Sponsors (5)
The bill increases individual control, privacy safeguards, and centralized FTC enforcement for vehicle-generated data while creating compliance costs, implementation and security trade-offs, and limits on state-level or public oversight.
Vehicle owners (drivers, homeowners, small-business owners) gain clearer, stronger control over vehicle-generated data: written consent rules, real-time access, ability to authorize independent third parties, and deletion rights let owners manage privacy, repair/resale, and app integrations.
Manufacturers, software providers, and regulators get greater regulatory clarity and centralized enforcement because the bill defines covered data types (user data, vehicle-generated data, PII) and designates the FTC as the primary enforcer.
Consumers gain stronger enforcement and remedies because violations are treated as unfair or deceptive practices under FTC authority, enabling investigations and civil relief.
Vehicle buyers and owners are likely to face higher costs or fewer features because expanded engineering, compliance, and reporting requirements for automakers and suppliers can raise vehicle prices.
Manufacturers, service providers, and app developers will face operational burdens because strict written consent rules and bans on transfers to certain countries complicate cross-border analytics, diagnostics, and supply-chain services.
State governments and some consumers may lose stronger local protections because the bill preempts state laws, potentially blocking more protective state privacy or safety rules.
Based on analysis of 8 sections of legislative text.
Requires affirmative owner consent for manufacturers to access/share vehicle and user data, gives owners free real-time access and deletion rights via open APIs, and bans transfers to five named foreign governments.
Official title: To prevent manufacturers of covered vehicles from accessing, selling, or otherwise sharing covered data without consent of covered vehicle owners, to require manufacturers of covered vehicles to provide covered vehicle owners with access to, and control of, covered data, and for other purposes.
Introduced December 16, 2025 by Eric Burlison · Last progress December 16, 2025
Requires vehicle manufacturers to get clear, written, and withdrawable consent before accessing or sharing vehicle-generated and user data, except for narrowly defined safety or emergency uses. Gives vehicle owners free, real-time access and control of all covered data through vehicle ports, wireless transfer, and an open API; bans transfers of U.S. persons’ identifiable information to five named foreign governments; makes violations enforceable by the FTC and requires an interagency report to Congress on data practices and risks.