,,ii  #aad? ,,congress  #a/ ,session    
,s4 #ahjf  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,july #ba1 #bjae ,mr4  
,m>key 7= himself & ,mr4 ,blum5?al7     
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,comm]ce1 ,sci5ce1 & ,transportation  ,a
 ,,bill  ,to protect consum]s f security
 & privacy ?reats to _! motor vehicles1 
& = o!r purposes4  #a4 ,%ort title  ,?is
 ,act may be cit$ z ! ,security &       
,privacy 9 ,y\r ,c> ,act ( #bjae or !   
,,spy ,c> ,act ( #bjae4  #b4            
,cyb]security /&>ds = motor vehicles    
7a7 ,9 g5]al ,*apt] #cja ( title #di1   
,unit$ ,/ates ,code1 is am5d$-- 7#a7 9  
section #cjajb7;a7--  7,a7 by r$esignat+
 p>agraphs 7#d7 ?r\gh 7#aa7 z p>agraphs 
7#aj7 ?r\gh 7#ag71 respectively2  7,b7  
by r$esignat+ p>agraphs 7#a7 ?r\gh 7#c7 
z p>agraphs 7#d7 ?r\gh 7#f71            
respectively2  7,c7 by ins]t+ be=e      
p>agraph 7#c71 z r$esignat$1 ! foll[+3  
7#a7 ,adm9i/rator means ! ,adm9i/rator (
 ! ,national ,highway ,traffic ,safety  

,adm9i/ration2  7#b7 ,commission means !
 ,f$]al ,trade ,commission2  7#c7       
critical s(tw>e sy/ems means s(tw>e     
sy/ems t c affect ! driv]'s control ( ! 
vehicle movem5t2  2 &  7,d7 by ins]t+   
aft] p>agraph 7#f71 z r$esignat$1 !     
foll[+3  7#g7 driv+ data include1 b are 
n limit$ to1 any electronic in=mation   
collect$ ab\t--  7,a7 a vehicle's /atus1
 includ+1 b n limit$ to1 its location or
 spe$2 &  7,b7 any own]1 lessee1 driv]1 
or pass5g] ( a vehicle2  7#h7 entry     
po9ts include1 b are n limit$ to1 means 
by :i*-- 7,a7 driv+ data may be access$1
 directly or indirectly2 or  7,b7       
control signals may be s5t or receiv$   
ei!r wirelessly or ?r\gh wir$           
connections2  7#i7 hack+ means !        
unau?oriz$ access to electronic controls
 or driv+ data1 ei!r wirelessly or ?r\gh
 wir$ connections2  2 &  7#b7 by add+ at
 ! end ! foll[+3  #cjabi4 ,cyb]security 
/&>ds  7a7 ,cyb]security /&>ds  7#a7    
,requirem5t ,all motor vehicles         
manufactur$ = sale 9 ! ,unit$ ,/ates on 

or aft] ! date t is #b ye>s aft] ! date 
on :i* f9al regulations are prescrib$   
pursuant to section #b7;b77#b7 ( ! ,,spy
 ,c> ,act ( #bjae %all comply ) !       
cyb]security /&>ds set =? 9 p>agraphs   
7#b7 ?r\gh 7#d74  7#b7 ,protection aga9/
 hack+  7,a7 ,9 g5]al ,all entry po9ts  
to ! electronic sy/ems ( ea* motor      
vehicle manufactur$ = sale 9 ! ,unit$   
,/ates %all be equipp$ ) reasonable     
measures to protect aga9/ hack+ attacks4
  7,b7 ,isolation measures ,! measures  
ref]r$ to 9 subp>agraph 7,a7 %all       
incorporate isolation measures to       
sep>ate critical s(tw>e sy/ems f        
noncritical s(tw>e sy/ems4  7,c7        
,evaluation ,! measures ref]r$ to 9     
subp>agraphs 7,a7 & 7,b7 %all be        
evaluat$ = security vuln]abilities      
foll[+ be/ security practices1 includ+  
appropriate applications ( te*niques su*
 z p5etration te/+4  7,d7 ,adju/m5t ,!  
measures ref]r$ to 9 subp>agraphs 7,a7 &
 7,b7 %all be adju/$ & updat$ bas$ on ! 
results ( ! evaluation describ$ 9       

