SPY Car Act of 2017
The source supplies the latest action, but no lifecycle stage.
Latest action (21 Mar 2017): Read twice and referred to the Committee on Commerce, Science, and Transportation.
What this bill does
The "SPY Car Act of 2017" is a proposed bill that would establish new regulations for motor vehicle cybersecurity and privacy. It directs the National Highway Traffic Safety Administration (NHTSA) to create rules requiring vehicles to protect against unauthorized access to electronic controls and driving data, including location, speed, and information about occupants. These regulations would also mandate that vehicles can detect, report, and stop hacking attempts.
The bill also proposes that NHTSA require a "cyber dashboard" on new vehicle labels to inform consumers about a car's cybersecurity and privacy protections. Additionally, the Federal Trade Commission would develop rules requiring manufacturers to notify owners about data collection, allow owners to stop such collection (except for essential safety systems), and prohibit the use of collected data for marketing without consent. Violations could result in civil penalties.
This bill was introduced in the Senate in March 2017 and has been referred to the Committee on Commerce, Science, and Transportation. If enacted, NHTSA and the Federal Trade Commission would have deadlines to issue proposed and final regulations.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
Security and Privacy in Your Car Act of 2017 or the SPY Car Act of 2017
This bill directs the National Highway Traffic Safety Administration (NHTSA) to conduct a rulemaking to issue motor vehicle cybersecurity regulations that require motor vehicles manufactured for sale in the United States to protect against unauthorized access to: (1) electronic controls or driving data, including information about the vehicle's location, speed, owner, driver, or passengers; or (2) driving data collected by electronic systems built into a vehicle while that data is stored onboard the vehicle, in transit from the vehicle to another location, or subsequently stored or used off-board the vehicle. The regulations must require vehicles with accessible data or control signals to be capable of detecting, reporting, and stopping attempts to intercept such driving data or control the vehicle.
A violator is liable to the U.S. government for a civil penalty of up to $5,000 for each violation.
NHTSA must also conduct a rulemaking to require the fuel economy labeling that manufacturers attach to motor vehicles to display a "cyber dashboard" with a standardized graphic to inform consumers about the extent to which the vehicle protects individuals' cybersecurity and privacy beyond the minimum requirements.
The Federal Trade Commission is required to conduct a rulemaking to: (1) require motor vehicles to notify owners or lessees about the collection, transmission, retention, and use of driving data; (2) provide owners or lessees with the option to terminate such data collection and retention (except onboard safety systems required for post-incident investigations, emissions, crash avoidance, and other regulatory compliance programs) without losing navigation tools or other features; and (3) prohibit manufacturers from using collected information for advertising or marketing purposes without the owner's or lessee's consent. Violations are to be treated as unfair or deceptive acts or practices under the Federal Trade Commission Act.
Timeline
21 Mar 2017
Read twice and referred to the Committee on Commerce, Science, and Transportation.
Common questions
- What does S. 680 do?
- The "SPY Car Act of 2017" is a proposed bill that would establish new regulations for motor vehicle cybersecurity and privacy. It directs the National Highway Traffic Safety Administration (NHTSA) to create rules requiring vehicles to protect against unauthorized access to electronic controls and driving data, including location, speed, and information about occupants. These regulations would also mandate that vehicles can detect, report, and stop hacking attempts. The bill also proposes that NHTSA require a "cyber dashboard" on new vehicle labels to inform consumers about a car's cybersecurity and privacy protections. Additionally, the Federal Trade Commission would develop rules requiring manufacturers to notify owners about data collection, allow owners to stop such collection (except for essential safety systems), and prohibit the use of collected data for marketing without consent. Violations could result in civil penalties. This bill was introduced in the Senate in March 2017 and has been referred to the Committee on Commerce, Science, and Transportation. If enacted, NHTSA and the Federal Trade Commission would have deadlines to issue proposed and final regulations.
- Has S. 680 become law?
- The source does not supply a confirmed lifecycle stage for S. 680. Check the latest action and official source below.
- Who sponsored S. 680?
- S. 680 was sponsored by Sen. Markey, Edward J. [D-MA] (D-MA), with 2 cosponsors.
- What's the latest action on S. 680?
- Read twice and referred to the Committee on Commerce, Science, and Transportation. (21 Mar 2017).
Related bills in Transportation and Public Works
SUN Act
Rural Disaster Fairness Act of 2026
Modern Skies Act
Aviation Medication Transparency Act of 2026
More bills from Sen. Markey, Edward J. [D-MA]
Facial Recognition and Biometric Technology Moratorium Act of 2026
Cybersecurity and AI Board of Investigations Act of 2026
Workforce Opportunities for Communities in Recovery Act
Civilian Climate Corps for Jobs and Justice Act
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.