WeVote
Log In

Bill

Bill

HR 6687

DRIVER Act

119th Congress Introduced by Mark Alford and 4 co-sponsors

Gives owners real-time, secure access and joint control of all vehicle data at no extra cost, with opt-out data-sale rights and strong privacy protections.

Introduced in House
0
WeVote Research Nonpartisan
Bill Summary · HR 6687

Summary of H.R. 6687 (119th Congress) – DRIVER Act

Purpose and intent

The DRIVER Act aims to grant motor vehicle owners near-blanket rights to access, control, and use the data generated by their own vehicles. The bill would require manufacturers to provide secure, real-time access and joint control of motor vehicle data to the owner at no cost beyond the purchase price of the vehicle. It also imposes protections around data sales, privacy, and national security.

Key provisions and changes

  • Immediate, owner-controlled data access (Section 2):

    • Manufacturers must give motor vehicle owners secure, real-time access to all motor vehicle data (including data generated by onboard sensors and components) and joint control over that data.
    • Owners may use the data for any lawful purpose and may authorize third parties to access or use the data.
    • No fees for decrypting data or using devices provided by the manufacturer.
    • Access provided through standard interfaces (e.g., OBD ports) and via wireless transmission, with a mechanism to delete user data.
    • Compliance with voluntary automotive cybersecurity standards (like ISO/SAE 24134) is required.

  • Data sale controls and opt-out rights (Section 3):

    • Vehicle owners retain a clear, conspicuous opt-out option before any sale of “covered data.”
    • For motor vehicle fleet owners, drivers or operators must be given opt-out rights before sale of data, with a limited exception for data generated in employment unless the use would cause significant harm or legal issues to someone outside employment.
    • National security restrictions prohibit knowingly selling covered data to certain countries (North Korea, China, Russia, Iran, Venezuela).

  • Permitted exceptions (Section 3):

    • Sale restrictions do not apply to emergency responders, certain vehicle safety or diagnostic communications, warranty administration, fraud/claims investigations, and other listed purposes.
    • Data transfers may occur for research, product improvement, or cybersecurity-related actions, among others, under specified circumstances.

  • Enforcement (Section 4):

    • Violations are treated as unfair or deceptive acts under the FTC Act.
    • The Federal Trade Commission would enforce the act, with all standard FTC penalties and authorities.

  • Confidential information protection (Section 5):

    • The act does not compel disclosure of confidential business information beyond what is necessary for compliance.

  • Preemption of state law (Section 6):

    • States or political subdivisions cannot maintain laws that regulate section 2, effectively preempting conflicting state data-access requirements.

  • Definitions (Section 7):

    • Key terms clarified: motor vehicle data, covered data (biometric data, precise geolocation, driver behavior), motor vehicle owner and fleet owner, personal data, precise geolocation (within 1,750 feet), and other pertinent concepts.

Who and what would be affected

  • Manufacturers of motor vehicles would be required to provide real-time, secure access and co-control of data to owners.
  • Motor vehicle owners and lessees would gain direct access, control, and the ability to share data with third parties.
  • Motor vehicle fleet owners would face opt-out requirements when selling covered data, with defined exceptions.
  • Third-party service providers could obtain access with owner consent, subject to security and privacy protections.
  • FTC would oversee enforcement, with penalties for noncompliance.

Timeline and process

  • The bill, introduced December 12, 2025, has been referred to the House Committee on Energy and Commerce. No specific implementation timeline or phase-in period is provided in the text available.

Overall, the DRIVER Act seeks to redefine data ownership in the automotive ecosystem, enhancing consumer data rights and imposing guardrails on data sales and national security considerations.

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.