The law covers three categories of data inside a dealer's system: consumer personal and financial information, motor vehicle diagnostic data, and records of the dealer's business operations. It does not reach data that is publicly available or that a manufacturer or third party obtains from another source. Data generated by a vehicle or a consumer's connected device falls outside the act. The statute does not name collision repair shops or other independent service providers, a gap trade publications have already flagged. Michigan's bill was introduced in 2025 and sponsored by Democratic Senator Sam Singh. It joins Arizona, Delaware, Florida, Georgia, Montana, North Carolina, Oklahoma, Oregon, Utah, Washington, and West Virginia in regulating dealer data access, according to the National Law Review.
Several questions remain open. Trade and legal commentary from mid-October and early November 2026 is still working through how the new rules apply in practice, and the act's treatment of independent repair providers is unresolved in the text.
Vendors and any firm offering financing, service, or data products to Michigan dealers should review contracts and data-sharing practices now, since the law is already in force. Check whether consent is captured in writing before any access, confirm that termination rights run 90 days, and confirm that APIs and audit-list obligations can be met. Watch for guidance or enforcement signals on what counts as "required manufacturer data" and on whether independent repair shops gain access rights.