The national register of information on driver’s license holders – including CDL holders – that’s maintained by the National Highway Traffic Safety Administration has some big flaws, according to a government audit.

In a press release, the U.S. Department of Transportation Inspector General announced that personal information in the database, such as drug or alcohol convictions, could be accessed and used by unauthorized parties.

The inspector general also reported that information on convictions sometimes takes more than a year to be entered into the register, that physical characteristics – such as hair and eye color – were missing from 18 million records, and that 161,000 cases of duplicate social security numbers were found.