New research reveals serious privacy flaws in the data practices of new internet connected cars in Australia. It’s yet another reason why we need urgent reform of privacy laws.
Modern cars are increasingly equipped with internet-enabled features. Your “connected car” might automatically detect an accident and call emergency services, or send a notification if a child is left in the back seat.
But connected cars are also sophisticated surveillance devices. The data they collect can create a highly revealing picture of each driver. If this data is misused, it can result in privacy and security threats.
A report published today analysed the privacy terms from 15 of the most popular new car brands that sell connected cars in Australia.
Mozilla Foundation did a deep dive into this. And the results where abysmal. The only brands not completely horrifying where Renault/Dacia because they are European and only serve the European market so they have to follow GDPR.
Any company that serves European customers have to follow GDPR. Any company that breaks it can be fined by the EU. Hence why a bunch of American websites rather just block European browsers instead of changing their cookie/data retention policies.
I am less interested in ranking them based on what they do (because we can assume they just vacuum up everything anyway), and more in a ranking based on how easy the surveillance is to remove. Apparently for some cars the telematics module can be easily unplugged at least, losing you some non-critical functionality, but on others it may be integrated tighter.