Connected Cars Are a Surveillance Platform
Researchers at Northeastern University, in collaboration with Consumer Reports , evaluated how much modern cars spy in their drivers: To determine this, CR dug through thousands of pages of automakers’ privacy policies and asked questions of 15 different automakersBMW, Ford, General Motors, Honda, Hyundai, Kia, Mazda, Mercedes-Benz, Mitsubishi, Nissan, Stellantis, Subaru, Tesla, Toyota, and…
Researchers at Northeastern University have exposed the extent to which modern cars monitor their drivers. To assess this, Consumer Reports collaborated with the university, scrutinizing thousands of pages of automakers' privacy policies and interviewing 15 car manufacturers. These included giants like BMW, Ford, General Motors, Honda, Hyundai, Kia, Mazda, Mercedes-Benz, Mitsubishi, Nissan, Stellantis, Subaru, Tesla, Toyota, and Volkswagen.
The investigation also delved into corporate, regulatory, and legal filings from data brokers in the insurtech industry. These companies, along with insurance firms and lenders, form "telematics data exchanges" that aggregate driving data from millions of drivers. Data brokers then use this information to generate personalized risk scores, while companies selling infotainment and WiFi hotspot products also profit from the data.
Industry experts have dubbed individual driving data as the "new oil," highlighting its significant profit potential. While some automakers seek consent before collecting driving data, drivers often unknowingly agree. For instance, after purchasing a new vehicle, the infotainment system typically prompts users with consent forms regarding privacy policies. These forms, or similar pop-ups on connected mobile apps, are frequently accepted without careful consideration.
The data collected by car manufacturers is used against drivers in various ways. It fuels the operations of car insurers and lenders, who partner in telematics data exchanges. Thousands of data brokers compile driving data, create personalized risk scores, and sell infotainment and WiFi hotspot products. Even local and state government agencies leverage this data for planning, traffic, and safety initiatives.
The investigation underscores a fundamental principle: "If you're not the customer, then you're the product." In today's internet-connected world, drivers are the product, even if they are the customer, their car's data being exploited by various entities for profit.
Written by urgent.news from Schneier on Security's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.