(A) Except as provided in division (B) of this section, on and after September 13, 1997, the registrar of motor vehicles, and any employee or contractor of the bureau of motor vehicles, shall not knowingly disclose or otherwise make available to any person or entity any personal information about an individual that the bureau obtained in connection with a motor vehicle record.

(B)

(1) On and after September 13, 1997, the registrar, or an employee or contractor of the bureau of motor vehicles, shall disclose personal information, other than sensitive personal information, about an individual that the bureau obtained in connection with a motor vehicle record, for use in connection with any of the following matters to carry out the purposes of any specified federal automobile-related act:

(a) Motor vehicle or driver safety and theft;

(b) Motor vehicle emissions;

(c) Motor vehicle product alterations, recalls, or advisories;

(d) Performance monitoring of motor vehicles and dealers by motor vehicle manufacturers;

(e) Removal of non-owner records from the original owner records of motor vehicle manufacturers.

(2) In addition to the disclosure required under division (B)(1) of this section, on and after September 13, 1997, the registrar, or an employee or contractor of the bureau of motor vehicles, may disclose personal information, other than sensitive personal information, about an individual that the bureau obtained in connection with a motor vehicle record, as follows:

(a) For the use of a government agency, including, but not limited to, a court or law enforcement agency, in carrying out its functions, or for the use of a private person or entity acting on behalf of an agency of this state, another state, the United States, or a political subdivision of this state or another state in carrying out its functions;

(b) For use in connection with matters regarding motor vehicle or driver safety and theft; motor vehicle emissions; motor vehicle product alterations, recalls, or advisories; performance monitoring of motor vehicles, motor vehicle parts, and dealers; motor vehicle market research activities, including, but not limited to, survey research; and removal of non-owner records from the original owner records of motor vehicle manufacturers;

(c) For use in the normal course of business by a legitimate business or an agent, employee, or contractor of a legitimate business, but only for one of the following purposes:

(i) To verify the accuracy of personal information submitted to the business, agent, employee, or contractor by an individual;

(ii) If personal information submitted to the business, agent, employee, or contractor by an individual is incorrect or no longer is correct, to obtain the correct information, but only for the purpose of preventing fraud, by pursuing legal remedies against, or recovering on a debt or security interest against, the individual.

(d) For use in connection with a civil, criminal, administrative, or arbitral proceeding in a court or agency of this state, another state, the United States, or a political subdivision of this state or another state or before a self-regulatory body, including, but not limited to, use in connection with the service of process, investigation in anticipation of litigation, or the execution or enforcement of a judgment or order;

(e) Pursuant to an order of a court of this state, another state, the United States, or a political subdivision of this state or another state;

(f) For use in research activities or in producing statistical reports, provided the personal information is not published, redisclosed, or used to contact an individual;

(g) For use by an insurer, insurance support organization, or self-insured entity, or by an agent, employee, or contractor of that type of entity, in connection with any claims investigation activity, anti-fraud activity, rating, or underwriting;

(h) For use in providing notice to the owner of a towed, impounded, immobilized, or forfeited vehicle;

(i) For use by any licensed private investigative agency or licensed security service for any purpose permitted under division (B)(2) of this section;

(j) For use by an employer or by the agent or insurer of an employer to obtain or verify information relating to the holder of a commercial driver's license or permit that is required under the "Commercial Motor Vehicle Safety Act of 1986," 100 Stat. 3207-170, 49 U.S.C. 2701, et seq., as now or hereafter amended;

(k) For use in connection with the operation of a private toll transportation facility;

(l) For any use not otherwise identified in division (B)(2) of this section that is in response to a request for individual motor vehicle records, if the individual whose personal information is requested completes and submits to the registrar or deputy registrar a form prescribed by the registrar by rule giving express consent to such disclosures.

(m) For bulk distribution for surveys, marketing, or solicitations, if the individual whose personal information is requested complete and submits to the registrar or a deputy registrar a form prescribed by the registrar by rule giving express consent to such disclosures.

(n) For use by a person, state, or state agency that requests the information, if the person, state, or state agency demonstrates that it has obtained the written consent of the individual to whom the information pertains;

(o) For any other use specifically authorized by law that is related to the operation of a motor vehicle or to public safety.

