; (B) while such data are in transit from the vehicle to another location; and (C) in any subsequent offboard storage or use. (4) Detection, reporting, and responding to hacking Any motor vehicle that presents an entry point shall be equipped with capabilities to immediately detect, report, and stop attempts to intercept driving data or control the vehicle. (b) Penalties A person that violates this section is liable to the United States Government for a civil penalty of not more than $5,000 for each violation in accordance with section 30165. . (b) Rulemaking (1) In general Not later than 18 months after the date of the enactment of this Act, the Administrator of the National Highway Traffic Safety Administration, after consultation with the Federal Trade Commission, shall issue a Notice of Proposed Rulemaking to carry out section 30129 of title 49, United States Code, as added by subsection (a). (2) Final regulations Not later than three years after the date of the enactment of this Act, the Administrator, after consultation with the Commission, shall issue final regulations to carry out section 30129 of title 49, United States Code, as added by subsection (a). (3) Updates Not later than three years after final regulations are issued pursuant to paragraph (2) and not less frequently than once every three years thereafter, the Administrator, after consultation with the Commission, shall— (A) review the regulations issued pursuant to paragraph (2)