states.

2026-08-21 — Federal judge granted a temporary restraining order blocking the transfer, calling it unlawful [4, 5]

On August 21, 2026, a federal judge in the U.S. District Court for the Eastern District of Virginia granted a temporary restraining order blocking DOT and FMCSA from obtaining the CDLIS database and effectively pausing DHS's subpoena, calling the demand unlawful. The states said they would now seek a preliminary injunction to keep the data from being turned over for the duration of the case; preliminary-injunction arguments were scheduled for September 10, 2026.

State driver databases exist so states can verify licenses across state lines, not as a backdoor for the federal government to harvest Social Security numbers on 17 million people. FMCSA demanded the entire CDLIS database from AAMVA on July 23, 2026, threatening to cut $10 million in funding if the states did not comply, and DHS followed weeks later with a subpoena for the same records. The coinciding demands, the states argue, reveal an immigration-enforcement purpose behind FMCSA's stated licensing rationale. This archive records federal agencies leveraging funding threats to seize personal data Congress never authorized them to collect.

  1. NJ, other states sue over Trump demand for commercial drivers' private infoNew Jersey Monitor primary accessed August 14, 2026
  2. Attorney General James Sues Trump Administration to Block Illegal Seizure of Millions of Drivers' Personal DataOffice of the New York Attorney General primary accessed August 14, 2026
  3. States sue Trump administration over bid to access 17 million CDL recordsFreightWaves investigative accessed August 14, 2026
  4. Attorney General Jay Jones Blocks Trump Administration's Unlawful Demand of CDL Drivers' Personal InformationOffice of the Virginia Attorney General primary accessed September 4, 2026
  5. As California debated sharing data on drivers, Homeland Security subpoenaed 17 million recordsCalMatters investigative accessed September 4, 2026