Consumer data privacy; automakers; civil penalty. Prohibits automakers operating in the Commonwealth from collecting or processing the personal data of a consumer without such consumer's express consent and from engaging in the sale of personal data. The bill contains requirements for an automaker that has received express consent from a consumer for the collecting or processing of personal data, and includes personal data rights that such consenting customer may invoke at any time. Under the bill, the Attorney General is authorized to investigate violations and enforce the provisions of the bill by initiating an action, seeking an injunction, and seeking civil penalties of up to $7,500 for each violation.