; (B) while the data is in transit from the vehicle to another location; and (C) in any subsequent offboard storage or use of the data. (4) Detection, reporting, and responding to hacking Any motor vehicle manufactured for sale in the United States that presents an entry point shall be equipped with capabilities to immediately detect, report, and stop attempts to intercept driving data or control the vehicle. . (b) Civil penalties Section 30165(a)(1) of title 49, United States Code, is amended by inserting 30129, after 30127, . (c) Rulemaking (1) In general Not later than 18 months after the date of enactment of this Act, the Administrator of the National Highway Traffic Safety Administration (referred to in this subsection as the Administrator ), after consultation with the Federal Trade Commission, shall issue a notice of proposed rulemaking to carry out section 30129 of title 49, United States Code. (2) Final regulations Not later than 3 years after the date of enactment of this Act, the Administrator, after consultation with the Federal Trade Commission, shall promulgate final regulations to carry out section 30129 of title 49, United States Code. (3) Updates Not later than 3 years after final regulations are promulgated pursuant to paragraph (2) and not less frequently than once every 3 years thereafter, the Administrator, after consultation with the Federal Trade Commission, shall— (A) review the final regulations promulgated pursuant to paragraph (2)