Car Privacy Rights Act of 2026
Sponsored By: Senator Merkley, Jeff [D-OR]
Introduced
Summary
Gives consumers stronger control over car-related personal data. This bill would create a federal framework that limits when companies can collect, process, share, or sell vehicle and location data and requires clear consent and transparency.
Show full summary
- Consumers and families would get clearer privacy policies, rights to access their car-related data, and explicit consent pathways. The sale or sharing of precise geolocation data would be prohibited.
- Car manufacturers, insurers, application developers, and other covered entities would face limits on collection and processing, annual reporting to the Federal Trade Commission, and new rulemaking requirements. The FTC would coordinate with the Federal Communications Commission and the National Highway Traffic Safety Administration to issue guidance on geolocation tools and domestic violence risks.
- The Federal Trade Commission would be the primary federal enforcer with its existing powers. States could bring parens patriae suits, and consumers would have a private right of action with damages of at least $5,000 per violation (adjusted annually), plus possible punitive damages and attorney fees.
Personalized for You
How does this bill affect your finances?
Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Bill Overview
Analyzed Economic Effects
1 provisions identified: 1 benefits, 0 costs, 0 mixed.
New privacy rights for car owners
If enacted, this bill would create new federal privacy rules for companies that collect car-related data. Companies would be banned from selling or sharing precise geolocation data, defined as street-level or locations within 1,850 feet. They would need a clear, standalone notice and your affirmative consent before selling or sharing most car data, and you would be able to revoke consent online. You would get a privacy policy, could ask whether a company holds your data, and could request access and a list of business recipients. The FTC, states, and consumers would be able to enforce the rules; a winning consumer lawsuit would allow at least $5,000 per violation or actual damages. The FTC would issue guidance within 180 days on how carmaker apps should address domestic violence risks tied to location tracking.
Sponsors & CoSponsors
Sponsor
Merkley, Jeff [D-OR]
OR • D
Cosponsors
Sen. Luján, Ben Ray [D-NM]
NM • D
Sponsored 9/30/2026
Sen. Warren, Elizabeth [D-MA]
MA • D
Sponsored 9/30/2026
Roll Call Votes
No roll call votes available for this bill.
View on Congress.gov