SB 994, as amended, Monning. Vehicles: vehicle information: privacy.
Existing law imposes various requirements upon manufacturers of motor vehicles sold or leased in this state with regard to disclosing information and providing equipment. A violation of these provisions is a crime.
This bill would enact the Consumer Car Information and Choice Act. The bill would require a manufacturer of any new motor vehicle sold or leased in this state that is manufactured on or after January 1, 2016, thatbegin insert records,end insert generatesbegin insert, stores,end insert or collects vehicle information, as defined, to make certain disclosures to the registered owner regarding thebegin insert
recordation,end insert generationbegin insert, storage,end insert and collection of that information. The bill would require the manufacturer to provide the registered owner of the vehicle with access to the vehicle informationbegin delete and the ability to securely transmit that information to a 3rd party selected by the registered ownerend delete, as specified.begin insert The bill would require the manufacturer to provide the registered owner with the ability to opt out of the recording, generation, storage, or collection of vehicle information, except as specified.end insert The bill would prohibit a manufacturer from limiting, impairing, or otherwise restrictingbegin delete, by any means,end delete
the ability of the registered owner to accessbegin delete, use, or transmitend delete his or her vehicle information, and would further prohibit the manufacturer from taking any adverse action against the registered owner for accessingbegin delete or using or transmittingend delete his or her vehicle information, as specified. The bill would prohibit vehicle information from being downloadedbegin delete, transmitted, or received by a person other thanend deletebegin insert or otherwise retrieved from the motor vehicle without the consent ofend insert the registered owner, except as specified.begin insert The bill would prohibit a manufacturer from conditioning the sale or
lease of a vehicle upon receiving consent from the registered owner to allow the manufacturer to sell, release, or otherwise disclose vehicle information to persons other than the registered owner. The bill would provide immunity from liability for manufacturers providing registered owners access to vehicle information, as specified.end insert
Because a violation of these provisions would be a crime, this bill would impose a state-mandated local program.
The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.
This bill would provide that no reimbursement is required by this act for a specified reason.
Vote: majority. Appropriation: no. Fiscal committee: yes. State-mandated local program: yes.
The people of the State of California do enact as follows:
This act shall be known, and may be cited, as the
2Consumer Car Information and Choice Act.
(a) The Legislature finds and declares all of the
4following:
5(1) Today’s motor vehicles are equipped with sophisticated
6computers that control everything from comfort and convenience
7features, including air temperature, seat positions, and infotainment,
8to critical safety features, such as air bags and antilock brakes, to
9complex engine systems, such as transmission, fuel, emissions,
10and exhaust systems.
11(2) These computers canbegin insert record,end insert generatebegin insert,
store,end insert and collect
12information that is important to consumers about the condition
13and performance of their motor vehicles, including repair,
14maintenance, and diagnostic information.
P3 1(3) These computers can alsobegin insert record,end insert generatebegin insert, store,end insert and collect
2sensitive personal information about consumers and their driving
3behaviorsbegin insert, as well as others in and around the motor vehicleend insert. For
4example, motor vehicles can collect precise location information
5as well as information about where and when consumers have
6driven their motor vehicles. Motor
vehicles can also collect
7information about how consumers drive, including information
8about braking, acceleration, speed, and the number of passengers
9carried.begin insert In some cases, motor vehicles can even collect personal
10information from consumers’ mobile phones, such as personal
11contact lists, text messages, and phone conversations.end insert
12(4) In 2014, approximately one in five new motor vehicles sold
13in California will be equipped with systems that can wirelessly
14transmit consumer vehicle information outside the motor vehicle.
15By 2025, it is expected that all new motor vehicles sold in
16California will have wireless data transmission capabilities along
17with the capacity to generate vast quantities of information about
18consumers, their driving habits, and the condition
and performance
19of their motor vehicles.
20(5) begin deleteIt is unclear who has end deletebegin insertUntil now, the law has not explicitly
21addressed who has end insertthe right to control the dissemination of
22consumer vehicle information, as there are no uniform standards
23or policies that address this issue with respect to the broad array
24of consumer vehicle information that may be shared. Today,
25consumers have limited ability to access their vehicle information
26or to transmit their vehiclebegin delete information from their motor vehicles begin insert
informationend insert.
27to service providers of their choiceend delete
28(6) Vehicle manufacturers have the technology to give
29consumers secure access to their vehicle information, and some
30manufacturers have deployed this technology to securely exchange
31vehicle information with third parties.
