Auto Data Privacy and Autonomy Act

The Auto Data Privacy and Autonomy Act would prohibit manufacturers of covered vehicles—including motor vehicles and those used for farming or construction—from accessing, selling, or sharing covered data (user and vehicle-generated data) without the owner’s affirmative, informed, written, and withdrawable consent, except for limited purposes like improving vehicle safety or complying with legal warrants. It requires manufacturers to provide vehicle owners with free, real-time, unrestricted access to and control of their covered data via open interfaces, including the ability to delete data and adjust settings, and mandates a federal report on data practices and cybersecurity risks. Violations would be enforced by the Federal Trade Commission as unfair or deceptive acts under existing law, with no new funding authorized for implementation. The bill would take effect three months after enactment.