Merkley Relaunches Effort to Protect Driver’s Privacy

Washington, D.C. - Oregon's U.S. Senator Jeff Merkley announced the reintroduction of his Car Privacy Rights Act, legislation to protect consumers' privacy from companies that collect and sell Americans' car data.

Currently, companies collect, store, and sell vehicle data without the driver's knowledge. Recent reporting has even documented automakers selling vehicle data to make billions in profit, including car manufacturers selling private consumer data to insurance companies-negatively impacting drivers' insurance premiums and auto loans.

"Folks shouldn't have to give up their privacy every time they get behind the wheel," said Merkley. "Car companies have no business collecting and profiting from personal information without the driver's knowledge or consent. This bill puts consumers back in control of their information and ensures that privacy comes before corporate profits."

Merkley's Car Privacy Rights Act would establish national privacy rights for car owners and ensure that consumers' data is private and secure. The bill sets limits on what companies-including automakers, insurance companies, and digital applications-can collect and share, while giving consumers the right to access their data and see which third parties have received it. It also requires companies to obtain consumers' explicit consent before selling or sharing their data and provide a clear, accessible option to opt out of data collection entirely.

The Car Privacy Rights Act stands up for the privacy of drivers across the nation by:

• Minimizing the data that car manufacturers and covered entities can collect to what is necessary to provide essential products and services;
• Empowering car owners to control their own personal data, including by requiring car manufacturers to allow consumers to access their car-related data;
• Banning car manufacturers and covered entities from sharing any consumer car-related data, unless the consumer is clearly notified of each instance of data sharing, its intent, and explicitly grants affirmative, express consent to allow the data transfer;
• Requiring all car manufacturers to allow consumers to easily revoke consent directly on their website and applications;
• Prohibiting a covered entity from selling consumers' car-related data with precise geolocation information;
• Mandating each car manufacturer and insurance company to annually submit a report to the Federal Trade Commission (FTC) regarding their consumer data privacy practices, data being collected, its purpose, to whom such data is being shared or sold, and an overview of their data sharing practices;
• Directing the FTC-in partnership with the Federal Communications Commission (FCC) and National Highway Traffic Safety Administration (NHTSA)-to issue guidance or promulgate regulations regarding how car manufacturers can address domestic violence issues related to any car applications with geolocation services.

The Car Privacy Rights Act is cosponsored by U.S. Senators Ben Ray Luján (D-NM) and Elizabeth Warren (D-MA).

The bill is endorsed by the American Civil Liberties Union (ACLU).

"Cars can now track where you are going, how often you go there, how fast you drive, what phone you connect to the car, and so much more. Auto manufacturers profit off of this information, violating your privacy without your knowledge or consent. The Car Privacy Rights Act would change that by limiting what information car manufacturers can collect and making sure that consumers, not companies, decide whether that information can be shared," said Jina John, ACLU Senior Policy Counsel of AI, Privacy, and Technology.

Full text of the Car Privacy Rights Act can be found by clicking here.

###