32(6)
end delete
33begin insert(7)end insert Restricting consumers’begin delete ability to choose who can access begin insert
access to information from their motor vehiclesend insert
34information from their motor vehicles reduces competition and
35innovation andend delete
36 negatively affects consumers’ ability tobegin delete select the services they
realize the full value of the motor vehicles they own or
37prefer andend delete
38leasebegin insert and make important choices about their privacyend insert.
39(b) It is therefore the intent of the Legislaturebegin delete to create a uniform
40policy that
ensuresend delete
P4 1of the kinds of information their motor vehiclesbegin insert record,end insert generatebegin insert,
2store,end insert and collect about them, including information about their
3driving habits and the condition of their motor vehicles. It is also
4the intent of the Legislature that consumersbegin delete are given more choiceend delete
5begin insert retain controlend insert over who can accessbegin delete and use this information from
this
6their motor vehicles as well as rights to securely transmitend delete
7information from their motor vehiclesbegin delete to service providers of their .
8choiceend delete
Section 9957 is added to the Vehicle Code, to read:
(a) This section applies to all motor vehicles
11manufactured on or after January 1, 2016.
12(b) A manufacturer of a new motor vehicle sold or leased in
13this state thatbegin insert records,end insert generatesbegin insert, stores,end insert or collects vehicle
14information shall do all of the following:
15(1) Disclose that the motor vehiclebegin insert records,end insert
generatesbegin insert, stores,end insert
16 or collects vehicle information and describebegin delete the typesend deletebegin insert each of the
17categoriesend insert of vehicle informationbegin insert recorded,end insert generatedbegin insert, stored,end insert or
18collected by the motor vehiclebegin insert, as well as the duration of the
19recording, collection, or storage,end insert in a plainly written statement
20included in the owner’s manual for the motor vehicle.
21(2) Provide a copy of the statement described in paragraph (1)
22in a separate document printed in no less than 12-point type to the
23prospective registered owner of the new motor vehicle prior to the
24purchase or lease of the vehicle.
25(3) Include in the statement included in the owner’s manual
26pursuant to paragraph (1) and the statement contained in the
27separate document described in paragraph (2) the following
28statement in 14-point bold type:
30“THIS MOTOR VEHICLEbegin insert RECORDS,end insert GENERATESbegin delete ANDend deletebegin insert,
31
STORES, ORend insert COLLECTS INFORMATION ABOUT YOU, HOW
32YOU DRIVE, AND THE CONDITION OF YOUR MOTOR
33VEHICLE. UNDER CALIFORNIA LAW, YOU HAVE THE
34RIGHT TObegin delete CHOOSE WHO CANend delete ACCESS THIS
35INFORMATIONbegin insert AND TO OPT OUT OF THE COLLECTION
36OF THIS INFORMATION IN MOST CIRCUMSTANCES. YOU
37ALSO HAVE THE RIGHT TO CONSENT TO WHO MAY
38RETRIEVE THIS INFORMATIONend insert FROM YOUR MOTOR
39begin delete VEHICLE.”end deletebegin insert VEHICLE. BEFORE ALLOWING YOUR VEHICLE
40MANUFACTURER TO SHARE YOUR INFORMATION WITH
P5 1THIRD PARTIES, YOU SHOULD CAREFULLY REVIEW EACH
2PARTY’S PRIVACY POLICY.end insertbegin insert”end insert
4(4) Affix the statement described in paragraph (3) securely in
5a clear and conspicuous manner to the side window or windshield
6of the new motor vehicle.
7(c) A manufacturer of a new motor vehicle sold or leased in this
8state thatbegin insert records,end insert generatesbegin insert, stores,end insert or collects vehicle information
9shall provide the registered owner of the motor vehicle with all of
10the following:
11(1) Access from the motor vehicle to the vehicle information
12begin insert as
the vehicle information is recorded, generated, stored, or
13collected by the motor vehicleend insert.
14(2) begin deleteFair and reasonable access end deletebegin insertAccess end insertto tools and information
15reasonably necessary tobegin delete useend deletebegin insert accessend insert the vehicle information.
16(3) The ability to securely transmit the vehicle information
17outside the motor vehicle to any person selected by the registered
18owner of the motor vehicle.
19(A) The manufacturer shall not impose any fees or charges on
20a registered owner to make transmissions of vehicle information
21pursuant
to this paragraph.
22(B) The manufacturer shall provide fair, nondiscriminatory, and
23reasonable means for persons selected by the registered owner in
24accordance with this paragraph to receive the vehicle information
25in a standard, usable format.
26(C) If the motor vehicle is equipped with a telematics system,
27the manufacturer shall provide the registered owner with the ability
28to use the telematics system to securely transmit vehicle
29information in accordance with this paragraph and shall provide
30fair, nondiscriminatory, and reasonable means for persons selected
31by the registered owner in accordance with this paragraph to
32securely access the telematics system to provide remote services
33that are requested by the registered owner.
