The DRIVER Act mandates that motor vehicle manufacturers provide owners with secure, real-time access to their vehicle's electronic data at no additional cost beyond the purchase price. Owners gain joint control and unrestricted use of this data for any lawful purpose, including authorizing third-party access, though sales to foreign adversaries are explicitly prohibited. Manufacturers cannot impose fees for data decryption or require specific devices, and must facilitate user data deletion. The bill establishes controls over the sale of "covered data," which encompasses personal information like biometric identifiers, precise geolocation, and driver behavior. Manufacturers must offer owners a clear opportunity to opt out before selling such data, and motor vehicle fleet owners must provide drivers a similar opt-out, with an exception for commercial fleet data not used for harmful profiling. The Federal Trade Commission (FTC) is responsible for enforcing these provisions, treating violations as unfair or deceptive acts or practices. The Act clarifies that certain activities, such as transferring data to emergency responders, for safety operations, research, or warranty administration, are not considered a "sale." This ensures essential functions are not hindered. The DRIVER Act preempts any conflicting state or local laws related to motor vehicle owner data access, establishing a uniform national standard while not requiring manufacturers to divulge confidential business information beyond the specified data access requirements.
Get AI-generated questions to help you understand this bill better
Timeline
Introduced in House
Referred to the House Committee on Energy and Commerce.
Introduced in House
Referred to the House Committee on Energy and Commerce.
Commerce
DRIVER Act
USA119th CongressHR-6687| House
| Updated: 12/12/2025
The DRIVER Act mandates that motor vehicle manufacturers provide owners with secure, real-time access to their vehicle's electronic data at no additional cost beyond the purchase price. Owners gain joint control and unrestricted use of this data for any lawful purpose, including authorizing third-party access, though sales to foreign adversaries are explicitly prohibited. Manufacturers cannot impose fees for data decryption or require specific devices, and must facilitate user data deletion. The bill establishes controls over the sale of "covered data," which encompasses personal information like biometric identifiers, precise geolocation, and driver behavior. Manufacturers must offer owners a clear opportunity to opt out before selling such data, and motor vehicle fleet owners must provide drivers a similar opt-out, with an exception for commercial fleet data not used for harmful profiling. The Federal Trade Commission (FTC) is responsible for enforcing these provisions, treating violations as unfair or deceptive acts or practices. The Act clarifies that certain activities, such as transferring data to emergency responders, for safety operations, research, or warranty administration, are not considered a "sale." This ensures essential functions are not hindered. The DRIVER Act preempts any conflicting state or local laws related to motor vehicle owner data access, establishing a uniform national standard while not requiring manufacturers to divulge confidential business information beyond the specified data access requirements.