Sen. Mike Lee, U.S. Senator for Utah | Official U.S. Senate headshot
Sen. Mike Lee, U.S. Senator for Utah | Official U.S. Senate headshot
Senators Mike Lee (R-UT) and Jeff Merkley (D-OR) have introduced the Auto Data Privacy and Autonomy Act, a bipartisan bill designed to give vehicle owners more control over their personal data. This legislative effort is timely as connected vehicles are expected to constitute 95% of all new cars by 2030.
Senator Lee emphasized the importance of ownership equating to control, stating, “Americans deserve to decide who has access to their personal data and how it is used—whether they are driving to work, harvesting crops, or operating machinery on a construction site." He added that the bill aims to restore transparency in vehicle data management.
Senator Merkley expressed concerns about privacy invasions by large corporations. "You shouldn’t be worried about billionaire corporations invading your privacy and stealing your data every time you start your car," he said. He believes this bipartisan proposal offers a sensible solution for Americans regarding their vehicle data rights.
Representative Eric Burlison (R-MO), who is spearheading the companion bill in the House, stated that the legislation prioritizes consumer rights by protecting sensitive personal information from exploitation. He highlighted that "The Auto Data Privacy and Autonomy Act puts Americans back in the driver’s seat when it comes to their personal data."
NAFA's CEO Bill Schankel praised the initiative, recognizing its potential impact on efficient fleet operations. Similarly, Sharkey Laguana from the American Car Rental Association lauded the bill for aligning with ACRA's mission of growth while safeguarding customer privacy.
A Salesforce survey highlighted confusion among U.S. car owners regarding connected cars and their data collection practices. The proposed act seeks to address these issues by requiring informed consent for data collection and restricting unauthorized data sharing.
The act includes several key provisions: informed consent mandates for OEMs, prohibitions on sharing or selling customer data without consent, protections against national security threats through restricted data sharing with adversarial nations, and technology-neutral standards for vehicle owner access set by NIST. It also allows owners to delete their vehicle's collected data.
The legislation aims to balance protecting OEM business interests while upholding consumer rights in an increasingly connected automotive landscape.