Auto Data Privacy and Autonomy Act
Sponsored By: Representative Burlison, Eric [R-MO-7]
Introduced
Summary
Gives vehicle owners strong control over their car's data. This bill would require manufacturers to get affirmative owner consent before accessing, selling, or sharing most vehicle data and would require free, real-time owner access and control through open, non‑proprietary interfaces.
Show full summary
- Vehicle owners: Owners must be given access to and control of all data generated or processed onboard or transferred to their vehicle at no extra cost beyond the purchase price. They can delete user data and set preferences through an open API or the vehicle interface.
- Manufacturers: Manufacturers may not access covered data without written, specific, withdrawable owner consent except to improve vehicle safety or performance. They are barred from selling personally identifiable information to North Korea, China, Russia, Iran, or Venezuela.
- Enforcement and oversight: The Federal Trade Commission would treat violations as unfair or deceptive acts under FTC law and may impose penalties. The Commission must report to Congress within 180 days on who accesses vehicle data, cybersecurity risks, foreign ties, and the feasibility of a standards-based owner access interface.
Your PRIA Score
Personalized for You
How does this bill affect your finances?
Sign up for a PRIA Policy Scan to see your personalized alignment score for this bill and every other piece of legislation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.
Bill Overview
Analyzed Economic Effects
4 provisions identified: 3 benefits, 0 costs, 1 mixed.
Limits on selling vehicle data
If enacted, manufacturers could not sell, lease, or otherwise share covered vehicle data except in narrow cases. They could share data if a lawful warrant or court order requires it and the owner gets notice and at least 48 hours to object and request a hearing, or to facilitate an emergency response. The bill would also bar sharing personally identifiable information of U.S. citizens or lawful permanent residents with DPRK, China, Russia, Iran, or Venezuela.
Owner control over vehicle data
If enacted, manufacturers would have to give vehicle owners access to and control of all data generated, processed, or transferred to the vehicle. Access would be free beyond the purchase price, available in real time, through the vehicle port and wireless if supported, and via an open API that lets owners delete data and set preferences. Manufacturers could not access covered data without the owner’s clear written consent, except when access is solely to improve vehicle performance or safety. Manufacturers would not have to disclose trade secrets beyond what is needed to meet these owner access requirements.
FTC enforcement and timing rules
If enacted, the Federal Trade Commission would enforce the bill using its existing powers under the FTC Act and could seek the same penalties and remedies. The bill would take effect three months after enactment. No new appropriations would be authorized, so the FTC would have to carry out enforcement using funds already appropriated.
Which vehicles and data covered
If enacted, the bill would define key terms like "covered vehicle," "covered data," "vehicle-generated data," "user data," "geolocation data," and "personally identifiable information." It would also name the Federal Trade Commission as the enforcing Commission. These definitions would determine what vehicles and data the rules apply to.
Sponsors & CoSponsors
Sponsor
Burlison, Eric [R-MO-7]
MO • R
Cosponsors
Onder
MO • R
Sponsored 12/18/2025
Rep. Biggs, Andy [R-AZ-5]
AZ • R
Sponsored 12/18/2025
Rep. Burchett, Tim [R-TN-2]
TN • R
Sponsored 1/12/2026
Davidson
OH • R
Sponsored 2/24/2026
Roll Call Votes
No roll call votes available for this bill.
View on Congress.gov