Gubernatorial candidate and former AG Curtis Hill proposes a ban on the sale of private information by state agencies, including the BMV. Photo by Leslie Bonilla Muñiz of the Indiana Capital Chronicle.

By Whitney Downard
Indiana Capital Chronicle

INDIANA — Gubernatorial candidate and former Attorney General Curtis Hill said that, if elected, he would sign an executive order prohibiting the sale of personal data by government agencies — including the Bureau of Motor Vehicles, which made $26 million on such sales in 2023.

“Hoosier privacy matters,” Hill said in a release. “The sale of private, personal data by the government is an egregious breach of Hoosier trust. We are only now learning exactly how much money the government has profited from our data over the years. I see this as no different than a data breach from a private company putting millions of Hoosiers at risk. Once this private information is sold and out of the government’s hands, there is no accountability for what happens to your data or where it goes.”

BMV Report

A December report to the State Budget Committee estimated the state agency would make $26 million in data sales — the first report of its kind following a WRTV investigation on the BMV’s sales earlier this year, which can include name, date of birth, addresses, odometer readings and license plate numbers.

Hill cited the figure in a release, saying that he “took action against a number of private companies for disclosing private information” during his term as Attorney General. In particular, he highlighted a $19.5 million settlement with Equifax following a 2017 data breach that impacted roughly 3.9 million Hoosiers.

According to the BMV, the Data Sales Program revenues go to two agency accounts: the Bureau of Motor Vehicles Commission and the State Motor Technology Fund, the latter of which supports agency branches, team members, technology maintenance and updates.

The dedicated funds make up 10% and 11% of each account’s revenues, respectively. The BMVC’s primary source of revenue are driver and vehicle service fees while the technology fund receives $0.50 for each BMVC transaction.

The Indiana Office of Technology, which operates IN.gov on behalf of the state, could receive up to $10 million of the $26 million, or 39%, according to the December report.

“This executive order will eliminate the state government’s ability to profit off you and your personal information. At a time when the threat to our national security is at an all-time high and (artificial intelligence) is being used maliciously to manipulate the truth, Hoosiers deserve to know that their state government is not actively putting you and your families in danger for profit. Your privacy and peace of mind will not be sold,” Hill concluded.