Your Car is Sharing Your Data

A new investigation by consumer advocacy group Choice has found that many popular car brands in Australia are collecting and sharing vast amounts of driver and passenger data, ranging from braking patterns and odometer readings to vehicle locations and voice recognition information.

Choice reviewed the privacy policies of the 10 most popular car brands and discovered that seven of them collect and share sensitive driver data with third parties. As cars become more connected and internet-enabled, they are transforming into "smartphones on wheels," equipped with sensors, microphones, and cameras that record and share data.

Data Harvesting: A Growing ConcernJarni Blakkarly, an investigative reporter for Choice, expressed concerns about how vague many of these privacy policies are. “We found that seven out of ten of those car brands allow tracking of driver data, driving habits, and even the ability to sell that data to third parties,” Blakkarly said.

Three brands were singled out as particularly problematic:

• Tesla: Collects voice and video data from cameras inside and outside the car and shares this with third parties.
• Hyundai and Kia: Collect voice recognition data and sell it to AI software training companies.

According to Blakkarly, the average driver likely has no idea this is happening. "Drivers haven’t properly consented to their voices being used to train AI models," he added.
​
​Privacy at RiskTesla’s privacy practices have come under scrutiny, especially after reports surfaced that Tesla employees had shared invasive camera footage of customers in private settings. The privacy policies of other brands, such as Mazda, remain opaque, with unclear terms like "voice consumption data."

Blakkarly highlighted that many privacy policies are written in a deliberately confusing manner, making it hard for consumers to understand exactly what is being collected and shared.

Domestic Abuse and Data SurveillanceThere are growing concerns that connected cars are becoming tools for domestic surveillance. Karen Bentley, CEO of the Women's Service Network, warned that abusive individuals have used anti-theft features in connected cars to track and harass victims, even locating them in high-security refuges. Bentley emphasised the need for greater awareness and training around the privacy risks of connected vehicles.

Legal and Policy ImplicationsWhile this data collection is legal under Australian law, experts argue that privacy regulations need to catch up with the rise of internet-connected devices. The Australian Privacy Act, enacted in 1988, operates on a "notice and consent" model, but it often falls short when it comes to connected vehicles.

Blakkarly and others are calling for reforms, including a “fair and reasonable” test to ensure that data collection is appropriate and transparent. The federal government recently introduced privacy law reforms, but they did not include this crucial test.

Protecting Your DataConsumers can take some steps to protect their privacy. By checking their car app settings, disabling GPS tracking when not in use, and limiting phone connections to infotainment systems, drivers can reduce the amount of data being collected. Websites like Privacy4Cars also offer resources to help users delete data from their vehicles, though Australian-specific models are not always covered.
​
As data collection in cars becomes ubiquitous, Blakkarly urges consumers to be aware of the risks. "Do your own research and opt out where you can," he advised.
With more connected cars hitting the road, privacy concerns are only set to grow, making it essential for drivers to stay informed and vigilant.

​Ep247