Bill Text: CA AB3139 | 2023-2024 | Regular Session | Amended
NOTE: There are more recent revisions of this legislation. Read Latest Draft
Bill Title: Data privacy: vehicle manufacturers: remote vehicle technology.
Spectrum: Partisan Bill (Democrat 1-0)
Status: (Engrossed) 2024-08-28 - Ordered to inactive file at the request of Senator Min. [AB3139 Detail]
Download: California-2023-AB3139-Amended.html
NOYES
Local Program:
NOYES
SECTION 1.
Bill Title: Data privacy: vehicle manufacturers: remote vehicle technology.
Spectrum: Partisan Bill (Democrat 1-0)
Status: (Engrossed) 2024-08-28 - Ordered to inactive file at the request of Senator Min. [AB3139 Detail]
Download: California-2023-AB3139-Amended.html
|
Amended
IN
Assembly
March 21, 2024 |
CALIFORNIA LEGISLATURE—
2023–2024 REGULAR SESSION
Assembly Bill
No. 3139
| Introduced by Assembly Member Weber |
February 16, 2024 |
An act relating to privacy. to add Chapter 36.5 (commencing with Section 22948.60) to Division 8 of the Business and Professions Code, relating to privacy.
LEGISLATIVE COUNSEL'S DIGEST
AB 3139, as amended, Weber.
Data privacy: vehicles. vehicle manufacturers: remote vehicle technology.
Existing law establishes various privacy requirements applicable to manufacturers of to vehicle manufacturers, including limitations on the usage of images or video recordings from in-vehicle cameras in new motor vehicles equipped standard with one or more in-vehicle cameras, including limitations on the usage of images or video recordings from in-vehicle cameras. cameras. Existing law provides various protections to persons who are escaping from actual or threatened domestic violence, sexual assault, stalking, human trafficking, and
other abuse, including providing for a means to keep the names and addresses of abuse survivors confidential in public records.
This bill would state the intent of the Legislature to enact legislation that would enhance the privacy of consumers in vehicles. require a vehicle manufacturer, no later than 2 business days after receiving a completed vehicle separation request from a survivor, to separate the perpetrator’s access to the remote vehicle technology from the vehicle subject to specified requirements, including that the vehicle manufacturer performs the separation without imposing any fee. If the vehicle manufacturer cannot operationally or technically separate a perpetrator’s access to the remote vehicle technology from the vehicle, the bill would require a vehicle
manufacturer to separate the remote vehicle technology from the vehicle subject to the above-described requirements. The bill would require a vehicle manufacturer to offer secure remote means via the internet for a survivor to submit a vehicle separation request that meets specified requirements, and would require the vehicle manufacturer to receive a vehicle separation request through those means.
The bill would require a vehicle separation request submitted to a vehicle manufacturer to include prescribed information, including a statement by the survivor signed under penalty of perjury that a perpetrator who has access to the remote vehicle technology in the vehicle has committed or allegedly committed a covered act against the survivor or an individual in the survivor’s care, or a copy of specified documents that support that the perpetrator has committed
or allegedly committed a covered act against the survivor or an individual in the survivor’s care, including a signed affidavit from, among other specified individuals acting within the scope of their employment, a licensed medical care provider.
By requiring a survivor to submit a statement signed under penalty of perjury or requiring specified individuals to sign an affidavit, the bill would expand the crime of perjury and impose a state-mandated local program.
The bill would require a vehicle manufacturer to notify a survivor that submits a vehicle separation request, as specified, that the vehicle manufacturer may contact the survivor, or a designated representative of the survivor, to confirm the request. The bill would require a vehicle manufacturer, if the vehicle manufacturer cannot operationally or technically effectuate a vehicle separation request, to perform specified duties, including notifying the survivor who
submitted the vehicle separation request of the vehicle manufacturer’s inability to effectuate a vehicle separation request, as specified.
The bill would make a vehicle manufacturer that violates the above-described provisions liable in a civil action brought by a survivor for, among other things, reasonable attorney’s fees and costs of the prevailing survivor, in addition to any other remedy provided by law. The bill would specify that any waiver of the requirements of the above-described provisions is against public policy, void, and unenforceable.
