Why modern cars are "worst consumer product" in terms of privacy policies

Modern cars have effectively become computers on wheels, taking over many tasks and concerns that older vehicles left entirely to drivers.

While most people know that today’s vehicles collect data such as GPS locations and driving behaviour, many may be surprised to learn that automakers can also gather information, including a driver’s weight, facial expressions, music preferences and even the number of passengers inside the car.

A study reviewing car manufacturers’ privacy policies even went so far as to call it the “worst” category of consumer products, with little known about how this data is processed further on.

Some vehicles are equipped with interior-facing cameras aimed directly at the driver’s seat. Most newer models also come with built-in internet connectivity capable of transmitting data in real time while the vehicle is on the road, according to a recent BBC report.

The article notes that car manufacturers openly disclose some of the information they collect — including precise location tracking, passenger activity, radio usage, seatbelt habits, speeding and braking patterns. However, some companies also gather less obvious forms of personal data, including age, weight, race and facial expressions.

Insurance companies have become some of the largest buyers of vehicle-generated data, using it in some cases to determine higher premiums for certain drivers. The BBC report warns that consumers often have little visibility into where that information ultimately ends up. Some automakers acknowledge selling driver data, but are not required to disclose who purchases it.

“People would be shocked at the number of data points that their car collects and transmits to other people, either the manufacturer or third-party applications,” said Darrell West, a senior fellow at the Center for Technology Innovation at the Brookings Institution in Washington. “It basically means your life can be recreated almost on a second-by-second basis.”

In the United States, new legislation is expected to significantly expand the amount of personal data vehicles can collect. The law will require automakers to install infrared biometric cameras and monitoring systems capable of analyzing body language, tracking eye movements and detecting signs of intoxication or fatigue. While intended to improve road safety, the systems could also generate extensive new datasets about drivers’ health and behaviour.

The BBC article does not ignore the potential benefits of connected vehicles. Internet-enabled cars can improve convenience and safety through advanced sensors and driver-assistance systems, while insurance companies may reward responsible driving with lower premiums. Still, as automakers continue expanding their data ecosystems, privacy advocates say this is a crucial moment for consumers to understand how much information their vehicles collect — and how it may be used.

Shockingly poor privacy policies

An analysis by Mozilla, the organization behind the Firefox browser, reviewed the privacy policies of 25 major car brands. Every manufacturer failed to meet Mozilla’s privacy and security standards, leading researchers to describe cars as “the worst product category we have ever reviewed for privacy.”

According to the report, automakers reserve the right to collect a vast range of personal information, including names, ages, races, weights, financial details, facial expressions and psychological characteristics. Kia’s privacy policy, for example, suggests the company may collect information related to a user’s “sex life” and general health.

Car manufacturers can also access information when drivers connect their phones to infotainment systems or use certain driving-related apps. Some motorists additionally opt into insurance telematics programs that monitor driving habits in exchange for potential discounts.

“They're taking all the information they collect on you, which is a lot, and using it to make inferences about who you are, how intelligent you are, what your psychological profile is, what your political beliefs are,” said Jen Caltrider, the privacy researcher who led Mozilla’s automotive study. “That's the stuff people don't necessarily think about.”

By Nazrin Sadigova