The bill substantially improves safety and privacy for survivors by enabling rapid disabling of abusers' connected-vehicle access and adding data protections and user support, but it creates new compliance costs, risks of wrongful or accidental lockouts, reduced legal remedies due to provider immunity, and limits state/local policymaking.
Survivors (including women, parents/families, and others at risk) can have an abuser's remote access or connected-vehicle services disabled quickly, reducing immediate stalking, tracking, and physical danger.
Survivors gain stronger privacy protections: providers must deny abusers access to post-termination data, remove or limit retention of sensitive stored data, and keep identifying documents confidential and destroyed within a set period.
Survivors receive operational support (clear confirmations, reference numbers, guidance to re-establish accounts without the abuser, and opt-out/alternative-notice options) that helps them regain control of vehicle services safely and document actions taken.
Covered manufacturers and service providers will incur new compliance, verification, and engineering costs that are likely to be passed on to consumers or raise service prices.
Allowing disabling or termination based on alleged conduct (without a conviction) and creating rapid-disable reporting pathways risks wrongful or accidental lockouts of legitimate users, temporarily denying access to vehicles and creating safety or mobility harms.
Broad statutory immunity for providers limits victims' or others' ability to seek legal remedy for negligent or wrongful actions taken under the law, reducing accountability for harms caused by compliance mistakes.
Based on analysis of 9 sections of legislative text.
Requires connected‑vehicle service providers to promptly disable an abuser’s remote access to a survivor’s vehicle and protect survivor data, with FCC rulemaking and federal preemption.
Requires vehicle manufacturers and connected‑vehicle service providers to quickly disable or terminate an abuser’s remote access to a survivor’s vehicle and related data, and to protect survivors’ privacy when a survivor requests such action. The law sets what information a survivor must provide, requires prompt confirmation and follow‑up notices to survivors, protects providers from liability for complying, preempts state or local laws on the same subject, and directs the FCC (with NHTSA consultation) to issue implementing regulations on a specified timeline. Providers may begin complying immediately and must be compliant within 180 days; the FCC must propose rules within 180 days and finalize regulations within two years of enactment.
Introduced March 14, 2025 by Debbie Dingell · Last progress March 14, 2025