UtahH.B. 3572026 General SessionHouse

Amendments to Motor Vehicle Data Privacy

Sponsored By: Kristen Chevrier (Republican)

Signed by Governor

Electronic PrivacyTechnologyBusinessCommerce and TradeConsumer ProtectionPublic Utilities and TechnologyState Tax CommissionMotor VehiclesTransportationData and Cyber SecurityDivision of Motor Vehicles

Personalized for You

How does this bill affect your finances?

Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.

Free to download

Bill Overview

Analyzed Economic Effects

4 provisions identified: 3 benefits, 1 costs, 0 mixed.

Drivers get privacy controls in newer vehicles

For model-year 2030 and later vehicles, makers must provide clearly labeled, easy-to-find privacy controls through the vehicle’s interface. Any operator can see the types of personal data collected and types of third parties receiving it. Operators can opt out of data sales and targeted advertising, and delete readily accessible data stored in the vehicle. This deletion covers locally stored data entered by consumers or supplied through connected devices and accessible through the vehicle’s interface. Settings stay in place until changed, and makers cannot require a website or app to use these rights. A maker is exempt for a model only by showing that it cannot technologically provide the controls.

Utah vehicle consumers gain privacy protections

Beginning January 1, 2027, Utah’s consumer privacy law covers vehicle makers that sell or lease vehicles in Utah. These makers must collect, send, or store personal data through vehicle systems to be covered. The vehicle rules supplement the existing privacy law rather than replace it. Utah’s Motor Vehicle Division must post information about vehicle owners’ data privacy rights on its website.

Vehicle data deletion after court orders

Vehicle makers must delete all personal data within five business days after receiving a court order requiring deletion. The same deadline applies after receiving a deletion request with a copy of a legally issued protective order.

Some vehicle data uses skip consent

Beginning January 1, 2027, vehicle makers can collect the minimum personal data needed for internal product improvement without otherwise-required consent. They must use that data only for internal product improvement. Consent is also not required for data collected solely for vehicle safety, vehicle operation, or state or federal legal compliance. Temporary processing also skips consent when data stays inside the vehicle and is not stored longer than needed.

Sponsors & Cosponsors

Sponsor

Kristen Chevrier
Republican • House

Cosponsors

Wayne A. Harper
Republican • Senate

Roll Call Votes

All Roll Calls

Yes: 169 • No: 11

House vote • 3/6/2026

House/ concurs with Senate amendment

Yes: 57 • No: 0

Senate vote • 3/6/2026

Senate/ passed 2nd & 3rd readings/ suspension

Yes: 19 • No: 10

Senate vote • 2/26/2026

Senate Comm - Amendment Recommendation

Yes: 4 • No: 0

Senate vote • 2/26/2026

Senate Comm - Favorable Recommendation

Yes: 4 • No: 0

House vote • 2/19/2026

House/ passed 3rd reading

Yes: 65 • No: 1

House vote • 2/11/2026

House Comm - Favorable Recommendation

Yes: 10 • No: 0