34(3) Manufacturers may provide the access required under
35paragraph (2) for purchase on fair and reasonable terms. In
36determining whether terms are fair and reasonable, consideration
37may be given to relevant factors, including, but not limited to, the
38following:
P6 1(A) The net cost to the manufacturer’s franchised dealerships
2for similar information obtained from manufacturers, less any
3discounts, rebates, or other incentive programs.
4(B) The cost to the manufacturer for preparing and distributing
5the information, excluding any research and development costs,
6provided that the amortized capital costs for the preparation and
7distribution of the information may be included.
8(C) The price charged by other manufacturers for similar
9information.
10(D) The ability of aftermarket technicians, shops, and other
11small businesses to afford the information.
12(E) The means by which the information is distributed.
end insertbegin insert
13(F) The extent to which the information is used, which includes
14the number of users, frequency, duration, and volume of use.
15(G) Inflation.
end insertbegin insert
16(4) The ability to opt out of the recording, generation, storage,
17or collection of vehicle information other than vehicle information
18necessary for the repair or maintenance of the motor vehicle or
19for motor vehicle safety. A manufacturer may not deny any service
20or benefit to a registered owner for exercising his or her opt-out
21rights under this paragraph, unless the service or benefit is
22
technically dependent on the vehicle information that is no longer
23recorded, generated, stored, or collected due to the registered
24owner’s choice to opt out.
25(d) A manufacturer shall not limit, impair, or otherwise restrictbegin delete,
the ability of a registered owner to access
26by any means,end deletebegin delete, use, or
his or her vehicle information
27transmitend deletebegin delete. A manufacturer shall not begin insert or take
28take any adverse action against a registered owner for accessing
29or using his or her vehicle information or transmitting his or her
30vehicle information outside the motor vehicle to a person other
31than the manufacturer or obtaining services that use vehicle
32information from a person other than the manufacturer.end delete
33any adverse action, including the denial of any service or benefit,
34against a registered owner for accessing his or her vehicle
35information. This paragraph shall not be construed to prevent the
36adoption of security protocols to protect against unauthorized
37access to vehicle information.end insert
38(e) Vehicle information shall not be downloaded orbegin delete transmitted otherwise retrieved from the motor
39outside the motor vehicle orend delete
40vehiclebegin delete by a person other thanend deletebegin insert without the consent ofend insert the registered
P7 1owner of the motor vehicle, except under one of the following
2circumstances:
3(1) A registered owner of the motor vehicle consents to the
4download, transmission, or retrieval of his or her vehicle
5information.
6(2)
end delete
7begin insert(1)end insert The vehicle information is downloadedbegin delete, transmitted,end delete or
8retrieved by the manufacturer of the motor vehicle. The
9manufacturer shall notbegin delete releaseend deletebegin insert sell, release,end insert or otherwise disclose
10the vehicle information received pursuant to this paragraph to any
11person other than the registered owner of the motor vehicle, unless
12begin delete that vehicle information is in a form that cannot be used to identifyend delete
13 thebegin insert
manufacturer obtains the consent of theend insert registered ownerbegin delete or .
14driver of the motor vehicleend delete
15(3)
end delete
16begin insert(end insertbegin insert2)end insert The vehicle information is downloadedbegin delete, transmitted,end delete or
17retrieved for the purpose of diagnosing, servicing, or repairing a
18motor vehicle at the request of the registered owner or driver of
19that motor vehicle.begin insert
The recipient of vehicle information under this
20paragraph shall not sell, release, or otherwise disclose the vehicle
21information to any person other than the registered owner of the
22motor vehicle unless the recipient obtains the consent of the
23registered owner.end insert
24(4) For purposes of improving motor vehicle safety, including
25for medical research of the human body’s reaction to motor vehicle
26accidents, provided that the identity of the registered owner or
27driver is not disclosed in connection with that retrieved information.
28The disclosure of
the vehicle identification number (VIN) for
29purposes of improving vehicle safety, including for medical
30research of the human body’s reaction to motor vehicle accidents,
31does not constitute the disclosure of the identity of a registered
32owner or driver for purposes of this paragraph. A person authorized
33to download or otherwise retrieve vehicle information pursuant to
34this paragraph shall not release that vehicle information, except to
35share that information among the motor vehicle safety and medical
36research communities to advance motor vehicle safety, and only
37if the identity of the registered owner or driver is not disclosed.
38(3) The vehicle information is communicated to another motor
39vehicle or
transportation infrastructure through vehicular
P8 1communication networks for purposes of traffic management or
2motor vehicle safety.
