Lead Opinion
Affirmed by published opinion. Judge WILLIAMS wrote the majority opinion, in which Judge HAMILTON joined. Senior Judge PHILLIPS wrote a dissenting opinion.
OPINION
The Attorney General of the State of South Carolina (the State) challenged the constitutionality of the Driver’s Privacy Protection Act (DPPA), see 18 U.S.C.A. §§ 2721-2725 (West Supp.1998), in the United States District Court for the District of South Carolina on the grounds that it violated the Tenth and Eleventh Amendments to the United States Constitution.
On appeal, the United States first contends that the DPPA was lawfully enacted pursuant to Congress’s power under the Commerce Clause. Although Congress may regulate entities engaged in interstate commerce, Congress is constrained in the exercise of that power by the Tenth Amendment. As a result, when exercising its Commerce Clause power, Congress may оnly “subject state governments to generally applicable laws.” New York v. United States,
In the alternative, the United States contends that the DPPA was lawfully enacted pursuant to Congress’s power under Section 5 of the Fourteenth Amendment. When enacting legislation under Section 5 of the Fourteenth Amendment, however, Congress’s power “extends only to enforcing] the provisions of the Fourteenth Amendment.” City of Boerne v. Flores, — U.S. -,-,
Under our system of dual sovereignty, “[t]he powers not delegated to the United States by the Constitution, nor prohibited by it to the States, are reserved to the States respectively, or to the people.” U.S. Const, amend. X. Because Congress lacked the authority to enact the DPPA under either the Commerce Clause or Section 5 of the Fourteenth Amendment, we affirm the judgment of the district court.
I.
As recited by the district court, the pertinent facts are as follows:
Congress enacted the DPPA in 1994 in an effort to remedy what it perceived to be a problem of national concern: i.e., the active commerce in, and consequent easy availability of, personal information contained in State motor vehicle records. Testimony before Congress established that as many as 34 States allowed easy access to personal informаtion contained in motor vehicle records and that criminals had used such information to locate victims and commit crimes. Congress also found that many States sell or other wise permit the use of information contained in motor vehicle records for direct marketing purposes.
The DPPA, which [was] scheduled to become effective on September 13, 1997, generally prohibits “a State department of motor vehicles, and any officer, employee, or contractor, thereof, [from] knowingly disclosing] or otherwise mak[ing] available to any person or entity personal information about any individual obtained by the department in connection with a motor vehicle record.” 18 U.S.C. § 2721(a). The DPPA specifies a list of exceptions when personal information contained in a State motor vehicle record may be obtained and used. See 18 U.S.C. § 2721(b). Addition*457 ally, the DPPA permits State motor vehicle departments to:
[Establish and carry out procedures under which the department or its agents, upon receiving a request for personal information that does not fall within one of the exceptions in [§ 2721(b) ], may mail a сopy of the request to the individual about whom the information was requested, informing such individual of the request, together with a statement to the effect that the information will not be released unless the individual waives such individual’s right to privacy under [§ 2721],
18 U.S.C. § 2721(d). The DPPA also prohibits “any person [from] knowingly ... obtaining] or disclosing] personal information, from a motor vehicle record, for any use not permitted under section 2721(b),” 18 U.S.C. § 2722(a), and from “mak[ing] false representation to obtain any personal information from an individual’s motor vehicle record.” 18 U.S.C. § 2722(b).
The DPPA provides that “[a]ny State department of motor vehicles that has a policy or practice of substantial noncompliance ... shall be subject to a civil penalty imposed by the Attorney General of not more than $5,000 a day for each day of substantial noncompliance.” 18 U.S.C. § 2723(b). The DPPA also creates a criminal fíne, 18 U.S.C. § 2723(a), and a civil cause of action against a “person” who knowingly violates it. 18 U.S.C. § 2724(a).
