Keeping driver's license copies would have required a government purpose

People and businesses would have faced limits on copying, keeping, or scanning driver's license copies. The rule would have covered copies of driver's licenses. Government purposes were allowed. People could still show a license to verify identity for a government requirement. Company policies to use government documents and keep personal information would have been forbidden. The proposal named January 1, 2026 as the start date for this rule.

People and organizations would have faced criminal penalties for releasing or using information kept by a private organization. The penalties would have covered information kept by a private organization outside government. A person would have faced a misdemeanor, a less serious crime. A business or other organization would have faced a felony, a more serious crime. The proposal named January 1, 2026 as the start date for these penalties.

Using kept, scanned, or copied personal ID could have brought a fine and identity theft protection; a qualifying data breach would have brought a separate fine. The first penalty would have covered use of kept, scanned, or copied personal ID. The breach fine would have applied when a breach exposed illegally kept personal ID information. The first fine could have been at least $100,000, paid to the person whose information was obtained, along with lifetime identity theft protection. The breach fine would have been $100,000 per affected person. The proposal named January 1, 2026 as the start date for these provisions.