Public records vs. credit reports — a critical distinction
The Fair Credit Reporting Act (FCRA) requires that consumer-reporting agencies log who pulled your credit file and disclose those pulls when you request your file. Public records work differently. When you search a county court docket, sheriff jail roster, or property-assessor portal, the search is usually anonymous and unlogged. There is no central registry of "people who looked up John Smith" — and contrary to popular belief, the FBI does not track who searches public dockets.
Exception 1 — FCRA background checks
When a third party (employer, landlord, lender) pulls a formal consumer report that includes criminal-history data, the FCRA gives you the right to know. The EEOC's guidance for employers (Background Checks: What Employers Need to Know) requires written authorization and pre-adverse-action notice. If a background-check company runs you, you can demand its file and a list of who received it.
Exception 2 — DPPA-protected DMV data
The Driver's Privacy Protection Act (DPPA) prohibits release of motor-vehicle records except for enumerated purposes (insurance, court process, government use, certain research). Every DPPA-permissible disclosure is logged by the state DMV. If someone pulled your DMV record outside the permitted-use list, that is a federal violation — and the audit trail exists.
Exception 3 — HIPAA medical-record access logs
Although not strictly a public record, healthcare data is governed by HIPAA, which gives you the right to an "Accounting of Disclosures" showing every party that received your protected health information. This is why arrest reports that touch hospital admissions sometimes name treating facilities but redact the medical content itself.
What you can do about it
If you're worried about who is accessing data on you, three practical steps: (1) Pull your free annual credit reports from the federally-mandated sources; (2) Use California's new Delete Request and Opt-Out Platform (DROP) if you live in California (privacy.ca.gov/drop) — a single request will reach all 500+ registered data brokers starting August 1, 2026; (3) Set Google Alerts on your own name and check quarterly.