South Carolina currently has its own statutory provisions regarding the disclosure and use of its motor vehicle records, and South Carolina’s scheme differs significantly from the DPPA. See S.C.Code Ann. §§ 56-3-510 to -540. Under South Carolina law a person who requests information contained in South Carolina’s motor vehicle records must submit the request on a form provided by the State Department of Public Safety (“the Department”) and must specify, inter alia, his or her name and the reason for the request, and must certify that the information will not be used for the purpose of telephone marketing or solicitation. S.C.Code Ann. § 56-3-510. The Department must retain all requests for motor vehicle record information for five years and must release a copy of all requests relating to a person upon that person’s written request. S.C.Code Ann. § 56-3-520. The Department is authorized to charge a fee for releasing motor vehicle record information, and is required to promulgate certain procedural regulations relating to the release of motor vehicle record information, S.C.Code Ann. § 56-3-530, and to implement procedures to ensure that persons may “opt-out” and prohibit the use of motor vehicle record informatiоn about them for various commercial activities. S.C.Code Ann. § 56-3-540.' The undisputed evidence submitted establishes that implementation of the DPPA would impose substantial costs and effort on the part of the Department in order for it to achieve compliance.
Condon v. Reno,
In addition to challenging the constitutionality of the DPPA, the State sought a permanent injunction prohibiting enforcement of the DPPA. The United States filed a motion to dismiss the suit based upon its contention that the DPPA was lawfully enacted pursuant to Congress’s powers under both the Commerce Clause and Section 5 of the Fourteenth Amendment.' In response, the State moved for summary judgment in its favor. After reviewing the parties’ motions, the district court concluded that the DPPA was unconstitutional. Accordingly, the district court denied the United States’ motion to dismiss, granted the State’s motion for summary judgment, and permanently enjoined the enforcement of the DPPA in the State of South Carolina. This appeal followed.
II.
In this case, we must determine whether the DPPA violates the Tenth Amendment. Likе all Acts of Congress, the DPPA is “presumed to be a constitutional exercise of legislative power until the contrary is clearly established.” Close v. Glenwood Cemetery,
The Constitution provides: “The powers not delegated to the United States by the Constitution, nor prohibited by it to the States, are reserved to the States respectively, or to the people.” U.S. Const, amend. X. When, however, Congress “is acting within the powers granted it under the Constitution, [it] may impose its will on the States.” Gregory v. Ashcroft,
A.
The United States first contends that the DPPA is constitutional because Congress enacted it pursuant to its power under the Commerce Clause. Congress, however, is constrained in the exercise of that power by the Tenth Amendment. Thus, the question before this Court is not whether the DPPA x-egulates commerce, but whether it is consistent with the system of dual sovereignty established by the Constitution.
1.
When Congress exercises its Commerce Clause power against the States, the resulting enactment is analyzed by the Supreme Court under one of two different lines of cases. See New York v. United States,
a.
The Supreme Court’s jurisprudence with respect to the first line of cases has not been a model of consistency. In Maryland Wirtz,
b.
In contrast, the Supreme Court’s jurisprudence with respect to the second line of cases has been a model of consistency. In New York v. United States,
In Printz v. United States, — U.S.-,
[t]he Federal Government may neither issue directives requiring the States to address particular problems, nor command the States’ officers, or those of their political subdivisions, to administer or enforce a federal regulatory program. It matters not whether policymaking is involved, and no ease-by-ease weighing of the burdens or benefits is necessary; such commands are fundamentally incompatible with our constitutional system of dual sovereignty.
Id.
2.
On appeal, the United States relies primarily upon Garcia v. San Antonio Metropolitan Transit Authority,
We recognize, as the United States argues, that the DPPA is different in several respects from the statutes struck down in New York and Printz. Unlike the federal statute in New York, the DPPA does not commandeer the state legislative process. In particular, the DPPA does not require the States to enact legislation regulating the disclosure of personal information contained in their motor vehicle records. Instead, Congress enacted the regulations limiting the dissemination of information from those records. Moreover, unlike the federal statute in Printz, the DPPA does not conscript state officers to enforce the regulations established by Congress. Indeed, the DPPA does not require that state officials report or arrest violators of the DPPA. Instead, the DPPA is enforced through civil penalties imposed by the United States Attorney General against the States and permits criminal fines and civil causes of action against individuals.
