HB 367

O n or after July 1, 2025 , this bill prohibits a vehicle manufacturer or other business entity, or a third party on behalf of such business entity , (together, "entity"") from shar ing, sell ing, or otherwise di stribut ing a vehicle's driving data without the express, written consent of the owner of the vehicle, regardless of how or where the driving data is collected or stored. As used in this bill, ""driving data"" means information collected by a vehicle through the vehicle's systems and applications . NOTICE O n or after July 1, 2025, this bill requires a n entity seeking to sell, share, or otherwise distribute a vehicle's driving data to provide to the owner or purchaser of a vehicle in this state (i) a disclos ure that the driving data for the vehicle will be collected, a description of how the driving data will be collected, and the purpose for collecting the driving data; and (ii) a notice that driving data from or related to the vehicle will not be shared, so ld, or otherwise distributed without the explicit, written consent of the owner of the vehicle. If the entity receives notice, or has reason to know, that the vehicle was sold, then the entity must not share, sell, or otherwise distribute the vehicle's dr iving data unless the entity obtains the express, written consent of the new owner of the vehicle. RENEWAL OF CONSENT This bill requires a n entity to obtain consent within one year after consent was initially obtained, or by January 1 of the following y ear, whichever is later, and annually thereafter to continue to share, sell, or otherwise distribute a vehicle's driving data. If the entity does not receive the required consent, then the entity must not continue to share, sell, or otherwise distribute a vehicle's driving data. REVOCATION OF CONSENT This bill requires a n entity to maintain a manner by which a vehicle owner who has previously given the consent may revoke the consent. The mechanism by which a vehicle owner may revoke previously given co nsent must be easily accessible to the vehicle owner, including through the entity's website and applications. EXEMPTION This bill does not apply to sharing, selling, or otherwise distributing driving data to the national highway traffic safety administ ration or to another state or federal entity in accordance with applicable law. PENALTIES This bill provides that a violation of this bill constitutes a violation of the Tennessee Consumer Protection Act of 1977, and is subject to the penalties and remedies as provided in that Act ."