Transit, Tolls & Water · Public Transit · Structural / no discrete incident
WMATA (Metro/SmarTrip)
Headline
WMATA's own Inspector General audited its data practices, which is unusual and worth crediting - most transit agencies have no equivalent independent review.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
WMATA's own Inspector General audited its data practices, which is unusual and worth crediting - most transit agencies have no equivalent independent review. The underlying exposure is inherent to the technology: a registered SmarTrip card produces a complete record of when and where a rider entered and exited the system, which for a daily commuter reconstructs home, workplace and schedule with high precision. Transit records are also subject to law enforcement request under standards that vary and are rarely published. A rider who wants to avoid it must use an unregistered card and pay cash to reload, forgoing balance protection - the privacy option is the one that costs you money if you lose the card.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not applicable in the typical arbitration-clause sense — WMATA is a public interstate transit authority (compact among DC/MD/VA), not a private company, so disputes follow public-records/FOIA-style request processes rather than consumer arbitration.
Data sharing
WMATA's OWN Office of Inspector General conducted an independent AUDIT OF WMATA'S DATA PRIVACY practices (results published April 2026, available as a redacted PDF report) — the existence of a dedicated internal audit specifically targeting data privacy compliance is itself notable, though the audit's specific findings were not independently reviewed in full this pass (recommend reading the actual redacted report directly for details). Separately, WMATA's Privacy Policy states that REGISTERED SmarTrip card holders' transaction records (more than 26 months old) require either a notarized signed statement or an in-person appointment with government-issued ID to release — but UNREGISTERED SmarTrip cards have WEAKER protection: 'anyone can obtain records pertaining to an unregistered card by submitting a records request,' which WMATA itself cites as the reason it 'strongly encourages' registration — meaning an unregistered card, often used specifically BECAUSE someone wants anonymity, is actually the LESS private option under WMATA's own stated policy.
Fees and billing
Not itemized this pass — recommend a direct follow-up on the WMATA OIG's separate, recurring annual 'SmarTrip Regional Partner Comparative Billing Statements' audits (most recently the FY2024 report published Feb. 2025 and an FY 2025 SmarTrip report published May 2026) if billing-accuracy specifics are relevant.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy wmata.com/about/records/privacy.cfm | Not fetched yet | NO (HTML only) |
| Terms of service wmata.com/about/records/smartrip-terms-conditions.cfm | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.