Nevertheless, state officials must, as the district court found, administer the DPPA. See Condon,
Even assuming that the United States’ narrow reading of Printz and New York is correct, analyzing the constitutionality of the DPPA under the Garcia line of cases will not salvage the statute. Under Garcia and its progeny, Congress may only “subject state governments to generally applicable laws.” New York,
In Garcia, the Supreme Court upheld application of the Fair Labor Standards Act (FLSA) to state and local governments because the FLSA was generally applicable. Thus, Congress was only allowed to regulate how much the States pay their hourly employees because Congress also regulates how much private parties pay their hourly employees. See Garcia,
Although recognizing that the DPPA does not regulate private parties, the Government neverthеless argues that the DPPA is constitutional under the Garcia line of cases. For instance, the United States contends that the DPPA is constitutional because it “subject[s] the States to the same type of regulation to which a private party could be subjected.” Appellant’s Br. at 20 (emphasis added). Not surprisingly, the United States failed to provide even a single authority to support this proposition. Under Garcia, a statute is constitutional only if it is generally applicable. A law is not generally applicable simply because it could he generally applicable. That Congress could subject private parties to the same type of regulation is irrelevant to the Tenth Amendment. Congress may invade the sovereignty of the States only when it actually enacts a law of general applicability. Nothing short of that will pass constitutional muster.
The United States also contends that the DPPA is constitutional under Garcia because Congress has already restricted private parties from disclosing personal information in several statutes. In particular, the United States cites the Video Privacy Protection Act, see 18 U.S.C.A. § 2710 (West Supp. 1998) (restricting disclosure of personal information contained in video rental records); the Cable Communications Policy Act, see 47 U.S.C.A. § 551 (West 1991 & Supp.1998) (restricting disclosure of personal information about cable subscribers); and the Fair Credit Reporting Act, see 15 U.S.C.A. § 1618b (West 1998 & Supp.1998) (restricting disclosure of credit reports). Although Congress has regulated the disclosure of personal information by some private parties, the Constitution permits Congress to regulate the conduct of individuals. In contrast, Congress may not, as a general matter, regulate the conduct of the States. See New York,
During oral argument, the United States suggested, for the fust time, that the DPPA is generally applicable when considered together with the aforementioned statutes regulating private parties. According to the United States, Congress may enact a statute regulating the States if it has already enacted a statute regulating the same conduct by private parties. Even if the general applicability of the DPPA could be determined in this manner, which we doubt, Congress has simply not enacted a statute regulating the same conduct by private parties. To be sure, Congress has regulated the disclosure of personal information gathered by video stores, cable providers, and credit bureaus. The regulation of these three entities, however, does not provide Congress with a basis for regulating the States. Indeed, we seriously doubt that the Supreme Court would have applied either the FLSA or the ADEA to the States had Congress applied those Acts only to video stores, cable providers, and credit bureaus. It bears repeating that Congress may regulate the conduct of the States only through laws of general applicability. At best, Congress has enacted several laws of limited applicability. Thus, even if the general applicability of a statute could be determined in the manner urged upon us by the United States, Congress has not yet enacted a statute regulating the disclosure of personal information by all private parties.
B.
The United States also contends that the DPPA was properly enacted pursuant to Congress’s power under Section 5 of the Fourteenth Amendment. In light of the Supreme Court’s landmark decision in City of Boeme v. Flores, — U.S. -,
The Fourteenth Amendment provides, in pertinent part, as follows:
Section 1. No State shall make or enforce any law which shall abridge the privileges or immunities of citizens of the United States; nor shall any State deprive any person of life, liberty, or property, without due process of law; nor deny to any per*464 sons within its jurisdiction the equal protection of the laws.
Section 5. The Congress shall have power to enforce, by appropriate legislation, the provisions of this article.
