DVLA driver license data: equality impact assessment
Published 7 July 2026
© Crown copyright 2026
This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.
Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.
This publication is available at https://www.gov.uk/government/consultations/police-and-law-enforcement-access-to-driver-data-held-by-the-dvla/dvla-driver-license-data-equality-impact-assessment
Purpose and overall assessment
The policy updates the framework under which police and law enforcement organisations may access and use DVLA driver licensing data for policing and law enforcement purposes. The main effect is to move from a narrower and older framework focused mainly on road traffic matters to a clearer statutory model under section 181 of the Crime and Policing Act 2026. The policy is intended to support legitimate operational needs while strengthening governance, accountability, and safeguards.
On the current evidence, the policy does not itself create direct discrimination. The main equalities concern are indirect. Easier and faster access to driver data may mirror or amplify existing disproportionality in policing activity unless the new powers are tightly governed.
Human rights considerations
Article 8 is the principal human rights issue. There are two linked interferences with privacy. First, driver licensing data is collected for the civilian purpose of administering entitlement to drive but is then made available for policing and law enforcement use. Secondly, each operational access to a person’s name, address, photograph, license status, or related information is a separate interference with private life. The interference is legitimate as recognised by Article 8(2) as it will help prevent disorder or crime and the protect of the rights and freedoms of others. The interference is mitigated by being put on a clearer statutory footing and with operational access governed by strict controls.
Article 2 is relevant because faster access may help police and law enforcement respond to high-risk missing people, welfare concerns, urgent safeguarding, and identification of the deceased or seriously injured. Article 6 is relevant because driver data may later form part of a criminal investigation or proceedings, so use of the data must be properly documented, linked to a genuine line of enquiry, and capable of later scrutiny.
Key mitigations supporting proportionality
The proportionality of the policy will depend on access being limited to authorised organisations and people, supported by clear operational purposes in legislation, regulations, and the Code of Practice. Users should be subject to mandatory training, vetting and management oversight, and each access should record who accessed the data, for what purpose and why. Audit, dip-sampling and annual reporting should be used to identify misuse or disproportionate impacts over time, supported by controls on onward disclosure and professional or disciplinary consequences for misuse. Particularly sensitive medical information should remain outside routine automated access and continue to be available only through the manual route.
Most important equality considerations
| Equality risk | Main issue identified | Main mitigations |
|---|---|---|
| Age | Younger people are disproportionately represented in some policing activity. Broader access may therefore affect younger age groups more often in practice, although it may also help where younger or older people are victims or missing persons. | Use only where necessary and proportionate; stronger justification in higher-risk contexts; audit of access patterns; training that reinforces lawful purpose and proportionality. |
| Disability | Broader access may support safeguarding and victim identification, but some records may contain health-related licensing information, create higher privacy risks if used inappropriately. | Keep sensitive medical data on the manual route; minimise access to sensitive fields; apply role-based controls, training, and audit. |
| Race | This is one of the clearest indirect discrimination risks. Broader use of the data could reinforce existing disproportionality in policing if not carefully controlled. | Clear authorised purposes; stronger recording requirements; robust audit and dip-sampling; mandatory training; reporting that can identify disproportionality and allow corrective action. |
| Sex | The biggest concern is misuse risk and public confidence, particularly where personal data could be used inappropriately in stalking, harassment, or violence against women and girls contexts. At the same time, faster lawful access may improve safeguarding and victim protection. | Strict user vetting, access logging, supervisory review, clear sanctions for misuse, visible safeguards, and reporting on misuse and remedial action. |
Protected characteristics where no material impact has been identified
On the current evidence, no material impact requiring detailed analysis has been identified for pregnancy and maternity, sexual orientation, or marriage and civil partnership. No direct discrimination has been identified for gender reassignment, and no particular disadvantage is presently evidenced, although this should remain under review because of the potential sensitivity of personal data misuse. Religion or belief does not currently show a distinct evidential impact but should also remain under review because concerns may arise in practice through overlaps with ethnicity, nationality, or community confidence issues.
Ongoing compliance and conclusion
The policy should proceed only with strong implementation controls. Ongoing compliance with the Public Sector Equality Duty should be demonstrated through monitoring of the Regulations, the Code of Practice and operational use of the data. This should include audit and dip-sampling, review of higher-risk access patterns, monitoring of complaints and misuse cases, and regular review of training effectiveness. Findings should be used to update guidance, strengthen controls and inform annual reporting.