(3)

(a) Except as provided in division (B)(3)(b) of this section, the registrar, or an employee or contractor of the bureau of motor vehicles, may disclose sensitive personal information about an individual that the bureau obtained in connection with a motor vehicle record, only if either of the following conditions are satisfied:

(i) The individual whose personal information is requested completes and submits to the registrar or deputy registrar a form prescribed by the registrar by rule giving express consent to such disclosure;

(ii) The disclosure is for one or more of the purposes described in division (B)(2)(a), (d), (g), or (j) of this section.

(b) Division (B)(3)(a) of this section does not apply to the disclosure of sensitive personal information that is subject to section 4501.15 or 4507.53 of the Revised Code.

(C) On and after September 13, 1997, an authorized recipient of personal information about an individual that the bureau of motor vehicles obtained in connection with a motor vehicle record, other than a recipient under division (B)(2)(l) or (m) of this section, may resell or redisclose the personal information only for a use permitted under division (B)(1), (B)(2)(a) to (k), (B)(2)(n), or (B)(2)(o) of this section. On and after September 13, 1997, an authorized recipient of personal information about an individual under division (B)(2)(l) of this section may resell or redisclose the information for any purpose. On and after September 13, 1997, an authorized recipient of personal information under division (B)(2)(m) of this section may resell or redisclose the information as specified pursuant to that division. On and after September 13, 1997, an authorized recipient of personal information about an individual under division (B) of this section, other than a recipient under division (B)(2)(l) of this section, that resells or rediscloses any personal information covered by this section must keep for a period of five years a record that identifies each person or entity that receives any of the personal information and the permitted purpose for which the information is to be used, and must make all such records available to the registrar of motor vehicles upon the registrar's request.

(D) The registrar may establish and carry out procedures under which the registrar or the registrar's agents, upon receipt of a request for personal information on or after September 13, 1997, that does not satisfy any of the criteria for disclosure of the information that are set forth in division (B)(1) or (2) of this section, may notify the individual about whom the information was requested, by regular mail, that the request was made. Any procedures so adopted shall provide that, if the registrar or an agent of the registrar mails the notice to the individual, the registrar or agent shall include with the notice a copy of the request and conspicuously shall include in the notice a statement that the information will not be released unless the individual waives the individual's right to privacy regarding the information that is granted under this section.

(E) The registrar of motor vehicles may adopt any forms and rules, consistent with but no more restrictive than the requirements of Public Law No. 130-322,Title XXX, 18 U.S.C. 2721 - 2725, that are necessary to carry out the registrar's duties under this section on and after September 13, 1997.

(F) As used in this section:

(1) "Motor vehicle record" means a record that pertains to a motor vehicle driver's or commercial driver's license or permit, a motor vehicle certificate of title, a motor vehicle registration or motor vehicle identification license plates, or an identification card issued by the bureau of motor vehicles.

(2) "Person" has the same meaning as in section 1.59 of the Revised Code and does not include this state, another state, or an agency of this state or another state.

(3) "Personal information" means information that identifies an individual, including, but not limited to, an individual's photograph or digital image, social security number, driver or driver's license identification number, name, telephone number, or medical or disability information, or an individual's address other than the five-digit zip code number. "Personal information" does not include information pertaining to a vehicular accident, driving or traffic violation, or driver's status.

(4) "Specified federal automobile-related act" means the "automobile information disclosure act," 72 Stat. 325, 15 U.S.C. 1231 - 1233, the "Motor Vehicle Information and Cost Saving Act," 86 Stat. 947, 15 U.S.C. 1901, et seq., the "National Traffic and Motor Vehicle Safety Act of 1966," 80 Stat. 718, 15 U.S.C. 1381, et seq., the "Anti-car Theft Act of 1992," 106 Stat. 3384, 15 U.S.C. 2021, et seq., and the "Clean Air Act," 69 Stat. 322, 42 U.S.C. 7401, et seq., all as now or hereafter amended.

(5) "Sensitive personal information" means an individual's photograph or digital image, social security number, or medical or disability information.

Effective Date: 06-01-2000.