U.S. Const, amend. XIV, §§ 1, 5. Section 5 “is a positive grant of legislative power authorizing Congress to exercise its discretion in determining whether and what legislation is needed to secure the guarantees of the Fourteenth Amendment.” Katzenbach v. Morgan,
Whether Congress properly exercised its power under Section 5 when it enacted the DPPA turns, therefore, on whether the Act enforces some right guaranteed by the Fourteenth Amendment. The United States contends “that automobile owners and operators have a reasonable expectation [of privacy in] their names, addresses, and phone numbers,” Appellant’s Br. at 24, and that the DPPA enforces that constitutional right.
As an initial matter, we note that “there is no general constitutional right to privacy.” Whalen v. Roe,
Of particular importance here, neither the Supreme Court nor this Court has ever found a constitutional right to privacy with respect to the tyрe of information found in motor vehicle records.
Second, the same type of information is available from numerous other sources.
Third, as amici point out, there is a long history in the United States of treating motor vehicle records as public records. See Brief of Amici Curiae at 5-20.
Finally, such information is commonly provided to private parties. For instance, a State-issued driver’s license is often needed to cash a check, use a credit card, board an airplane, or purchase alcohol. We seriously doubt that an individual has a constitutional right to privacy in information routinely shared with strangers.
In sum, the information found in motor vehicle records is not the sort of information to which individuals have a reasonable expectation of privacy. As such, there is no constitutional right to privacy in the information contained in motor vehicle records. Accordingly, Congress did not have the authority under Section 5 of the Fourteenth Amendment to enact the DPPA.
III.
For the reasons stated, the judgment of the district court is affirmed.
AFFIRMED.
Notes
. In addition to the State’s claims, several media organizations (Intervenors), challenged the constitutionality of the DPPA on the grounds that it violated the First Amendment. Because the district court found that the DPPA violated the Tenth Amendment, it had no reason to address the constitutionality of the Act under either the Eleventh Amendment or the First Amendment. See Condon v. Reno,
. Without question, "the licensing of drivers constitutes an integral portion of those governmental services which the States and their political subdivisions have traditionally afforded their citizens.” United States v. Best,
. In his dissenting opinion, then Justice Rehnquist expressed his desire to eventually return to the rule outlined in National League of Cities. See Garcia,
. Of course, Congress may only subject the States to such legislation if it expresses with unmistakable clarity an intent to do so. See Pennsylvania Dep't of Corrections v. Yeskey, - U.S. -, -,
. The dissent argues that the statutes at issue in Garcia and Wyoming were upheld because they did not use the States as implements of regulation, and not because they were generally applicable. See post at 467-68. We disagree. In New York v. United States,
Finally, while conceding that the statutes at issue in Garcia and Wyoming were generally applicable, the dissent contends that the statute “at issue in Baker was not one of general applicability.” Post at 467 n.3. Again, we disagree. The tax statute in South Carolina v. Baker applied to any entity, whether it be a State or a private party, that issued bonds. See
. The dissent contends that the DPPA is constitutional because Congress could have "preempted the field of motor vehicle information disclosure.” Post at 466, 468-69. We disagree. Only “where Congress has the authority to regulate private activity under the Commerce Clause ... [may it] offer States the choice of regulating that activity according to federal standards or having state law pre-empted by federal regulation." New York v. United States,
Similarly, the dissent contends that the DPPA is constitutional because "in exercise of its Commerce Clause powers, Congress could have, had it desired, made receipt of federal highway funds contingent on accepting [the] DPPA’s provisions.” Post at 466. As an initial matter, we note that Congress may attach conditions on the receipt of fedеral funds pursuant to its power under the Spending Clause, not the Commerce Clause. See South Dakota v. Dole,
Finally, the dissent argues that the DPPA is no different than the "National Voter Registration Act,” which was upheld against a Tenth Amendment challenge in Association of Community Organizations for Reform Now (ACORN) v. Edgar,
. Although the Supreme Court’s ground breaking decision in City of Boerne v. Flores,-U.S.-,
. The United States cites three Fourth Circuit cases in which it claims a constitutional right to privacy was recognized. First, in Taylor v. Best,
. If there is a constitutional right to privacy in such information, then the United States is violating the Constitution on an ongoing basis. For example, the United States operates a public database that contains the names, addresses, and medical data of every individual licensed to operate an airplane by the United States. See http://www.avweb.com/database/airmen. A related database permits anyone to obtain the name and address of the owner of an airplane simply by providing the number displayed on the airplane’s tail. See http://www.avweb.com/data-base/aircraft.