The bill would define various terms for these purposes, and would make related findings and declarations.
The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.
This bill would provide that no reimbursement is required by this act for a specified reason.
Digest Key
Vote: MAJORITY Appropriation: NO Fiscal Committee:Bill Text
The people of the State of California do enact as follows:
SECTION 1.
(a) The Legislature finds and declares all of the following:(1) Domestic violence, dating violence, stalking, sexual assault, human trafficking, and related crimes are life-threatening issues and have lasting and harmful effects on individuals, families, and entire communities.
(2) Survivors of violence and abuse often lack meaningful support and options when establishing independence from an abuser, including barriers of financial insecurity and limited
access to reliable communication tools to maintain essential connections with family, social safety networks, employers, and support services.
(3) Perpetrators of violence and abuse increasingly use technological and communication tools to exercise control over, monitor, and abuse their victims.
(4) Remote vehicle technology, including mobile phone wireless connectivity and location data capabilities that are manufactured into vehicles, are among the technological and communication tools perpetrators of violence and abuse can, and have, used.
(5) According to The New York Times, “Modern vehicles have been called ‘smartphones with wheels’ because they are internet-connected and have myriad methods of data collection, from cameras and seat weight sensors to records of how hard you brake and corner. Most drivers don’t
realize how much information their cars are collecting and who has access to it.”
(6) Under the federal Safe Connections Act of 2022, survivors of domestic abuse are empowered to protect themselves and their loved ones by requiring telecommunications providers, upon request, to separate their mobile phone accounts from the accounts of their abusers.
(b) For the foregoing reasons, it is the intent of the Legislature in enacting this act to protect survivors of domestic abuse by providing survivors the right to request vehicle manufacturers to separate the remote vehicle technology in vehicles, similar to the rights they have regarding mobile phones under federal law.
SEC. 2.
Chapter 36.5 (commencing with Section 22948.60) is added to Division 8 of the Business and Professions Code, to read:CHAPTER 36.5. Remote Vehicle Technology
22948.60.
(a) For the purposes of this chapter, the following definitions apply:(1) “Covered act” means conduct that meets any of the following descriptions:
(A) A crime described in subsection (a) of Section 40002 of the federal Violence Against Women Act (34 U.S.C. Sec. 12291), including domestic violence, dating violence, sexual assault, stalking, and sex trafficking.
(B) An act or practice described in paragraph (11) or (12) of Section 103 of the federal Trafficking Victims Protection Act of 2000 (22 U.S.C. Sec. 7102) relating to severe forms of trafficking in persons and sex trafficking, respectively.
(C) An act under state law, tribal law, or the Uniform Code of Military Justice (Chapter 47 (commencing with Section 801) of Title 10 of the United States Code) that is similar to an offense described in subparagraph (A) or (B).
(2) “Perpetrator” means an individual who has committed or allegedly committed a covered act against a survivor or an individual under the care of a survivor.
(3) “Remote vehicle technology” means any technology that allows a person who is outside of a vehicle to access the activity, track the location, or control any operation of the vehicle or its parts, that includes, but is not limited to:
(A) A Global Positioning System (GPS).
(B) An app-based technology.
(C) Any other remote wireless connectivity technology.
(4) “Survivor” means an individual who meets either of the following criteria:
(A) An individual who has had a covered act committed or allegedly committed against them.
(B) An individual who provides care to an individual who has had a covered act committed or allegedly committed against, and that caretaker did not commit or allegedly commit the covered act.
(5) “Vehicle manufacturer” means a vehicle manufacturer or remanufacturer as defined in Section 672 of the Vehicle Code.
(b) Subdivision (a) does not require a criminal conviction or any other determination of a court
in order for conduct to satisfy a definition.
22948.61.
(a) (1) No later than two business days after receiving a completed vehicle separation request from a survivor, a vehicle manufacturer shall separate the perpetrator’s access to the remote vehicle technology from the vehicle subject to both of the following requirements:(A) The vehicle manufacturer shall perform the separation without imposing any fee, penalty, charge, condition, or agreement.
