California Code, Business and Professions Code - BPC § 7508.7

(a) Except as otherwise provided by law, a repossession agency shall not disclose to the public, any person other than the individual to whom the information pertains, or any nongovernmental entity, without a court order, the residence address, residence telephone number, cellular telephone number, driver's license number, work schedule, past, present, or future location, or any other personal information of any licensee, registrant, qualified certificate holder, qualified manager, employee, or independent contractor the agency employs.

(b) For the purpose of verifying information for the issuance or renewal of a policy of insurance, a repossession agency may provide to an insurance company the name, driver's license number, and date of birth of a licensee, registrant, qualified certificate holder, qualified manager, employee, or independent contractor the agency employs.