The disconcerting truth about modern cars and your privacy

10 September 2023

While cars have long been seen as symbols of freedom and open roads, the current digital evolution paints a less rosy picture. For many, the shift from gasoline to electric vehicles represents a move towards a more sustainable future. But as cars increasingly resemble mobile computers, a pressing question arises: What happens to our privacy?

Modern vehicles, equipped with sophisticated technologies, cameras, sensors, and AI algorithms, might as well double as surveillance hubs. Recent studies have brought to light the unsettling fact that automotive brands, in their quest for innovation, might have compromised the sanctity of personal privacy.

Out of the 25 car brands that were recently researched, every single one earned a Privacy Not Included warning. This means that every brand researched exhibited alarming practices when it came to collecting and using personal data.

Overzealous Data Collection

The findings showed that car companies are enthusiastically collecting personal data, more so than any other industry. For instance, every car brand reviewed, and harvested more personal data than needed, using this information for purposes beyond just the functionality of the car or customer relationship management. Astonishingly, the data-collection activities of car companies surpass even those of smart home devices or cell phones. This allows them to gather intricate details, ranging from one's medical history and genetic information to more personal aspects like music preferences and even one's "sex life".

Data Trading

Possessing this data is one thing, but a staggering 84% of these brands openly admit to sharing personal data with other businesses. Worse yet, 76% of them can sell your personal information. An even more worrisome aspect? A total of 56% concede they might share data with government or law enforcement agencies based merely on an “informal request.”

Lack of Data Control

A majority (92%) of the brands do not grant drivers significant control over their personal data. Only Renault and Dacia, both available primarily in Europe and governed by Europe's stringent General Data Protection Regulation (GDPR), were found to allow drivers to delete their personal data.

Questionable Security Standards

Concerns aren't just about what data is collected but also how securely it's stored. Astonishingly, none of the brands could confirm adherence to Minimum Security Standards, leaving one to wonder: How safe is our data in their hands?

The are standouts emerging from this research - but not in a good way. Tesla, a brand synonymous with innovation, received all the possible privacy warnings. While their AI-powered autopilot raises eyebrows with its involvement in numerous accidents, other brands like Nissan and Kia came under the scanner for their collection of exceedingly personal data, including, unsettlingly, one's "sexual activity".

Car brands, by and large, assume consent. The assumption is that by using their vehicles, drivers and passengers have agreed to their terms. Such an approach warps the meaning of true consent. For instance, Tesla’s policy stipulates that opting out of data collection might render the vehicle inoperable. Nissan, on the other hand, places the onus on the vehicle owner to inform passengers about privacy policies, a curious and likely unrealistic expectation.

While the list of concerns is lengthy, potential solutions for consumers are limited. Though certain measures might offer minimal protection, like limiting app permissions, the truth is most data collection methods remain beyond user control. It's not practical for people to choose cars based on privacy alone, given the myriad factors influencing such a decision. Still, as consumers, being informed might be the first step toward demanding better standards in the future.

Out of the car brands reviewed, only Tesla, Renault, and Dacia did not agree to the Consumer Protection Principles from the US automotive industry group ALLIANCE FOR AUTOMOTIVE INNOVATION, INC. Despite other brands agreeing, none seem to be following these principles. the in-depth research on car brands' privacy practices took over 600 hours, highlighting the complexity and opaqueness of the industry's privacy landscape.

Source