Consumer Driving Data Protection Act of 2026.
What changed between versions
Participation in a telematics program changed from 'strictly voluntary' to simply 'voluntary,' removing the emphasis on the voluntariness requirement.
The consent documentation requirement was simplified from requiring consent 'in writing or through electronic means, consistent with the consumer's elected method of communication with the insurer' to just 'writing,' potentially reducing flexibility in how consumers can provide consent.
The legal process that permits an insurer to disclose telematics data to a third party was narrowed from 'a valid, court-issued subpoena or other legally enforceable process' to only a 'warrant,' which is a more restrictive standard for disclosure.
The knowledge standard for holding an insurer liable for a third-party telematics provider's violations was lowered from 'knew, or reasonably should have known' to just 'knew,' eliminating constructive knowledge and making it harder to hold insurers accountable for provider misconduct they should have detected.
The prohibition on collecting audio or visual recordings was narrowed from covering 'vehicle occupants or persons outside of the vehicle' to only 'occupants,' removing protection for people outside the vehicle.