If your car were a phone, your mechanic would be the person with the tiny screwdriver and the calm voice. But today’s cars are more like smartphones on wheels. Under the hood is not just an engine. It’s a stack of computers, software locks, passwords, and a live internet connection. That’s where the Right-to-Repair fight lives: you paid for the hardware, but someone else controls the code. So who really owns the fix?
The Big Shift: From Wrenches to Passwords
Why “repair” now means “software”
A few years ago, a tune-up meant plugs, filters, and maybe a timing light. Now it can mean logging into the car, authenticating with a manufacturer server, and sending encrypted commands. Automakers have added secure gateways that block write access unless your tool proves it’s legit. Stellantis models use a Secure Gateway Module that only opens up when a scan tool authenticates through AutoAuth. Volkswagen Group introduced SFD, a “vehicle diagnostic protection” system that requires tokens to change certain settings. BMW and Mercedes gate higher-level coding and retrofits behind factory servers and paid accounts. It’s not a conspiracy; it’s cybersecurity. But it changes who can fix what—and how much it costs.
OBD-II is still there, but the party moved
Yes, every modern car still has an OBD-II port. But more diagnostics are moving from simple CAN messages to Ethernet and Diagnostics over IP (DoIP), the ISO 13400 standard. That means your old handheld scanner may read codes but choke on coding, programming, or module replacements. Independent shops can still do a lot with SAE J2534 pass‑thru tools and OEM subscriptions, but the learning curve—and the bill—keeps climbing.
Telematics: The Invisible Tug-of-War
Your car talks. Who gets to listen?
Modern cars stream data to the cloud through telematics control units. That lets apps lock the doors, update software over the air, and alert emergency services. It also lets automakers collect and monetize driving data. In 2024, reporting showed some brands sharing behavior data with insurance databases, surprising many drivers. Right-to-Repair advocates argue that owners and independent shops should have equal access to repair and maintenance data, even when it travels wirelessly.
Massachusetts and Maine: Why state laws matter
Massachusetts voters approved a telematics-focused Right-to-Repair law back in 2020, requiring a standardized way for owners and independent shops to access car data. After years of legal wrangling, courts cleared the state to enforce the law in 2025, with federal safety officials signaling that short-range, owner-authorized access can fit cybersecurity rules. Maine voters passed a similar law in 2023; automakers sued, and as of 2025, that case is still unfolding. These state fights set the tone nationally because they target the wireless data gap that earlier agreements didn’t cover.
The Legal Puzzle: You own it, but can you fix it?
Warranties and aftermarket parts
Here’s the good news: the Magnuson‑Moss Warranty Act says a manufacturer can’t void your warranty just because you used a third‑party part or an independent shop. If something fails, the automaker has to show your part caused the problem. The FTC has even taken action against companies that tried to scare customers away from independent repairs. So you can shop around.
The DMCA and software locks
Copyright law adds a twist. The DMCA makes it illegal to bypass access controls, which sounds like bad news for independent repairs. But every three years, the Librarian of Congress updates exemptions. In 2024, the car repair exemption was renewed and broadened, allowing circumvention of software locks for diagnosis, repair, and lawful modifications on motorized land vehicles. That’s a green light for fixing what you own—so long as you’re not breaking other laws.
The big red line: emissions tampering
One law you can’t dodge is the Clean Air Act. Disabling emissions systems or installing defeat devices is illegal, period. The EPA has made cracking down on tampering a national enforcement priority. So, “tuning” that defeats emissions checks is off-limits, no matter what your software can access.
Proprietary TCUs and Tuning Locks
The TCU is the new carburetor
In performance circles, the ECU used to be the hero. Now the TCU—transmission control unit—often runs the show for shift logic, torque limits, and even launch control. Many modern cars pack encrypted firmware and secure bootloaders that block unsigned calibrations. Tuners can still work, but the business has shifted toward official licensing, bench unlock procedures, or model‑specific workarounds. One over‑the‑air update can relock the fun.
Why automakers lock things down
Automakers say locks prevent hacking, odometer fraud, and unsafe modifications. They also need a secure path for over‑the‑air updates and recalls. For enthusiasts, that means you might need special hardware, subscriptions, or online authorization to do things that used to take a few clicks. The paradox is simple: you own the car, but someone else owns the keys to the code.
Europe’s Approach: Access with credentials
SERMI: Security access for grown‑ups
Europe is rolling out SERMI, a program that certifies independent workshops and mobile techs so they can access security‑related repair info, like immobilizers and anti‑theft systems. In short, if you pass background checks and training, you get the keys to the castle—safely. It’s not perfect, but it’s a model that says “yes” to competition while respecting security. The U.S. doesn’t have a direct equivalent yet, which is why state laws and federal proposals get so much attention.
ADAS: Why a windshield now needs a computer science degree
Calibration is the new alignment
Replace a windshield on a car with forward cameras and you may need to calibrate lane‑keeping and AEB systems with factory targets and procedures. Change ride height? You may need to recalibrate radar. This is repair in 2026: follow OEM steps, use the right targets, and verify results, or safety systems can misbehave. That’s not a scare tactic—it’s the new normal, and it’s one reason more repairs require access to OEM data portals and specialized tooling.
So, who really owns the fix?
The practical answer in 2026
If you’re a car enthusiast, the path is clear but not always cheap. You can keep independent shops in the game by choosing garages that invest in OEM subscriptions, secure gateway access, and modern calibration gear. You can still mod, but do it within the lines—don’t mess with emissions, and understand that some modules are locked for real safety reasons. If you’re a DIYer, a solid laptop-based J2534 setup plus per‑use OEM access can take you far, but be ready for learning and fees.
The policy answer
Right‑to‑Repair isn’t about forcing automakers to publish source code. It’s about fair, secure access to the information and tools needed to fix what you own. States like Massachusetts and Maine are pushing telematics access forward. Federal copyright exemptions now explicitly protect lawful repairs. The remaining gaps—wireless data, security credentials, and fair pricing—are where the fight continues.
References
Massachusetts Right-to-Repair ballot (2020) and enforcement context; court clears enforcement (2025), telematics and short‑range access: Ballotpedia, “Massachusetts Question 1 (2020)”
Land Line, “Court rejects challenge to Massachusetts stricter right-to-repair law” (Mar 2025)
Maine vehicle Right‑to‑Repair (2023 ballot, litigation in 2025): U.S. PIRG, “Automakers sue Maine to block repair data law”
