Big Story: Federal Agencies Find Ways Around State DMV Restrictions
Key Takeaways
ICE and CBP continue accessing state DMV records through direct databases, the Nlets network, data brokers, and local law enforcement, despite state restrictions.
DMV searches have been linked to immigration arrests in Maryland, Minnesota, and Washington, with some arrests occurring minutes after a search.
New York has blocked federal access to its DMV records, but agents can still search vehicles registered in other states.
Federal immigration agencies continue accessing driver's license and vehicle registration records in states that restrict their use for immigration enforcement. Maryland, Minnesota, and Washington have introduced safeguards, but federal agents have continued using DMV information to identify individuals before making arrests. New York has enforced tighter restrictions, although agents can still retrieve records from other states.
As of August 2025, 19 states, the District of Columbia, and Puerto Rico issued driver's licenses regardless of citizenship status. Several restrict federal immigration access to DMV records. However, ICE and CBP can obtain information through four channels: direct database access, the Nlets interstate network, commercial data brokers, and local law enforcement.
Nlets connects all 50 states with federal law enforcement agencies. An agent can enter a license plate number, retrieve the registered owner's name from a state DMV, and check it against federal immigration databases. States can block individual federal accounts, but searches may continue through other accounts.
Maryland requires a judicial warrant to access immigration-related DMV records. Its updated law took effect July 1, 2026. Nine immigration arrests in 2026 were linked to Nlets searches made shortly beforehand. Maryland State Police reported no ICE or CBP queries between January and June, but Motor Vehicle Administration records showed searches preceding arrests.
Minnesota restricts access to driver's license information for non-REAL ID licenses, but it does not cover vehicle registration records. On January 20, 2026, its Nlets connection processed 24,999 registration queries. More than half came from accounts linked to federal immigration agencies. At least seven arrests were linked to these searches.
Washington prohibits state agencies from sharing personal information for civil immigration enforcement. Nevertheless, DHS agencies searched its driver and vehicle records 1,037,724 times between January 1 and May 31, 2026. Since August 2025, at least 356 arrest incidents were linked to DMV searches. On April 14, the governor's office blocked one CBP account, but the same day searches began through another CBP account.
New York has blocked ICE and CBP accounts from accessing its DMV records through Nlets. State law requires a judicial warrant for immigration-related access, with violations carrying felony penalties.
Commercial data brokers provide another access route. LexisNexis downloaded Maryland motor vehicle data 1,046,936 times in 2025. All four states require brokers to agree not to resell records for immigration enforcement. However, an ICE contract with LexisNexis keeps individual government searches anonymous, limiting state oversight.
States have adopted different enforcement mechanisms. Oregon's 2021 Sanctuary Promise Act allows individuals to bring legal action over certain violations, while Minnesota requires DMV database queries to be logged as public records. For DMV administrators and state technology leaders, priorities include reviewing external database accounts, monitoring Nlets queries, and strengthening audit requirements in data broker contracts. Blocking one access route does not necessarily prevent federal agencies from obtaining the same information elsewhere.
Free Cybersecurity Assessments and Exercises for State and Local Governments
Fractional Source and Sourcewell Ventures are expanding their cybersecurity pilot to state and local governments, offering free assessments and exercises to help agencies prepare for cyber incidents.
QUICK HIT NEWS
Michigan Gov. Gretchen Whitmer announced $1.7 million for 12 pilot projects to test advanced air mobility technologies statewide. The Office of Future Mobility and Electrification selected the projects through the Michigan Mobility Funding Platform, administered by NextEnergy. Awards include $200,000 for ResilienX's drone-as-first-responder program with the Battle Creek Police Department, $245,000 for Blueflite's drone organ delivery in Ann Arbor, and $170,000 for CENSYS Technologies' power line inspections in Traverse City. Other projects cover thermal building inspections and drone traffic management in Detroit.
