Federal judge blocks DHS demand for 17 million CDL driver records after 21 states sue

A coalition of 21 states and the District of Columbia has won an early round in a fight over who controls the country's commercial driver's license data. On August 21, 2026, Senior U.S. District Judge Anthony J. Trenga of the Eastern District of Virginia issued a temporary restraining order blocking the U.S. Department of Transportation and the Federal Motor Carrier Safety Administration from obtaining roughly 17 million driver records held in the Commercial Driver's License Information System (CDLIS), and barring the American Association of Motor Vehicle Administrators — the nonprofit that operates CDLIS under a DOT contract — from transferring the data while the case proceeds.

The order follows a companion legal fight: a Department of Homeland Security administrative subpoena, issued to AAMVA, demanding the same CDLIS records. The states — led in filings by a coalition that includes Illinois, California, New York, New Jersey, Washington, Massachusetts, Michigan and others — moved to quash that subpoena in the same Alexandria courthouse. Their brief, State of Illinois et al. v. United States Department of Homeland Security, No. 1:26-mc-19 (E.D. Va., filed Aug. 13, 2026), lays out the states' core objections to both the DHS subpoena and the underlying FMCSA demand: that it is effectively a "John Doe" subpoena seeking personal data on millions of unidentified people without statutory authorization; that DHS's stated purposes exceed its jurisdiction; that the subpoena was reissued in what the states characterize as retaliation after AAMVA initially reconsidered compliance; that it violates DHS's own procedural regulations; and that it breaches both the Driver's Privacy Protection Act and the federal Privacy Act by creating an unlawful system of records.

DHS and FMCSA have said the request serves law-enforcement and regulatory purposes — investigating what the government has called "illegal practices" at CDL schools and pursuing "criminal fraud regarding the issuance of CDLs to illegal aliens," alongside civil immigration enforcement. FMCSA has separately argued it has statutory access rights to CDLIS data through its nearly 40-year-old contractual relationship with AAMVA, which has operated the database since 1988 under a framework Congress created in 1986. According to reporting on the dispute, FMCSA warned it would pull funding and terminate its AAMVA contract — which would functionally halt nationwide CDL issuance — if the records were not turned over by an August 17 deadline.

What the court found

Judge Trenga's TRO found the states likely to succeed on the merits of their Administrative Procedure Act claims, and concluded the federal demand likely violates the Commercial Motor Vehicle Safety Act, the DPPA and the Privacy Act. The order enjoins AAMVA from transferring CDLIS data to FMCSA or any other federal agency and bars FMCSA from taking adverse action against either the states or AAMVA while the case is litigated. It is a temporary measure, not a final ruling: the states must file a motion for a preliminary injunction by August 27, the federal government's response is due September 3, and the next hearing is scheduled for September 10.

What this means for carriers and drivers

For now, the practical effect on trucking operations is limited — CDLIS keeps functioning as the system states, carriers and background-check providers already rely on for verifying CDL status, and nothing in the TRO changes how a carrier pulls a driver's record today. But three things are worth watching. First, FMCSA's threat to pull AAMVA's funding and contract, if it were ever carried out rather than litigated, would disrupt the infrastructure every carrier depends on to issue, renew and verify CDLs nationwide — a risk this suit is specifically trying to head off. Second, the case turns partly on the Driver's Privacy Protection Act, a statute that governs how motor vehicle records generally can be shared; a ruling on the merits here could set boundaries relevant to any future federal request for driver or vehicle data held at the state level. Third, the September 10 hearing is the date that matters — a preliminary injunction would extend the current freeze indefinitely, while a ruling for the government would reopen the data-transfer question on a compressed timeline, and either outcome is likely to shape how AAMVA and FMCSA structure CDLIS access going forward.