subp>agraph 7,c74  7#c7 ,security (     
collect$ in=mation ,all driv+ data      
collect$ by ! electronic sy/ems t are   
built into motor vehicles %all be       
reasonably secur$ to prev5t unau?oriz$  
access--  7,a7 :ile su* data are /or$   
onbo>d ! vehicle2  7,b7 :ile su* data   
are 9 transit f ! vehicle to ano!r      
location2 &  7,c7 9 any subsequ5t (fbo>d
 /orage or use4  7#d7 ,detection1       
report+1 & respond+ to hack+ ,any motor 
vehicle t pres5ts an entry po9t %all be 
equipp$ ) capabilities to imm$iately    
detect1 report1 & /op attempts to       
int]cept driv+ data or control !        
vehicle4  7b7 ,p5alties ,a p]son t      
violates ?is section is liable to !     
,unit$ ,/ates ,gov]nm5t = a civil p5alty
 ( n m ?an #e1jjj = ea* violation 9     
accordance ) section #cjafe4  4  7b7    
,rulemak+  7#a7 ,9 g5]al ,n lat] ?an #ah
 mon?s aft] ! date ( ! enactm5t ( ?is   
,act1 ! ,adm9i/rator1 aft] consultation 
) ! ,commission1 %all issue a ,notice ( 
,propos$ ,rulemak+ to c>ry out section  

#cjabi ( title #di1 ,unit$ ,/ates ,code1
 z add$ by subsection 7a74  7#b7 ,f9al  
regulations ,n lat] ?an #c ye>s aft] !  
date ( ! enactm5t ( ?is ,act1 !         
,adm9i/rator1 aft] consultation ) !     
,commission1 %all issue f9al regulations
 to c>ry out section #cjabi ( title #di1
 ,unit$ ,/ates ,code1 z add$ by         
subsection 7a74  7#c7 ,updates ,n lat]  
?an #c ye>s aft] f9al regulations are   
issu$ pursuant to p>agraph 7#b7 & n less
 frequ5tly ?an once e #c ye>s !reaft]1 !
 ,adm9i/rator1 aft] consultation ) !    
,commission1 %all--  7,a7 review !      
regulations issu$ pursuant to p>agraph  
7#b72 &  7,b7 update su* regulations1 z 
necess>y4  7c7 ,cl]ical am5dm5t ,! table
 ( sections = *apt] #cja ( title #di1   
,unit$ ,/ates ,code1 is am5d$ by /rik+ !
 item relat+ to section #cjabh & ins]t+ 
! foll[+3  #cjabh4 ,vehicle rollov]     
prev5tion & cra% mitigation4 #cjabi4    
,cyb]security /&>ds4  4  7d7 ,con=m+    
am5dm5t ,section #cjafe7;a77#a7 ( title 
#di1 ,unit$ ,/ates ,code1 is am5d$ by   

ins]t+ #cjabi1 aft] #cjabg14  #c4 ,cyb] 
da%bo>d  7a7 ,9 g5]al ,section #cbcjb ( 
title #di1 ,unit$ ,/ates ,code1 is am5d$
 by ins]t+ aft] subsection 7b7 ! foll[+3
  7c7 ,cyb] da%bo>d  7#a7 ,9 g5]al ,all 
motor vehicles manufactur$ = sale 9 !   
,unit$ ,/ates on or aft] ! date t is #b 
ye>s aft] ! date on :i* f9al regulations
 are prescrib$ pursuant to section      
#c7;b77#b7 ( ! ,,spy ,c> ,act ( #bjae   
%all display a cyb] da%bo>d1 z a        
compon5t ( ! label requir$ to be affix$ 
to ea* motor vehicle "u section         
#cbijh7;b74  7#b7 ,features ,! cyb]     
da%bo>d requir$ "u p>agraph 7#a7 %all   
in=m consum]s1 ?r\gh an easy-to-und]/&1 
/&>diz$ graphic1 ab\t ! ext5t to :i* !  
motor vehicle protects ! cyb]security & 
privacy ( motor vehicle own]s1 lessees1 
driv]s1 & pass5g]s beyond ! m9imum      
requirem5ts set =? 9 section #cjabi (   
?is title & 9 section #bg ( ! ,f$]al    
,trade ,commission ,act4  4  7b7        
,rulemak+  7#a7 ,9 g5]al ,n lat] ?an #ah
 mon?s aft] ! date ( ! enactm5t ( ?is   

