No. HB 1557
Filed under Transportation.
Motor Vehicle Data Privacy and Autonomy; Prohibits manufacturer from certain actions relating to operator data; provides exceptions; prohibits manufacturer from certain actions relating to personal identifying information; requires manufacturer to provide motor vehicle owner with access to & control of operator data; requires manufacturer to create certain interface; provides reporting requirements; requires DHSMV, in consultation with specified entities, to establish at least one standard for interface by specified date; requires DHSMV to review & revise standard or standards by specified date & at specified intervals; provides that violation of certain provisions is unfair & deceptive trade practice; requires DHSMV to adopt rules.
Plain English Summary
AI-GENERATEDManufacturers can no longer access a vehicle's operator data unless the owner gives written, freely given, specific consent that can be easily withdrawn, or the access is solely to improve the vehicle's performance or safety.
Selling or sharing that data is banned too, except under a warrant, a court order the owner can challenge, an emergency, or the owner's own permission. Handing a person's identifying information to a foreign country of concern is banned outright, with no exceptions listed.
Manufacturers must give owners free, unrestricted access to and control over their own data through a secure interface, including an open programming interface that lets an owner delete their stored data and set their own preferences.
Breaking any of these rules counts as an unfair and deceptive trade practice under Florida consumer protection law, and DHSMV must set a technical standard for the required interface by January 1, 2028.
AIA manufacturer may not access a vehicle's operator data unless the owner gives consent that is freely given, informed, specific, in writing, and easily withdrawn, or unless the access is solely to improve vehicle performance or safety.
AIA manufacturer may not sell, lease, or share operator data unless required by a warrant, by a court order that gives the owner notice and a chance to object, to facilitate an emergency response, or unless the owner or their next of kin expressly permits it.
AIA manufacturer may not sell, license, rent, transfer, release, disclose, provide access to, or otherwise make available a person's identifying information to a foreign country of concern or foreign principal. Unlike the other prohibitions in this section, no exception is listed for this one.
AIA manufacturer must give the vehicle owner access to and control of operator data at no additional cost and without restriction, through an interface that is technologically neutral and secure.
AITo meet the access-and-control mandate, a manufacturer must create an open application programming interface that lets an owner delete all of their stored operator data and set any operator preference.
AIBreaking any requirement of this new section is treated as an unfair and deceptive trade practice under Florida's consumer protection law, part II of chapter 501.
AIThe section does not force a manufacturer to divulge proprietary confidential business information, except to the extent the access-and-control requirement elsewhere in this section already requires it.