The Car Privacy Rights Act of 2026 establishes new privacy protections for consumers whose personal data is collected through their vehicles. The law requires car manufacturers and data companies to provide clear privacy policies explaining their data collection practices, disclose what information they hold about consumers upon request, and reveal which third parties have received shared data. Enforcement is handled through multiple channels: the Federal Trade Commission can pursue violations as unfair or deceptive practices, state attorneys general can sue on behalf of residents for injunctions and penalties, and individual consumers can file private lawsuits seeking statutory damages of at least $5,000 per violation plus punitive damages and attorney's fees. The legislation takes effect upon enactment with no specified implementation delay.