Data collected by cars and sold to third parties
Modern cars increasingly collect detailed telemetry on drivers’ locations, behavior, and vehicle usage, then share or sell it to insurers, data brokers, and services like Carfax, often for surprisingly little money. Commenters debate legal and technical ways to resist this—ranging from privacy laws like CCPA and new California bills to pulling fuses, removing modems, or simply buying older cars—while warning that many “smart” features, OTA updates, and regulatory requirements are making non-connected vehicles harder to find. There is broad concern that existing privacy protections are weak or eroding, and that drivers have the least visibility into data about their own vehicles.
Scope and Nature of Car Data Collection
- Modern cars, including many European models, collect extensive telemetry: location, mileage, driving behavior, and event logs.
- Data often reaches third parties via automaker telematics → vendors → data brokers → services like Carfax, sometimes even when users think they’ve disabled it.
- Two data categories are distinguished:
- Vehicle data: VIN, specs, recall status, odometer.
- Driver data: detailed location, speed, timestamps. Many argue this should be banned from collection/sale.
Legal and Regulatory Landscape
- U.S.:
- CCPA allows Californians to request data and deletion, though companies often add friction.
- California’s DROP platform lets residents request deletion from data brokers (VIN-supported).
- A new CA bill (AB-1542) would restrict sale/sharing of precise geolocation data; commenters think this could cover connected-car data.
- Some states consider mileage-based road taxes, which could incentivize more telemetry.
- EU: Mixed views. Some say the EU is moving from strong privacy toward “Stasi 2.0” with laws mandating surveillance capabilities (messaging scanning, state root CAs, mandatory in-car cameras/mics, AI CCTV, etc.).
- DMVs in some states have sold registration data; using LLCs to own vehicles is suggested as a partial privacy shield, but not from insurers.
Technical Countermeasures and Tradeoffs
- Mitigations discussed:
- Pull telematics/OnStar/DCM fuses.
- Unplug or terminate cellular/GPS antennas (e.g., 50Ω dummy loads, foil shielding).
- Physically remove modem/telematics modules.
- Tradeoffs:
- Often disables infotainment, microphones, GPS, CarPlay/Android Auto, emergency calling, remote climate control, OTA updates.
- Concern that modules may cache data and batch-upload if reconnected.
- Wi-Fi-based exfiltration via open networks is discussed but considered situational; feasibility unclear.
Older Cars vs. “Smart” Cars
- Many advocate 1990s–2000s (or older) vehicles: no connectivity, easier/cheaper repair, more durable bodywork.
- Counterpoints: rust, poor suitability for bad roads, maintenance burden, and inferior crash safety despite some older models having crumple zones.
- Some worry smart-car electronics (e.g., flash wear) create built-in expiration dates.
Ethics, Activism, and Policy Proposals
- Some call monetizing driver data “stealing” and suggest retaliatory piracy; others question that logic.
- Strong support for:
- Laws banning sale of consumer/driver data, not just soft “freedom car” fixes.
- Clear legal separation between allowed vehicle records and prohibited driver surveillance.
- Political action (contacting legislators), though commenters note public attention is often diverted to cultural issues.