(B) The vehicle manufacturer shall perform the separation notwithstanding the consent of another individual, including the registered owner of the vehicle.
(2) If a vehicle manufacturer cannot
operationally or technically separate a perpetrator’s access to the remote vehicle technology from the vehicle, the vehicle manufacturer shall separate the remote vehicle technology from the vehicle subject to the requirements described in paragraph (1).
(b) (1) A vehicle manufacturer shall offer secure remote means via the internet for a survivor to submit a vehicle separation request that meets both of the following requirements:
(A) The secure remote means shall include a prominent link on the vehicle manufacturer’s internet website that meets both of the following requirements:
(i) The link shall be entitled, in bold and capital letters, “CALIFORNIA SURVIVOR DOMESTIC VIOLENCE ASSISTANCE.”
(ii) The link shall provide a
designated website portal that provides a survivor the ability to submit a vehicle separation request and includes a form that enables a survivor to submit the required information described in subdivision (c).
(B) The secure remote means shall be easily navigable if it is commercially available and technically feasible.
(2) A vehicle manufacturer shall receive a vehicle separation request through the secure remote means.
(c) A vehicle separation request submitted to a vehicle manufacturer shall include the vehicle identification number of the vehicle and either of the following:
(1) A statement by the survivor signed under penalty of perjury that a perpetrator who has access to the remote vehicle technology in the vehicle has committed or allegedly
committed a covered act against the survivor or an individual in the survivor’s care.
(2) A copy of either of the following documents that supports that the perpetrator has committed or allegedly committed a covered act against the survivor or an individual in the survivor’s care:
(A) A signed affidavit from any of the following individuals acting within the scope of that person’s employment:
(i) A licensed medical or mental health care provider.
(ii) A licensed military medical or mental health care provider.
(iii) A licensed social worker.
(iv) A victim services provider.
(v) A licensed military victim services provider.
(vi) An employee of a court.
(B) A copy of any of the following documents:
(i) A police report.
(ii) A statement provided by the police, including military police, to a magistrate judge or other judge.
(iii) A charging document.
(iv) A protective or restraining order, including military protective orders.
(v) Any other relevant document that is an official record.
(d) A vehicle manufacturer shall notify a survivor that submits a vehicle
separation request in clear and conspicuous language through the secure remote means that the vehicle manufacturer may contact the survivor, or designated representative of the survivor, to confirm the request.
(e) (1) If a vehicle manufacturer cannot operationally or technically effectuate a vehicle separation request, the vehicle manufacturer shall perform both of the following duties:
(A) Notify the survivor who submitted the vehicle separation request, no later than two days after receiving the request, of the vehicle manufacturer’s inability to effectuate a vehicle separation request.
(B) Modify, or assist the survivor in modifying, the default settings of the remote vehicle technology in the vehicle to prevent the perpetrator from obtaining information about the survivor, including, but
not limited to, the survivor’s location data.
(2) The vehicle manufacturer shall perform the duties described in paragraph (1) without imposing any fee, penalty, charge, condition, or agreement.
22948.62.
(a) In addition to any other remedy provided by law, a vehicle manufacturer that violates Section 22948.61 shall be liable in a civil action brought by a survivor for all the following:(1) Reasonable attorney’s fees and costs of the prevailing survivor.
(2) A civil penalty not to exceed fifty thousand dollars ($50,000) per violation, or a civil penalty not to exceed one hundred thousand dollars ($100,000) per violation for knowing violations.
(3) Actual damages, or three times the amount at which the actual damages are assessed for knowing or reckless violations.
(b) Any waiver of the requirements of this chapter shall be against public policy, void, and unenforceable.
SEC. 3.
No reimbursement is required by this act pursuant to Section 6 of Article XIII B of the California Constitution because the only costs that may be incurred by a local agency or school district will be incurred because this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIII B of the California Constitution.It is the intent of the Legislature to enact legislation that would enhance the privacy of consumers in vehicles.
