Modern cars are equipped with advanced technology that allows them to collect a vast amount of data about their owners and drivers. While this may not be news to many, the extent of data collection and how it is being used can be surprising. According to a recent report by Automotive News, eight automakers have been sending vehicle location data to law enforcement agencies without obtaining a court order or warrant.
The automakers in question – BMW, Kia, Mazda, Mercedes-Benz, Nissan, Subaru, Toyota, and Volkswagen – admitted to providing data to the police when subpoenaed, sparking concern among government officials. Senators Ron Wyden and Ed Markey raised the alarm by sending a letter to the Federal Trade Commission, calling for an investigation into the matter. They criticized the automakers for failing to keep consumers informed about their data-sharing practices and for misleading them by not adhering to the industry’s own privacy principles.
A decade ago, all eight automakers had agreed to adhere to the Consumer Privacy Protection Principles, a voluntary code that stipulated data would only be shared with a warrant or court order. However, the revelation that they have been providing data in response to subpoenas has raised serious questions about consumer privacy. General Motors is facing a class-action lawsuit for allegedly sharing data with LexisNexis Risk Solutions, a company that assists insurers in setting rates.
In addition to concerns about insurance costs, lawmakers are worried about the potential misuse of connected-car data, such as identifying individuals who have traveled across state lines for sensitive procedures. Industry representatives have defended their practices, stating that data is only shared in specific and limited circumstances, such as when there is an imminent threat of harm to an individual.
Five automakers, including Honda, Ford, GM, Tesla, and Stellantis, have been commended by senators for requiring warrants before sharing data, except in cases of emergencies or with customer consent. This highlights the importance of transparency and accountability in the automotive industry when it comes to handling sensitive consumer data.