Statedepartments of motor vehicles (DMVs) require drivers and automobile owners to provide personal information, which may include a person's name, address, telephone number, vehicle description,Social Security number, medical information, and photograph, as a condition of obtaining a driver's license or registering an automobile. Finding that many States sell this information to individuals and businesses (particularlydirect marketing andauto insurance companies) for significant revenues, and to preventstalkers from tracking their victims across state lines,[2] Congress enacted the Driver's Privacy Protection Act of 1994,18 U.S.C.§§ 2721–2725, which established a regulatory scheme to restrict the States' ability to disclose a driver's personal information without the driver's consent.
Chief Justice Rehnquist delivered the opinion of a unanimous Court. He began by explaining the terms of the DPPA and how it conflicted with South Carolina's statutes governing drivers' license information. He held that 1) the DPPA was an acceptable exercise of Congress' powers under theCommerce Clause, because drivers' information was an "article of interstate commerce" within the terms of the Act, and 2) the DPPA did not "commandeer" state authority in the manner which the statutes involved inNew York v. United States andPrintz v. United States did. Instead, Rehnquist analogized the DPPA to the statute at issue inSouth Carolina v. Baker, 485 U.S. 505 (1988), which prohibited States from issuing unregisteredbonds:
Like the statute at issue inBaker, the DPPA does not require the States in their sovereign capacity to regulate their own citizens. The DPPA regulates the States as the owners of databases. It does not require the South Carolina Legislature to enact any laws or regulations, and it does not require state officials to assist in the enforcement of federal statutes regulating private individuals. We accordingly conclude that the DPPA is consistent with the constitutional principles enunciated inNew York andPrintz.[5]
Finally, Rehnquist addressed South Carolina's argument that Congress could only regulate the individual states by means of laws of "general applicability", rather than directly targeting state governments for regulation. Instead of determining whether such "general applicability" is indeed a Constitutional requirement, Rehnquist merely pointed out that the DPPA was "generally applicable", because in addition to regulating the actions of state governments, it also regulated private persons who resold or redistributed drivers' information.