California passes car data privacy law to protect domestic abuse survivors

A bill requiring connected car manufacturers to allow drivers to cut off remote access to their vehicles so they cannot be tracked by abusers was signed into law by California Gov. Gavin Newsom on Friday.

The measure, which received strong support in the California legislature, was passed as part of a package of eight bills designed to help domestic violence survivors. 

The legislation reflects the increasing sophistication of internet-connected vehicles’ capabilities, including the ability to track a user’s whereabouts from afar.

Because manufacturers typically produce car models that can be sold in a variety of markets, it is thought that the California bill could lead to a nationwide change.

News reports late last year documented how abusers have used connected cars to stalk former partners, and the issue has been getting the attention of regulators.

Under the new California law, automakers will have to change how the connected cars they sell work by allowing drivers who establish that they legally possess a given vehicle to request that specific people can no longer remotely access their car.

The law also will ban automakers from charging a fee to drivers seeking to cut off remote access and requires manufacturers to create an easy to use process for submitting requests. It also requires that automakers provide in-vehicle alerts to drivers if “remote vehicle technology” is being used. 

“We applaud California's governor and lawmakers for passing the first law that specifically tackles abuse perpetrated through vehicle technologies,” Andrea Amico, founder and CEO of Privacy4Cars, said via email. “Sadly, much more is needed.”

Earlier this year Amico’s organization, along with a coalition of domestic violence advocacy groups, filed comments with the Federal Communications Commission (FCC) calling on it to require that automakers disclose on dealership window stickers if cars allow remote access and create a hotline for survivors seeking information about how to disable it.

In April, the FCC announced it is exploring how the agency can use existing law to hold automakers and wireless service providers accountable for ensuring domestic violence survivors who are drivers of connected cars cannot be harassed by abusers.

The agency’s formal proceeding, now underway, is examining whether FCC rules’ changes are needed to address the problem.