. In addition to the briefing we received from the parties, we accepted an amici curiae brief from the States of Alabama, Idaho, and Oklahoma, and the Better Government Bureau, Inc. We thank the amici for their participation.
Dissenting Opinion
dissenting:
Adopted in 1994 as part of larger omnibus crime legislation, the Driver’s Privacy Protection Act (DPPA), 18 U.S.C. §§ 2721-25, is a unique federal enactment designed to address the privacy and safety concerns flowing from the unfettered disclosure of personal information contained in drivers’ license files maintained by state motor vehicle departments. Pigeonholing the Act into one of two narrow legal constructs that it apparently believes exclusively define the Tenth Amendment’s constraints on federal power, the majority concludes that the Act is unconstitutional because it impermissibly regulates States as States and because it is not a law of general applicability to both State and private actors. I dissent, believing that the unique structure and internal operation of the DPPA, considered in light of the harm generated by the States’ own actions at which it is aimed, distinguish this case from those upon which the majority relies and compels the conclusion that the Act is consistent with both substantive and structural limitations on the exercise of federal power.
State violations of the Act trigger civil penalties. Specifically, § 2723(b) subjects “[a]ny State department of motor vehicles that has a policy or practice of substantial noneompliance with this chapter” to “a civil penalty imposed by the Attorney General of not more than $5,000 a day for each day of substantial noneompliance.” Although the Act authorizes a private civil action for damages, States and their agencies may not be sued. See § 2724(a) (authorizing a civil action against any “person” who violates the Act); § 2725(2) (defining person to include “an individual, organization, or entity, but ... not ... a State or agency thereof’). The Act also prohibits individuals from receiving information for purposes not outlined in the Act or for otherwise receiving such information under false pretenses. See § 2723(a). Such acts are prohibited by federal — not state — law, and nо State is required to outlaw or punish individuals who improperly receive information or otherwise violate the Act.
Because the DPPA regulates the flow of personal information — information that is consistently in the stream of commerce and for which States receive substantial reimbursement — the only issue in this case is whether Congress may, consistent with the Tenth Amendment, impose its will on States respecting conduct uniquely engaged in by States and state actors.
The majority concedes, as it must, that the end object of the Act is the direct regulation of state conduct. It is not the indirect regulation of private conduct — here information use — by forcing the states directly to regulate that conduct, in the way that the states were held impermissibly compelled to regulate the waste-handling conduct of private parties in New York v. United States,
Unlike the New York legislation, the DPPA does not “commandeеr[ ] the legislative processes of the States by directly compelling them to enact and enforce a federal regulatory program.” New York,
That a State wishing to engage in certain activity must take administrative and sometimes legislative action to comply with federal standards regulating that activity is a commonplace that presents no constitutional defect.
Id. at 515,
The majority here seeks to avoid Baker’s force by characterizing it as a case involving a law of general applicability. In the majority’s view, only if the DPPA is also a law of general applicability in the way that the FLSA was considered to be in Garcia v. San Antonio Metro. Transit Authority,
It is true that the laws upheld in Garcia and Wyoming were laws of general applicability in the sense that they imposed duties equally on state and private actors.
