Who Controls Your CDL Data? Inside the 22-State Lawsuit

For most commercial drivers, CDLIS is not something they think about day to day. It works in the background when states issue, renew, and check commercial driver licenses. It is now at the center of a federal court fight over who may control a large set of CDL-related records and how that information may be used.

The short version is this: a multistate coalition challenged a federal demand for CDLIS records covering roughly 17 million people. A federal judge has temporarily blocked the transfer while the case moves forward. That is an important development, but it is not the final word on the lawsuit. [1] [2]

What happened?

On August 13, 2026, a coalition of states and the District of Columbia filed a case in federal court in Virginia against the U.S. Department of Transportation, the Federal Motor Carrier Safety Administration, and the American Association of Motor Vehicle Administrators, known as AAMVA. The coalition also pursued a related challenge to a Department of Homeland Security subpoena. The DOT and FMCSA case is State of Illinois et al. v. U.S. Department of Transportation et al., No. 1:26-cv-2547. [1] [2]

According to the states’ complaint, FMCSA asked AAMVA to provide a five-year CDLIS dataset covering about 17 million CDL holders. The complaint says the requested material included sensitive identifying information, and that DHS sought the same dataset through a subpoena. The states argue that the demand exceeds federal authority and conflicts with privacy protections. Those are the states’ legal claims. The court process will determine the final outcome. [1] [2]

The phrase “22-state lawsuit” is commonly used to describe this dispute. The official court filing in the DOT and FMCSA case identifies 21 states and the District of Columbia as plaintiffs, while Pennsylvania participated in the related coalition action described by state attorneys general. [1] [2]

What is CDLIS, and why does it matter?

CDLIS is the Commercial Driver’s License Information System. Its core purpose is to help states confirm whether a person already holds a CDL in another state and to identify where the person’s underlying driver record is maintained. That supports the one-driver, one-license system and helps states check licensing and disqualification information. [3] [4]

It is important to understand what CDLIS is and is not. The court’s August 20 order describes CDLIS as a pointer system. In simple terms, it helps direct an authorized user to the state that holds the complete underlying driver record. It is not simply a single federal file containing every detail of a driver’s complete history. The DOT’s privacy assessment likewise describes state-operated CDL databases as the authoritative source of CDL records. [3] [4]

What did the court do?

The court first entered an administrative stay on August 13 to preserve the status quo while it reviewed the emergency request. On August 20, the court granted a temporary restraining order, often called a TRO. The order temporarily prevents AAMVA from transferring the challenged records to DOT and FMCSA, and it temporarily prevents related adverse action based on nonproduction. [3]

That distinction matters. A temporary restraining order is an early, time-limited court measure. It does not permanently decide who is right or whether federal agencies will ultimately be entitled to the data. The Illinois Attorney General’s office said the coalition planned to seek a preliminary injunction as the case continues. [3] [5]

The challenged bulk transfer is temporarily on hold. It does not mean the case is over, and it does not mean a final legal ruling has been issued.

What commercial drivers should know now

There is no indication in the court order that individual CDL holders need to take a new immediate licensing step because of this lawsuit. States remain responsible for issuing CDLs and maintaining the underlying state records that CDLIS helps identify. [3] [4]

Drivers who want to review the information connected to their license should use their state of record’s established process. The DOT privacy assessment says CDL holders seeking a copy of their CDL record, or seeking to correct information in it, should work through the applicable state driver licensing agency. [4]

For now, the most practical approach is to keep normal licensing records current, watch updates from your state licensing agency and trusted transportation sources, and avoid assuming that the temporary court order has resolved the broader privacy and authority questions. The litigation remains active.

Why this case is bigger than one data request

The dispute is not only about a database. It is also about how state-held driver information can be accessed, transferred, and used when federal and state responsibilities overlap. The court’s order focuses on the requested bulk transfer of CDLIS records, while the existing CDLIS system has long supported authorized, record-specific access connected to licensing and enforcement functions. [3] [4]

For drivers, the practical issue is understandable: CDL information is necessary to keep the licensing system working, but the personal data connected to that system deserves clear rules, controlled access, and accountability. The case will help determine how those interests are balanced going forward.

What to watch next

The next meaningful development is likely to be the court’s consideration of longer-term relief, including the coalition’s request for a preliminary injunction. Drivers, carriers, and brokers should watch for official court updates and notices from state driver licensing agencies. Until then, the temporary restraining order remains an early procedural step, not a final resolution. [3] [5]

This post is for informational purposes only and does not constitute legal advice. Consult qualified legal counsel regarding your specific legal questions or obligations.