State Auto Black Boxes Policy


Auto black boxes imageAutomobile Event Data Recorders (a.k.a. "black boxes" or EDRs) are built into more than 90% of new cars. EPIC, joined privacy and civil rights organizations, has urged the National Highway Traffic Safety Administration (NHTSA) to protect driver privacy. Fifteen states, including Nevada, Oregon, Texas, North Dakota, and Washington have implemented strong legislation that safeguards the driver information gathered by EDR devices.

Exemplary Law: Washington's Recording Devices in Motor Vehicles Law

Passed in 2009, Washington State's Recording Devices in Motor Vehicles Law is a comprehensive EDR privacy law. The law includes these vital provisions:

  1. Transparency: The law requires disclosure of event data recorders in writing or in the owner's manual of new vehicles sold or leased in Washington. It also requires disclosure in agreements with subscription services.
  2. Control of data: Washington prohibits the download of EDR data except: 1) with owner’s consent; 2) court order; 3) vehicle safety research; 4) for dispatch of emergency medical personnel.
  3. Purpose specification: Washington's law limits the purposes for which EDR data is used.
  4. Enforcement: The Washington law provides that any person that accesses EDR data without vehicle owner consent, and who does not otherwise have authority granted by narrowly tailored exceptions, is guilty of a misdemeanor. Violations also fall under the Washington Consumer Protection Act.

Additional Resources logo
Back to State Policy home

Share this page:

Support EPIC

EPIC relies on support from individual donors to pursue our work.

Defend Privacy. Support EPIC.