The Alabama Board of Nursing has restored online renewals for registered nurse licenses after an August ransomware attack forced it to use paper applications. The board oversees more than 97,000 nurses, and investigators found that the attackers downloaded data during the attack. Exposed information may include names, Social Security numbers, driverʼs license numbers, and medical information. About 60,000 nurses with single state licenses must still renew by December 1, and the deadline has not been extended. Renewals now run on a new database the board had been building for about a year.
Hawaii and Connecticut have warned businesses about scam emails that impersonate state agencies. In Hawaii, vendors reported messages asking for $400 deposits through a form that appeared to come from the Hawaii State Archives, and other emails imitated the tourism and budget agencies. Connecticut Secretary of the State Stephanie Thomas warned of phishing emails sent in the name of the Business Services Division that direct recipients to a fake document portal. Both states urged businesses to check sender addresses and directly verify unexpected payment requests.
San Diego County has named Bridget Premont its first Pollution Crisis Chief to lead the response to sewage flowing across the border through the Tijuana River. Premont is a career Foreign Service officer who previously served at the U.S. Consulate in Tijuana. The position was created in January as part of an $8.75 million funding package. Her priority is an 18-month, $1.8 million engineering analysis for a county system to capture and treat polluted river water. County officials say more than 200 billion gallons of polluted water crossed into the United States from 2018 to 2026.
FOR THE COMMUTE
Government Doesnʼt Have to Be Slow and Risk-Averse (The Public Sector Show)
Chetan Ganatra, chief information officer of Ramsey County, Minnesota, explains how he has spent the past decade showing that government can move quickly and take sensible risks, first at the state level and now at the county. When he joined Ramsey County 4.5 years ago, he received 7 to 10 escalations in his inbox each day. He discusses breaking down IT silos, building service teams, and measuring culture change across the organization.
RESOURCES & EVENTS
📅 Nevada Digital Government Summit 2026 (Henderson, NV - December 10, 2026)
This summit at The Westin Lake Las Vegas Resort and Spa brings together Nevada’s state and local government leaders to discuss cybersecurity, AI, data governance, and digital service delivery. State CIO Timothy Galluzi and Clark County CIO Bob Leek will open the day, and sessions include a briefing on Nevada’s AI Readiness Lab and discussions on the future IT workforce and IT investment portfolios. A closing session marks 25 years of digital government. Registration is open to public sector employees only.
📅 Building an Agentic SOC for Government (Virtual - November 4, 2026)
This webinar explains how state and local government security teams can use AI agents to accelerate threat detection and incident investigation. Elastic's Bobby Suber and Greg DeYoung will explain how agentic security operations centers (SOCs) can automate alert enrichment, correlate signals across identity, endpoint, network, and cloud systems, and assemble pre-investigated cases. The discussion will cover reducing alert fatigue, improving threat hunting, and keeping human analysts responsible for security policies and high-impact response decisions. Attendees can earn 1.0 CPE credit.
📊 Report Spotlight: A New Era for Justice Information Sharing (AWS)
This paper examines how justice and public safety agencies can improve information sharing across fragmented systems. Orange County, California, is migrating data from a decades-old mainframe and more than 500 servers to cloud infrastructure, while Sonoma County uses AI to standardize information exchanged between agencies. The report identifies data governance, security requirements, interagency agreements, and inconsistent standards as major barriers. It recommends shared governance frameworks, role-based access controls, continuous monitoring, and AI-assisted data processing to improve interoperability.
INSIGHT OF THE WEEK
An Urban Institute survey found that nearly half of nonprofits receiving government funding experienced disruptions in 2025, including delayed payments, funding freezes, and cancellations. The share of nonprofits planning to hire fell from 56% in 2024 to 38% in 2025, while nearly 70% expect demand for their services to increase. Local governments rely on these organizations for food assistance, health care, disaster response, and other services, particularly as Medicaid and SNAP funding faces cuts. Maryland has introduced measures including interest-free bridge loans of up to $25,000 to help nonprofits manage delayed government payments.
