,i  #aaeth ,,congress  #ast ,session    
,h4 ,r4 #gja  ,,in ,,the ,,house ,,of   
,,representatives  ,january #bd1        
#bjag,mr4 ,wilson of ,south ,carolina   
7for himself and ,mr4 ,ted ,lieu of     
,california7 introduced the following   
bill2 which was referred to the         
,committee on ,energy and ,commerce  ,a 
,,bill  ,to direct the ,administrator of
 the ,national ,highway ,traffic ,safety
 ,administration to conduct a study to  
determine appropriate cybersecurity     
standards for motor vehicles1 and for   
other purposes4  #a4 ,short title ,this 
,act may be cited as the ,security and  
,privacy in ,your ,car ,study ,act of   
#bjag or the ,,spy ,car ,study ,act of  
#bjag4  #b4 ,study on cybersecurity     
standards for motor vehicles  7a7 ,study
 required ,the ,administrator of the    
,national ,highway ,traffic ,safety     
,administration1 in consultation with   
the ,federal ,trade ,commission1 the    
,director of the ,national ,institute of
 ,standards and ,technology1 the        

,secretary of ,defense1 the ,automotive 
,information ,sharing and ,analysis     
,center1 ,,sae ,international1          
manufacturers of motor vehicles1        
manufacturers of original motor vehicle 
equipment1 and relevant academic        
institutions1 shall conduct a study to  
determine appropriate standards for the 
regulation of the cybersecurity of motor
 vehicles manufactured or imported for  
sale in the ,united ,states that should 
be adopted by the ,administration and   
any other appropriate ,federal agencies4
 ,the study shall include an            
identification of--  7#a7 the isolation 
measures that are necessary to separate 
critical software systems from other    
software systems2  7#b7 the measures    
that are necessary to detect and prevent
 or minimize in the software systems of 
motor vehicles anomalous codes          
associated with malicious behavior2     
7#c7 the techniques that are necessary  
to detect and prevent1 discourage1 or   
mitigate intrusions into the software   

systems of motor vehicles and other     
cybersecurity risks in motor vehicles1  
such as continuous penetration testing  
and on-demand risk assessments2  7#d7   
best practices to secure driving data   
collected by the electronic systems of  
motor vehicles while such data are      
stored onboard the vehicle1 in transit  
from the vehicle to another location1 in
 offboard storage1 and in long-term     
storage 7whether onboard or offboard the
 vehicle72 and  7#e7 a timeline for     
implementing systems and software that  
reflect the measures1 techniques1 and   
best practices identified under         
paragraphs 7#a7 through 7#d74  7b7      
,reports to ,congress  7#a7 ,preliminary
 report ,not later than #a year after   
the date of the enactment of this ,act1 
the ,administrator shall submit to the  
,committee on ,energy and ,commerce of  
the ,house of ,representatives and the  
,committee on ,commerce1 ,science1 and  
,transportation of the ,senate a report 
containing the preliminary findings of  

the study conducted under subsection    
7a74  7#b7 ,final report ,not later than
 #f months after the submission of the  
report under paragraph 7#a71 the        
,administrator shall submit to the      
committees described in such paragraph a
 report containing the complete findings
 of the study conducted under subsection
 7a71 including recommended dates for   
the adoption and effectiveness of the   
standards determined to be appropriate  
in such study and recommendations for   
any legislation that may be necessary to
 authorize the adoption of such         
standards4  7#c7 ,form of report ,the   
report required by paragraph 7#b7 shall 
be submitted in unclassified form but   
may contain a classified annex4  7c7    
,definitions ,in this section3 7#a7     
,administrator ,the term ,administrator 
means the ,administrator of the         
,national ,highway ,traffic ,safety     
,administration4  7#b7 ,critical        
software system ,the term critical      
software system means a software system 

of a motor vehicle that can affect the  
driver's control of the movement of the 
vehicle4  7#c7 ,driving data ,the term  
driving data includes any electronic    
information collected about-- 7,a7 a    
vehicle's status1 including its location
 or speed2 or  7,b7 any owner1 lessee1  
driver1 or passenger of a vehicle4