You are viewing an archived webpage. The information on this page may be out of date. Learn about EPIC's recent work at epic.org.

State Auto Black Boxes Policy

Introduction

Auto black boxes imageAutomobile Event Data Recorders (a.k.a. "black boxes" or EDRs) are built into more than 90% of new cars. EPIC, joined privacy and civil rights organizations, has urged the National Highway Traffic Safety Administration (NHTSA) to protect driver privacy. Fifteen states, including Nevada, Oregon, Texas, North Dakota, and Washington have implemented strong legislation that safeguards the driver information gathered by EDR devices.

Exemplary Law: Washington's Recording Devices in Motor Vehicles Law

Passed in 2009, Washington State's Recording Devices in Motor Vehicles Law is a comprehensive EDR privacy law. The law includes these vital provisions:

  1. Transparency: The law requires disclosure of event data recorders in writing or in the owner's manual of new vehicles sold or leased in Washington. It also requires disclosure in agreements with subscription services.
  2. Control of data: Washington prohibits the download of EDR data except: 1) with owner’s consent; 2) court order; 3) vehicle safety research; 4) for dispatch of emergency medical personnel.
  3. Purpose specification: Washington's law limits the purposes for which EDR data is used.
  4. Enforcement: The Washington law provides that any person that accesses EDR data without vehicle owner consent, and who does not otherwise have authority granted by narrowly tailored exceptions, is guilty of a misdemeanor. Violations also fall under the Washington Consumer Protection Act.

Additional Provisions: Colorado Event Data Recorders Law

Colorado also has a strong EDR law (CRS ยง 42-4-2402). The Colorado statute makes event data the personal information of the driver and prohibits collection and distribution of that data except (1) with consent, (2) for service, (3) for litigation, (4) by court order. Violation of the law carries criminal penalties, including fines and up to eighteen months in prison.

Additional Resources

epic.org/state-policy/ logo
Back to State Policy home

Share this page:

Defend Privacy. Support EPIC.
US Needs a Data Protection Agency
2020 Election Security