Reno v. Condon
The Court upheld a federal law that restricts state motor vehicle departments from selling or releasing drivers' personal information without consent, ruling it does not force states to pass or enforce federal rules in violation of the Tenth Amendment.
Because the law regulates states only in their role as sellers of driver data — not as lawmakers or enforcers of federal policy against private citizens — the Court found it consistent with earlier rulings limiting Congress's power to commandeer state governments.
“The DPPA regulates the States as the owners of data bases. It does not require the South Carolina Legislature to enact any laws or regulations, and it does not require state officials to assist in the enforcement of federal statutes regulating private individuals.”
Explaining why the law does not improperly commandeer state government.
How it got here: A federal district court and the Fourth Circuit both ruled the law unconstitutional and blocked its enforcement against South Carolina; the federal government appealed to the Supreme Court.
The Case in Depth
What happened
South Carolina's Department of Motor Vehicles routinely sold drivers' personal information — names, addresses, phone numbers, and more — to any requester who filled out a simple form. Congress passed a federal law restricting such disclosures without driver consent. South Carolina and its Attorney General sued, arguing the federal law improperly intruded on the state's authority over its own records and employees.
The question before the Court
Could Congress limit how state motor vehicle departments share drivers' personal information without violating the states' constitutional independence?
The Court's answer
Yes — the Court ruled that Congress could restrict how state motor vehicle departments disclose drivers' personal information without violating the states' constitutional independence. The law is a valid exercise of Congress's power over interstate commerce because driver data bought and sold across state lines is itself an article of commerce.
The law also does not "commandeer" the states in the way earlier cases forbade, because it regulates states only in their capacity as sellers of a database, not as lawmakers required to pass legislation or as enforcers directed to police private citizens on the federal government's behalf. It applies generally to everyone in the market for this data, not just to states.
Curious how the Court got there? See the step-by-step legal reasoning →
Why it matters
State DMVs across the country must continue complying with federal limits on selling drivers' personal data, protecting millions of drivers' privacy. States lose a revenue source from selling this information, and the ruling confirms Congress can regulate state governments directly when they act like ordinary market participants rather than sovereigns.
What changes now
The federal law remains in force, and South Carolina's DMV must comply with its restrictions on disclosing drivers' personal information without consent. This is a final merits ruling resolving the constitutional challenge, so no further proceedings on this question are expected, though the case does not foreclose other, separate legal challenges to the law's specific provisions.
What this does not decide
The Court did not decide whether Congress can regulate the states by any means whatsoever; it held only that this particular law—regulating states as data sellers rather than requiring them to enact or enforce rules against citizens—survives Tenth Amendment scrutiny. It also left open a separate Fourteenth Amendment argument the government abandoned before this Court.
How the Court got there
The legal reasoning, step by step
- The Court first asked whether Congress had authority under the Commerce Clause, the constitutional power to regulate interstate trade, to regulate personal driver information. It concluded that because this information is bought and sold across state lines by insurers, marketers, and others, it counts as an article of interstate commerce Congress may regulate.
- The Court then turned to whether the law crossed a different constitutional line by commandeering state governments — that is, forcing states to enact or enforce federal rules against their citizens, which earlier cases had ruled unconstitutional.
- Applying its earlier decision in South Carolina v. Baker, the Court distinguished between laws that regulate a state's own activities (permissible) and laws that force a state to regulate or control private parties on the federal government's behalf (impermissible).
- The Court found the federal law regulates states only as owners and sellers of driver data, not as lawmakers or enforcers directing private citizens, so it does not commandeer the state legislative or administrative process.
- The Court also rejected the argument that the law was invalid for singling out states, concluding the law applies generally to everyone who supplies or resells this data, including private resellers, not just state governments.
Doctrinal impact
Cases affected by this decision
Reaffirms South Carolina v. Baker (485 U. S. 505)
Relied on as controlling to distinguish permissible regulation of state activities from forbidden commandeering.
Distinguishes New York v. United States (505 U. S. 144)
Held this law, unlike the one there, does not force states to enact particular legislation.
Distinguishes Printz v. United States (521 U. S. 898)
Held this law, unlike the one there, does not conscript state officers to enforce federal rules.