,act1 ! ,adm9i/rator1 aft] consultation 
) ! ,commission1 %all prescribe         
regulations = ! cyb]security & privacy  
in=mation requir$ to be display$ "u     
section #cbcjb7;c7 ( title #di1 ,unit$  
,/ates ,code1 z add$ by subsection 7a74 
7#b7 ,f9al regulations ,n lat] ?an #c   
ye>s aft] ! date ( ! enactm5t ( ?is     
,act1 ! ,adm9i/rator1 aft] consultation 
) ! ,commission1 %all issue f9al        
regulations to c>ry out section #cbcjb (
 title #di1 ,unit$ ,/ates ,code1 z add$ 
by subsection 7a74  7#c7 ,updates ,n    
less frequ5tly ?an once e #c ye>s1 !    
,adm9i/rator1 aft] consultation ) !     
,commission1 %all--  7,a7 review !      
regulations issu$ pursuant to p>agraph  
7#b72 &  7,b7 update su* regulations1 z 
necess>y4  #d4 ,privacy /&>ds = motor   
vehicles  7a7 ,9 g5]al ,! ,f$]al ,trade 
,commission ,act 7#ae ,u4,s4,c4 #da et  
seq47 is am5d$ by ins]t+ aft] section   
#bf 7#ae ,u4,s4,c4 #eg;c-#b7 ! foll[+3  
#bg4 ,privacy /&>ds = motor vehicles    
7a7 ,9 g5]al ,all motor vehicles        

manufactur$ = sale 9 ! ,unit$ ,/ates on 
or aft] ! date t is #b ye>s aft] ! date 
on :i* f9al regulations are prescrib$   
pursuant to subsection 7e7 %all comply )
 ! features requir$ "u subsections 7b7  
?r\gh 7d74  7b7 ,transp>5cy ,ea* motor  
vehicle %all provide cle> & conspicu\s  
notice1 9 cle> & pla9 language1 to !    
own]s or lessees ( su* vehicle ( !      
collection1 transmission1 ret5tion1 &   
use ( driv+ data collect$ f su* motor   
vehicle4  7c7 ,consum] control  7#a7 ,9 
g5]al ,subject to p>agraphs 7#b7 & 7#c71
 own]s or lessees ( motor vehicles %all 
be giv5 ! option ( t]m9at+ ! collection 
& ret5tion ( driv+ data4  7#b7 ,access  
to navigation tools ,if a motor vehicle 
own] or lessee decides to t]m9ate !     
collection & ret5tion ( driv+ data "u   
p>agraph 7#a71 ! own] or lessee %all n  
lose access to navigation tools or o!r  
features or capabilities1 to ! ext5t    
te*nically possible4  7#c7 ,exception   
,p>agraph 7#a7 %all n apply to driv+    
data /or$ z "p ( ! electronic data      

record] sy/em or o!r safety sy/ems      
on-bo>d ! motor vehicle t are requir$ = 
po/-incid5t inve/igations1 emissions    
hi/ory *ecks1 cra% avoidance or         
mitigation1 or o!r regulatory compliance
 programs4  7d7 ,limitation on use (    
p]sonal driv+ in=mation  7#a7 ,9 g5]al  
,a manufactur] 7includ+ an orig9al      
equipm5t manufactur]7 may n use any     
in=mation collect$ by a motor vehicle = 
adv]tis+ or m>ket+ purposes )\t         
affirmative express cons5t by ! own] or 
lessee4  7#b7 ,reque/s ,cons5t reque/s  
"u p>agraph 7#a7-- 7,a7 %all be cle> &  
conspicu\s2  7,b7 %all be made 9 cle> & 
pla9 language2 &  7,c7 may n be a       
condition = ! use ( any nonm>ket+       
feature1 capability1 or functionality ( 
! motor vehicle4  7e7 ,en=cem5t  ,a     
violation ( ?is section %all be treat$ z
 an unfair & deceptive act or practice 9
 violation ( a rule prescrib$ "u section
 #ah7;a77#a77;,b74  4  7b7 ,rulemak+    
7#a7 ,9 g5]al ,n lat] ?an #ah mon?s aft]
 ! date ( ! enactm5t ( ?is ,act1 !      

,commission1 aft] consultation ) !      
,adm9i/rator ( ! ,national ,highway     
,traffic ,safety ,adm9i/ration 7ref]r$  
to 9 ?is subsection z ! ,adm9i/rator71  
%all prescribe regulations1 9 accordance
 ) section #eec ( title #e1 ,unit$      
,/ates ,code1 to c>ry out section #bg ( 
! ,f$]al ,trade ,commission ,act1 z add$
 by subsection 7a74  7#b7 ,f9al         
regulations ,n lat] ?an #c ye>s aft] !  
date ( ! enactm5t ( ?is ,act1 !         
,commission1 aft] consultation ) !      
,adm9i/rator1 %all issue f9al           
regulations1 9 accordance ) section #eec
 ( title #e1 ,unit$ ,/ates ,code1 to    
c>ry out section #bg ( ! ,f$]al ,trade  
,commission ,act1 z add$ by subsection  
7a74  7#c7 ,updates ,n less frequ5tly   
?an once e #c ye>s1 ! ,commission1 aft] 
consultation ) ! ,adm9i/rator1 %all--   
7,a7 review ! regulations prescrib$     
pursuant to p>agraph 7#b72 &  7,b7      
update su* regulations1 z necess>y4