The bill increases consumer access, control, and federal enforcement over vehicle‑generated data while preserving some industry uses and trade secrets — but it also raises costs, leaves important privacy and security gaps (especially for fleets and certain location/profiling uses), and creates legal complexity that may shift burdens onto consumers and businesses.
Vehicle owners and drivers gain clearer control and real‑time, cost‑free access to their vehicle data (including deletion and the ability to authorize third parties) plus an opt‑out for sales, enabling better maintenance, resale decisions, and choice about commercial uses of their driving data.
A single federal regulator (the FTC) is empowered to enforce the law, giving consumers a clearer avenue for remedies (investigations, civil penalties, injunctions) that can deter violations and reduce harm.
Limits on selling vehicle telemetry to specified foreign states and requirements to follow voluntary cybersecurity standards reduce risks that sensitive vehicle data or telemetry could be exploited by hostile actors and help promote safer data access.
Manufacturers, fleet owners, and service providers will face new compliance, recordkeeping, and enforcement risk costs that are likely to be passed on to consumers through higher vehicle prices or service fees.
Significant privacy gaps remain: third‑party access, narrow definitions of harmful profiling, a 1,750‑foot precise‑location threshold, fleet exceptions, and allowed uses of deidentified data create meaningful opportunities for location tracking, profiling, re‑identification, or commercial reuse of sensitive driving data.
Expanding wireless, real‑time access to vehicle data combined with limited technical transparency could increase the attack surface for cyberattacks and impair safety if implementations or oversight are weak.
Based on analysis of 7 sections of legislative text.
Requires automakers to give owners real-time control of most vehicle data, limits sales of specified personal vehicle data, and authorizes FTC enforcement.
Introduced December 12, 2025 by Diana Harshbarger · Last progress December 12, 2025
Requires motor vehicle manufacturers to give vehicle owners real-time, secure access to and joint control of most electronic data generated by their vehicles at no extra cost, including tools to delete owner data and access via ports or wireless. Limits when manufacturers or fleet owners may sell certain personal vehicle data by requiring opt-outs, bans sales to specified foreign adversary states, preserves several operational exceptions, gives the Federal Trade Commission enforcement authority, and preempts state laws that conflict with the new federal data-access rule.