Congress requires state and local agencies to shield personal data . Three laws enacted since 1990 bar all governments from releasing Social Security numbers, disclosing personal information by state departments of motor vehicles, and electronically transmitting personal health information.