The data collected and used by connected cars is governed by a complex mosaic of federal, state and international laws, regulations and guidelines. Navigating this fragmented regime presents complex compliance challenges for automobile makers. This second article in a four-part series on connected cars presents an overview of the applicable legal framework. With supplemental context from the Cybersecurity Law Report, it distills insights shared by Morrison Foerster partners Marian Waldmann Agarwal, Alex van der Wolk and of counsel Jonathan Newmark during a firm program. Part one examined recent FTC enforcement activity related to connected vehicles. Part three will provide practical advice for navigating privacy issues raised by connected cars, including notice and consent; and part four will discuss the cybersecurity issues that connected cars present. See “Examining Newly Released Privacy and Security Guidance for the Fast-Driving Development of Autonomous Cars” (Oct. 5, 2016).