Security and Privacy in Your Car Study Act of 2017 or the SPY Car Study Act of 2017

This bill requires the National Highway Traffic Safety Administration to conduct a study to determine and recommend standards for the regulation of the cybersecurity of motor vehicles manufactured or imported for sale in the United States. The study shall identify:

• isolation measures that are necessary to separate critical software systems that can affect the driver's control of the movement of the vehicle from other software systems;
• measures that are necessary to detect and prevent or minimize anomalous codes, in vehicle software systems, associated with malicious behavior;
• techniques that are necessary to detect and prevent, discourage, or mitigate intrusions into vehicle software systems and other cybersecurity risks in motor vehicles; and
• best practices to secure driving data about a vehicle's status or about the owner, lessee, driver, or passenger of a vehicle that is collected by the electronic systems of motor vehicles; and
• a timeline for implementing systems and software that reflect such measures, techniques, and best practices.