VEH § 28242

A mechanism for disabling connected vehicle location access shall meet all of the following requirements:

(a) Be prominently located and easy to use.

(b) Not require access to, or use of, a remote or online application.

(c) (1) Not require account creation, a password, or login information.

(2) A vehicle manufacturer may require a driver to input a mobile number associated with the connected vehicle service account. If a vehicle manufacturer requires a driver to input a mobile number in order to disable the connected vehicle location access connection, it shall not require any further information in order to allow the driver to disable the connection, including, but not limited to, using that number as part of a two-factor authentication process that results in sending a code to the mobile number.

(d) Allow connected vehicle location access that has been disabled from inside the vehicle to be enabled only by a driver who is located inside the vehicle.