Is Skip Tracing Legal? FCRA, DPPA & GLBA Explained
2026-02-05
Skip tracing is legal in the United States, but it is not unregulated. Three federal laws shape what you can obtain and how you may use it. Here is what the FCRA, DPPA, and GLBA actually require, in plain English.
The short answer
Yes. Locating a person using public records and licensed data sources is legal in the United States when you have a lawful, permissible purpose for doing so. Skip tracing is a routine, legitimate practice used every day by attorneys, collections professionals, investigators, insurers, and real-estate professionals. What makes it lawful is not secrecy but purpose and use: you must have a genuine, legal reason to locate the person, and you may not use the results for purposes the law places off-limits. The rest of this article explains the three federal laws that draw those lines. It is educational information, not legal advice, so consult your own counsel about your specific situation.
The FCRA and why 'not a consumer reporting agency' matters
The Fair Credit Reporting Act, 15 U.S.C. section 1681 et seq., governs 'consumer reports' produced by 'consumer reporting agencies' and used to make decisions about a person's eligibility for credit, insurance, employment, or housing. It is the single most important law to understand before you order a search, because it defines a boundary you must not cross.
What the FCRA covers
When a report is used to decide whether to hire someone, rent them an apartment, extend them credit, or issue them insurance, the FCRA imposes strict rules: the subject gets notice, gets a copy on request, and gets to dispute inaccuracies, and the provider must follow reasonable procedures for maximum accuracy. Those protections exist because eligibility decisions can change a person's life.
Why PersonFinder is not a consumer reporting agency
PersonFinder is not a consumer reporting agency as defined by the FCRA, and the information provided through our services does not constitute a 'consumer report' under the FCRA. Our reports are location and contact tools, not eligibility tools. That posture is deliberate: it keeps our product squarely in the skip-tracing lane and out of the FCRA-regulated lane.
Uses that are prohibited
You may not use any information obtained from PersonFinder as a factor in establishing a consumer's eligibility for credit or insurance, for employment screening, for tenant or housing screening, or for any other purpose covered by the FCRA. If you need to make one of those decisions, you must obtain an FCRA-compliant consumer report from a consumer reporting agency instead. Using a skip-trace report for a screening decision is both a misuse of our service and a potential legal violation for you.
The DPPA: motor-vehicle records
The Driver's Privacy Protection Act protects personal information contained in state motor-vehicle records, such as data tied to a driver's license or vehicle registration. The DPPA restricts who may obtain that information and for what purposes. Permissible purposes under the statute include use in connection with a legal proceeding, service of process, enforcement of a judgment, and certain investigative activities, among others. Because vehicle and VIN searches can touch DPPA-protected data, those searches carry an additional permissible-purpose requirement beyond the general one, and you certify that purpose when you order.
The GLBA: non-public financial information
The Gramm-Leach-Bliley Act governs non-public personal financial information held by financial institutions. Searches that can implicate financial data, such as bank-account location work used in judgment enforcement, are subject to GLBA permissible-purpose restrictions. As with the DPPA, this is not a prohibition on the entire category; it is a requirement that you have and can state a lawful reason recognized under the statute, such as collecting on a debt you are legally owed or enforcing a court judgment.
State and local law also applies
Federal law sets the floor, not the ceiling. States impose their own rules on data brokers, debtor communications, and privacy, and some categories of records are more restricted in certain states than others. Collections professionals also operate under the Fair Debt Collection Practices Act, which governs how you may contact a debtor once you have located them. The practical takeaway is that locating a person and then acting on that information are two different steps, each with its own compliance obligations. A permissible purpose to find someone does not by itself authorize every subsequent contact.
What this means for you: permissible purpose
Everything above resolves into one operational rule: have a permissible purpose, state it accurately, and use the results only for that purpose. By placing an order you certify that you have a lawful permissible purpose under all applicable federal, state, and local laws, that the purpose you state at checkout is accurate, and that you will use the results solely for that purpose. We explain the common permissible purposes and the exact certification you make in our dedicated guide to permissible purpose.
PersonFinder's compliance posture, in full
For clarity, here is the disclaimer we stand behind. PersonFinder is not a consumer reporting agency as defined by the Fair Credit Reporting Act ('FCRA'), 15 U.S.C. section 1681 et seq., and the information provided through our services does not constitute a 'consumer report' under the FCRA. You may not use any information obtained from PersonFinder as a factor in establishing a consumer's eligibility for credit or insurance, for employment screening, for tenant or housing screening, or for any other purpose covered by the FCRA. Certain records, including motor-vehicle records governed by the Driver's Privacy Protection Act ('DPPA') and non-public personal financial information governed by the Gramm-Leach-Bliley Act ('GLBA'), are subject to additional permissible-purpose restrictions. By placing an order you certify that you have a lawful permissible purpose under all applicable federal, state, and local laws, that the purpose you state at checkout is accurate, and that you will use the results solely for that purpose. Misuse of the information may subject you to civil and criminal penalties.
FAQ
Is it legal to find someone's address without their permission?
Yes, when you have a lawful permissible purpose such as enforcing a judgment, collecting a debt, serving legal process, or completing a real-estate transaction. You do not need the subject's consent, but you do need a legitimate legal reason, which you certify at checkout.
Can I use a skip-trace report to screen a job applicant or tenant?
No. PersonFinder is not a consumer reporting agency and its reports may not be used for employment, tenant, credit, or insurance decisions. Those uses require an FCRA-compliant consumer report from a consumer reporting agency.
What is a permissible purpose?
A permissible purpose is a lawful reason recognized under the FCRA, DPPA, GLBA, and applicable state law to obtain and use someone's information. Examples include judgment enforcement, debt collection, service of process, real-estate transactions, and locating a witness or heir.
Is this article legal advice?
No. This is general educational information about the laws that govern skip tracing. For guidance on your specific circumstances, consult a licensed attorney.