A new Sacramento fight over what your car can say about you is heating up fast. The Consumer Driving Data Protection Act of 2026 would let California drivers opt into telematics-based insurance programs that use smartphone and in-vehicle data to build predictive scores tied to rates. Supporters cast it as a twenty-first-century way to reward safer drivers with cheaper coverage. Opponents see something very different: a powerful tracking tool that could be repurposed, misused or quietly worsen inequities. The clash is now centered on a familiar California question: how to modernize insurance rate-setting without sacrificing privacy.
What the bill would do
Under the bill text, a consumer could voluntarily choose to have telematics data treated as their driving safety record, effectively allowing usage-based information to substitute for traditional Motor Vehicle Records in some rate filings, according to California Legislative Information. The draft spells out consent requirements, sets limits on how long identifying telematics data may be retained, and prohibits using that data for purposes outside rating unless the consumer explicitly authorizes it.
The proposal would also require insurers to spell out program details in rate applications and would give the insurance commissioner authority to impose penalties or suspend telematics programs that violate the rules. On paper, it is a tightly managed sandbox: insurers get new tools, but the regulator keeps a big red “off” switch close at hand.
Privacy and civil rights worries
Consumer advocates argue that even with those guardrails, the measure hands insurers potent technology without truly ironclad protections, a concern reported by KTVU. Carmen Balber of Consumer Watchdog told Capitol Weekly that voluntary programs can still create pressure on drivers to trade away privacy, especially if they fear higher premiums for opting out, and that complex scoring models can quietly embed proxies for race or income.
Opponents also warn that opt-in language on the front end does not erase the downstream risk that supposedly de-identified or aggregated driving data could be monetized or reused in ways consumers never anticipated. Once sensitive data exists in a commercial system, they argue, the temptation to squeeze extra value out of it rarely disappears.
Why privacy experts are wary
Privacy groups and researchers stress that location and driving-behavior data are uniquely revealing and notoriously hard to truly anonymize, a point the Electronic Frontier Foundation has made in its analysis of mobility data. Even when names are stripped out, detailed travel patterns can often be tied back to individuals with a bit of cross-referencing.
Recent enforcement actions have given that warning real teeth. California authorities and the state privacy agency secured a multi-million dollar settlement with an automaker over alleged sales of driving data, highlighting how retained vehicle information can be repurposed and sold, according to the California Attorney General's Office. For privacy advocates, that settlement is a cautionary tale and a talking point: if car data can already leak into the marketplace, they argue, any formal telematics regime needs strict limits on retention, sharing and secondary uses baked in from day one.
Supporters point to safety gains
Backers counter that telematics programs, when done right, can make roads safer. A randomized field trial summarized by the AAA Foundation for Traffic Safety found measurable drops in speeding, hard braking and rapid acceleration after drivers received smartphone-based feedback. In other words, watching the data in real time nudged people into gentler, less risky habits.
Proponents such as street-safety advocates and insurance groups say voluntary telematics can cut premiums for safer drivers and deliver specific, actionable feedback that helps people drive better, as supporters told Capitol Weekly. The bill language tries to split the difference by requiring explicit consent, setting up dispute processes so drivers can challenge their scores and writing relatively narrow limits on how the data can be used.
Legal implications
The bill explicitly seeks to tweak how Proposition 103’s first mandatory rating factor, driving safety record, is defined. That is not a trivial edit. Changes to Prop. 103 must further the purposes of the voter-approved initiative and can require a two-thirds legislative vote, according to the bill text and legislative counsel analysis. Past court rulings have struck down lawmakers when they strayed too far from what voters authorized.
Opponents say a legal challenge is very much on the table if lawmakers try to fold telematics into rate-setting without clear voter or regulatory buy-in. The draft attempts to head off some of those attacks by declaring its provisions consistent with Proposition 103 and by building regulatory oversight into the scheme, but whether judges will agree is another open question hovering over the debate.
What happens next
As of mid-June, the bill had been amended and re-referred in the legislative process, with its current status posted in public bill trackers and legislative databases. Local outlets including KTVU and legislative trackers describe ongoing negotiations among the author’s office, privacy advocates and industry stakeholders over how tight the rules should be.
If those talks fail to resolve lingering privacy and equity concerns, advocates on all sides say the fight could shift to the courts or even back to the ballot box before any broad rollout of telematics-driven insurance pricing happens in California. For now, the only certainty is that the battle over who controls your driving data is just getting started.
