# Why state data matters now
Federal officials recently sought a centralized dataset of Commercial Driver's License (CDL) records covering more than 17 million people. Twenty-one states sued to stop the transfer, and a judge issued a temporary restraining order blocking the handoff. That dispute is one example of a wider pattern: federal requests for state Medicaid, SNAP, and other employment data have increased.
# What states should do first: audit and map their data
Many states do not yet know the full scope of the data they collect, where it's stored, or who accesses it. The basic, immediate task is an inventory: a map that shows which agencies collect pooled datasets, where those datasets are stored (including cloud locations), and the flows into and out of state control.
This requires resources. States should appoint or strengthen centralized data offices and fund comprehensive audits. The audits must account for legacy systems and physical holdings as well as cloud-based repositories. Knowing whether records sit on an old server in a clerk's office or in a specific cloud region matters for legal and contractual control.
# Second step: stop sharing by default
States historically shared driver license and program data with federal agencies with little friction. That practice should change. Before transferring data, state officials should ask: Is there a clear statutory basis for this request? Do we need to share the data to fulfill a state or federal obligation? What limits will we place on retention, search, secondary use, and redisclosure?
Where sharing is not required, states can refuse. Where sharing is required or unavoidable, states can impose conditions: minimal datasets, time limits on retention, auditing rights, and clear prohibitions on use for unrelated enforcement. Contractual terms and Memoranda of Understanding can incorporate these constraints.
# Third step: use legal tools and leverage
States can and should use litigation to contest unlawful or overbroad federal access. The CDL case shows courts can intervene quickly. States should also adopt statutes and administrative rules that restrict transfers absent express legal authority and define permissible federal uses.
Contracts and grant conditions are additional levers. When federal funds flow to states, conditionalities can include strict data-use provisions. States should negotiate terms that preserve state control over pooling, aggregation, and sharing.
# Practical operational changes
Put chief data officers and centralized data governance boards in place. Standardize data-sharing agreements across agencies. Invest in modernizing legacy systems so records are accessible for management and protected by up-to-date controls. Public-facing portals and inventories help with transparency and internal oversight but are not substitutes for comprehensive audit work.
# Bottom line
The recent push to capture large state datasets demonstrates that data sharing is a site of federal-state conflict. States that know their data, refuse unnecessary transfers, and use legal and contractual tools to limit federal reuse will be better positioned to protect residents and preserve state authority.