Sponsors
The bill delivers substantially stronger privacy and owner control over vehicle data and centralizes FTC enforcement and transparency, but it raises compliance costs, may hinder connected‑vehicle services and safety/regulatory information flows, and could be undercut by funding and preemption tradeoffs.
Vehicle owners and users gain clear, strong control over their vehicle and user data: the bill expands the definition of covered data (including geolocation and internet activity), requires affirmative informed written consent that can be withdrawn, and gives owners real‑time access and deletion rights at no extra cost.
Consumers and policymakers benefit from clearer federal oversight and enforcement: the FTC is named and empowered to regulate covered vehicle data practices, can use its full unfair/deceptive authorities, and must report on data collection, access, and incidents within 180 days.
Vehicle owners and third‑party developers gain more portability and marketplace opportunities: owners can authorize third parties to use their data and (where implemented) access it through a single, technology‑neutral secure interface or open API, enabling aftermarket services and competition.
Vehicle buyers and the public may face higher costs because manufacturers and service providers will incur substantial new compliance costs (consent systems, APIs, reporting, legal risk), which could raise vehicle prices and subscription fees.
Owners and service providers risk reduced functionality and slower innovation because complex consent rules, transfer prohibitions, and expanded regulated categories of telemetry could impede data‑driven services (remote diagnostics, telematics insurance, over‑the‑air features) when owner consent is absent or transfers are limited.
Vehicle owners and third‑party developers face increased privacy and security risk if raw onboard or transmitted vehicle data is made widely accessible and then mishandled by apps or third parties.
Based on analysis of 8 sections of legislative text.
Introduced December 16, 2025 by Mike Lee · Last progress December 16, 2025
Blocks vehicle manufacturers from accessing, sharing, or transferring most user and vehicle-generated data unless a vehicle owner gives clear, written consent or a narrow safety or legal exception applies. Requires manufacturers to give owners free, real-time access and control over all covered data via both a vehicle interface port and wireless transmission where equipped, using an open API that supports deletion and setting user preferences. Bans transfer of U.S. persons’ personally identifiable information to five named foreign governments, directs the FTC (with other agencies) to report to Congress on vehicle data practices within 180 days, makes violations enforceable by the FTC, preempts conflicting state/local rules, takes effect three months after enactment, and bars any new appropriations for implementation.