I believe that the legislation at issue in Garcia and Wyoming (and possibly in Baker) was immune to Tenth Amendment challenge not so much — if at all — because they applied equally to state and private actors as because they directly regulated state activities rather than using the “States as implements of regulation” of third parties. New York,
The DPPA does not require that states prohibit private individuals from obtaining information in violation of its provisions. Section 2723(a) prohibits this directly by making violation of the DPPA a federal offense. In fact, the DPPA does not require that states act at all. Its provisions only apply once a State makes the voluntary choice to enter the interstate market created by the release of personal information in its files. As did the compelled adoption by the states of a registered bond system, the DPPA only “regulates state activities: it does not ... seek to control or influence the manner in which States regulate private parties.” Baker,
Nor do I believe that any other constitutionally-based federalism principle, perhaps underlying Printz and New York at a deeper level, requires its invalidation. This congressional enactment requires only that states choosing to regulate the release of particular information in their possession into the stream of interstate commerce do so in a way Congress deems appropriate. Elected federal officials have made a considered policy determination that unfettered release of this information is not in the public interest because of privacy concerns and because it would be injurious to the interstate market in information. Whether Congress is right or not in that determination is irrelevant. It is sufficient for our purposes that Congress deems injurious a specific state activity in which by definition private actors do not engage. To assume that Congress could only regulate the states’ conduct directly if it also еqually regulated comparable private conduct (even where none in fact exists) seems to me to bear no relationship to any concept of federalism implicit in the Tenth Amendment as interpreted by the Supreme Court.
In New York, the Court explained why the peculiar practices it confronted there offended core notions of state sovereignty while other, perhaps more coercive, action such as field preemption did not:
[Wjhere the Federal Government compels States to regulate, the accountability of both state and federal officials is diminished. If the citizens of New York, for example, do not consider that making provision for the disposal of radioactive waste is in their best interest, they may elect state officials who share their view. That view can always be preempted under the Supremacy Clause if it is contrary to the national view, but in such a case it is the Federal Government that makes the decision in full view of the public, and it will be federal officials that suffer the conse-*469 quenees if the decision turns out to be detrimental or unpopular.
New York,
Finally, the majority’s suggestion that Congress lacks authority to regulate “States as States” — a reference presumably to the now abandoned multifaceted inquiry adopted by the Court in National League of Cities v. Usery,
By regulating directly the actions of states that choose to enter the personal information market, Congress is doing no more than exercising this power of preemption. The DPPA does nothing different from, for example, that done by federal regulation of municipal sewage and state-owned solid waste disposal systems. See Robert W. Adler, Unfunded Mandates and Fiscal Federalism: A Critique, 50 Vand. L.Rev. 1137, 1156-57 & 1202-03 (1997) (distinguishing direct federal regulation of States from federally imposed requirements that States regulate third parties). Nor is the DPPA’s regulation different in critical respects from federal regulation of any number of other state activities in areas subject, if Congress chose, to full preemption. One need look no further for an example than to Congress’s adoption of the National Voter Registration Act (NVRA) and the subsequent rejection of Tenth Amendment challenges to its provisions. See ACORN v. Edgar,
I would reverse the judgment holding the DPPA unconstitutional as a violation of the Tenth Amendment.
. Because I believe the DPPA satisfies structural limitations on Congress's exercise of its Commerce Clause power, I do not address the separate question whether other sources of federal power, including Section 5 of thе Fourteenth Amendment, are subject to the same structural limitations and if not whether the Government
. The district court did not address whether Congress acted within its Commerce Clause power in enacting the DPPA and, as indicated, I assume the point. South Carolina casually asserts on appeal that Congress lacked this power, apparently because there was not a sufficient impact on interstate commerce. The only court to consider this issue directly easily found sufficient evidence of a "nationwide trade of DMV records” to sustain Congress’s exercise of its Commerce Clause power. Pryor v. Reno,
. Actually, the tax provision at issue in Baker was not one of general applicability comparable to the "generality” of the FLSA or ADEA. The relevant Act was omnibus tax legislation dedicated to a broad range of tax issues, only one of which was the requirement that bonds issue in registered form. And the only specific provision at issue in Baker was one, § 310(b)(1), that removed tax exemptions only for publicly offered long-term bоnds. It therefore imposed a burden only on stale and local governments, that is to say only on those groups that issued "public” bonds.
In fact, many of the specific provisions applicable to states under the FLSA have unique application only to government actors. In West v. Anne Amndel County,
. In Hodel,
[WJhen Congress attempts to directly regulate the States as States the Tenth Amendment requires recognition that "there are attributes of sovereignty attaching to every state government which may not be impaired by Congress, not because Congress may lack an affirmative grant of legislative authority to reach the matter, but because the Constitution prohibits it from exercising the authority in that manner.”
Id. at 286-87,