3(5)
end delete
4begin insert(end insertbegin insert4)end insert In response to an order of a court having jurisdiction to issue
5the orderbegin insert under applicable standards of criminal and civil lawend insert.
6(f) A
manufacturer may not condition the sale or lease of a
7motor vehicle upon receipt of consent from the registered owner
8of the motor vehicle to allow the manufacturer to sell, release, or
9otherwise disclose vehicle information to persons other than the
10registered owner.
11(f)
end delete
12begin insert(g)end insert A registered owner of a motor vehicle shall not be compelled
13to access, download, or retrieve vehicle information from the motorbegin delete14 vehicle or transmit vehicle information
outside the motor vehicleend delete
15begin insert vehicle,end insert except pursuant to an order of a court having jurisdiction
16to issue the orderbegin insert under applicable standards of end insertbegin insertcriminal or civil
17lawend insert or as otherwise required by law.
18(h) This section shall not be construed to change, expand, or
19diminish the existing authority of law enforcement.
20(g)
end delete
21begin insert(i)end insert This section shall not be construed to require a manufacturer
22of a motor vehicle to disclose any trade secret.
23(h) This section does not relieve manufacturers of the duty to
24create secure telematics, computer, and other electronic systems
25in the motor vehicles they manufacture, including the duty to
26prevent unauthorized access into these systems.
27(i)
end delete
28begin insert(j)end insert This section does not supersede or modifybegin insert
any provisions of
29the Insurance Code or any regulations promulgated thereunder,
30including, but not limited to,end insert the provisions of Section 2632.5 of
31Title 10 of the California Code of Regulations concerning
32automobile insurance rating factors.
33(k) A manufacturer of a motor vehicle shall have no liability
34for any acts or omissions of a registered owner of the motor vehicle
35as a result of the manufacturer providing the registered owner
36access to vehicle information pursuant to this section.
37(l) This section shall not be construed to require the recording,
38generation, storage, or collection of vehicle information.
39(j)
end delete
P9 1begin insert(m)end insert For purposes of this section, “vehicle information” means
2any and all data that isbegin insert recorded,end insert generatedbegin insert, stored,end insert or collected
3by a motor vehicle through a computer or other device embedded
4or integrated into a motor vehiclebegin insert, other than an event data
5recorder governed under Section 9951end insertbegin insert and Part 563 of Title 49
6of the Code of Federal Regulations,end insert that can be used, either alone
7or with other information,
to distinguish or individually identify
8the registered owner of a motor vehicle, the driver of a motor
9vehicle, or the operation, use, or condition of a motor vehicle.
10“Vehicle information” includes, but is not limited to, all of the
11followingbegin insert when that information is recorded, generated, stored,
12or collected by a motor vehicle through a computer or other device
13embedded or integrated into a motor vehicle, other than an event
14data recorder governed under Section 9951 end insertbegin insertand Part 563 of Title
1549 of the Code of Federal Regulationsend insert:
16(1) The name, address, email address, and telephone number of
17the registered owner or driver of the motor vehicle and the motor
18vehicle’s vehicle identification
number.begin insert
This paragraph shall not
19be construed to restrict the ability of law enforcement to collect
20the information described in this paragraph from a registered
21owner of a motor vehicle even if the information is also recorded,
22generated, stored, or collected by the motor vehicle.end insert
23(2) Speed, distance, braking, acceleration, steering, seat-belt
24use, air bag deployment, collision, accident, geolocation,
25time-of-day driven, miles driven, duration driven, driving style,
26fuel, tire pressure, passenger, battery, door lock, and odometer
27information, sensor data, subsystem data, and diagnostic trouble
28codes.
29(k)
end delete
30begin insert(n)end insert For purposes of this section, “registered owner” means a
31registered owner as defined in Section 505 and, in the case of a
32leased vehicle, the lessee as shown on the registration card for the
33leased vehicle.
34(l) For purposes of this section, the term “telematics system”
35means a system that allows the transmission of data to and from
36the motor vehicle using one or more embedded or mobile
37communication devices that connect to telecommunications
38networks, including, but not limited to, wireless and landline
39communication networks and global positioning system satellites.
No reimbursement is required by this act pursuant to
2Section 6 of Article XIII B of the California Constitution because
3the only costs that may be incurred by a local agency or school
4district will be incurred because this act creates a new crime or
5infraction, eliminates a crime or infraction, or changes the penalty
6for a crime or infraction, within the meaning of Section 17556 of
7the Government Code, or changes the definition of a crime within
8the meaning of Section 6 of Article XIII B of the California
9Constitution.
O
96