This bill, titled the "Auto Data Privacy and Autonomy Act," establishes new regulations to protect the privacy and autonomy of vehicle owners regarding their data. It broadly defines "covered data" to include both user data transferred to a vehicle and vehicle-generated data, such as geolocation and sensor information, from "covered vehicles" like motor vehicles, farming, or construction vehicles. A core provision prohibits manufacturers from accessing, selling, or sharing this covered data without the explicit, informed, written, and easily withdrawable consent of the vehicle owner, with limited exceptions for improving vehicle performance or safety, or in response to specific legal mandates like warrants or court orders. Furthermore, the bill mandates that manufacturers provide vehicle owners with comprehensive access to and control over all their covered data. This access must be provided at no additional cost beyond the vehicle's purchase price, in real-time, and without any restrictions on its use or authorization for third-party access. Manufacturers must facilitate this through the vehicle's interface port and wireless transmission, enabling an open application programming interface that allows owners to delete user data and set user preferences. The bill also specifically prohibits the sale or sharing of personally identifiable information of U.S. citizens or permanent residents to certain foreign governments, including China and Russia. The Federal Trade Commission (FTC) is designated as the enforcement authority, treating violations as unfair or deceptive acts or practices under the Federal Trade Commission Act. The FTC is also required to submit a report within 180 days of the bill's enactment, detailing current practices regarding vehicle data access, sharing, cybersecurity risks, and the feasibility of a technology-neutral, standards-based interface for owner data access. The act is set to take effect three months after its enactment, with no new appropriations authorized for its implementation.