SPY Car Study Act of 2017

Security and Privacy in Your Car Study Act of 2017 or the SPY Car Study Act of 2017

This bill requires the National Highway Traffic Safety Administration to conduct a study to determine and recommend standards for the regulation of the cybersecurity of motor vehicles manufactured or imported for sale in the United States. The study shall identify:

• isolation measures that are necessary to separate critical software systems that can affect the driver's control of the movement of the vehicle from other software systems;
• measures that are necessary to detect and prevent or minimize anomalous codes, in vehicle software systems, associated with malicious behavior;
• techniques that are necessary to detect and prevent, discourage, or mitigate intrusions into vehicle software systems and other cybersecurity risks in motor vehicles; and
• best practices to secure driving data about a vehicle's status or about the owner, lessee, driver, or passenger of a vehicle that is collected by the electronic systems of motor vehicles; and
• a timeline for implementing systems and software that reflect such measures, techniques, and best practices.