Schneier on Security

Connected Cars Are a Surveillance Platform

Refract AI Intelligence Digest

BLUF

Your vehicle acts as a constant surveillance platform that monetizes your driving behavior without meaningful consent.

NEWS

Researchers documented real-time data flows between vehicles, companion apps, and external corporations for the first time. The investigation confirms manufacturers maintain persistent surveillance over drivers to leverage information against them. Specific third-party entities were identified as recipients of this siphoned vehicle data.

Why I Care

Drivers face significant privacy risks where personal habits directly impact insurance premiums, pricing, and legal exposure. The automotive industry has evolved into a data brokerage model that prioritizes profit over user autonomy. Every owner of a modern connected vehicle is vulnerable to exploitation by unseen data partners.

Next Steps

Consumers should audit and disable unnecessary telemetry settings in their vehicle apps immediately. Prospective buyers must research a manufacturer's data privacy policy before purchasing any new connected car. Advocates should push for legislation requiring explicit opt-in consent for all third-party data sharing by the next regulatory cycle.

Researchers at Northeastern University, in collaboration with Consumer Reports, evaluated how much modern cars spy in their drivers: The new Northeastern study shows, for the first time, data flowing among the vehicles, the vehicle apps you download when you buy your car, and third-party companies, documenting exactly what kind of data gets siphoned from our vehicles and which companies are receiving that information. Basically, your car’s manufacturer has you under constant surveillance, and they use that data against you. The companies on the receiving end of your data, our investigation has found, include car insurers and lenders that are partners in “telematics data exchanges,” which compile driving data on millions of drivers, thousands of data brokers that create personalized risk scores, companies selling infotainment and WiFi hotspot products, and even local and state government agencies working on planning, traffic, and safety initiatives...
Back to Blog Listing

Source: Schneier on Security ·

This digest was generated by Refract AI Collective to help the public sector security community stay informed.