Federal Limits

Limit 05 of nine · Information firewall

Protect personal records

67M+ voter records bulk-scanned; 292,114 searches of state driver records in a year.

The problem

Starting in 2025, the federal government moved to fuse state-held records — voter rolls, DMV files, tax data — into a single surveillance system, with deportation as the current use case and no legal wall stopping the next one: 31 lawsuits across 30 states over voter rolls, a rebuilt SAVE system scanning 67 million-plus registrations, an IRS deal exposing roughly 47,000 taxpayers, and 292,114 searches of DMV records. Courts struck the worst of it — but those are reversible orders; only a state firewall law is durable.

What the law does

Bars state agencies and local data-holders from handing residents’ voter, DMV, school, health, and licensing data to federal civil enforcement without a judge’s warrant.

Where it stands

Where it stands — all 52 jurisdictions17 of 52 have this limit; 7 at full strength
full partial none red underline = state law mandates cooperation

Methodology v3.4 · scored Jun 10 2026

The model language

“No state agency shall disclose, provide access to, or transfer any personal information of any person contained in state databases or records to federal civil immigration enforcement, except where compelled by a judicial warrant signed by a federal or state judge or magistrate, compelled by a subpoena issued by a court of competent jurisdiction, or required by federal law that has been judicially upheld against legal challenge.”

— Section 5 · Information Firewalls, The Federal Limits Act
Read the full model bill →

What we propose

Firewall three or more of five data domains (voter, DMV, school, health, licensing) with hard-denial language, a judicial-warrant exception, public logging of refused requests, and a SAVE opt-out. Model: Colorado SB 24-182; California Veh. Code 1801.1; Illinois Way Forward Act.

Who’s already done it

16 states + D.C. have firewalls; 7 at full strength — CA, CO, CT, IL, MD, NJ, OR. California and Illinois firewall all five domains.

On the record

Status: holding in court — but via reversible litigation, not durable statute. Oklahoma already settled; a state law is the answer.

One of nine.
Not the whole fight.

See where your state stands on all nine limits, or read the model bill section that closes this one.

Check your state → ← Back to the Nine