Tuesday, September 12, 2023

Data privacy in cars is basically non-existent

This is not surprising, but a systematic analysis from the Mozilla Foundation shows that no car company takes data privacy seriously - and Tesla tops the list of shame by having serious shortfalls in each of the five key privacy areas.  Most of the other big names (Ford, Mercedes, BMW, the GM stable) have issues on four.

Here are some highlights:

Some not-so-fun facts about these rankings:

  • Tesla is only the second product we have ever reviewed to receive all of our privacy “dings.” (The first was an AI chatbot we reviewed earlier this year.) What set them apart was earning the “untrustworthy AI” ding. The brand’s AI-powered autopilot was reportedly involved in 17 deaths and 736 crashes and is currently the subject of multiple government investigations.
  • Nissan earned its second-to-last spot for collecting some of the creepiest categories of data we have ever seen. It’s worth reading the review in full, but you should know it includes your “sexual activity.” Not to be out done, Kia also mentions they can collect information about your “sex life” in their privacy policy. Oh, and six car companies say they can collect your “genetic information” or “genetic characteristics.” Yes, reading car privacy policies is a scary endeavor.
  • None of the car brands use language that meets Mozilla’s privacy standard about sharing information with the government or law enforcement, but Hyundai goes above and beyond. In their privacy policy, it says they will comply with “lawful requests, whether formal or informal.” That’s a serious red flag.
  • All of the car brands on this list except for Tesla, Renault, and Dacia signed on to a list of Consumer Protection Principles from the US automotive industry group ALLIANCE FOR AUTOMOTIVE INNOVATION, INC. The list includes great privacy-preserving principles such as “data minimization,” “transparency,” and “choice.” But the number of car brands that follow these principles? Zero. It’s interesting if only because it means the car companies do clearly know what they should be doing to respect your privacy even though they absolutely don’t do it.

So what do you do when choosing a new ride?  Some ideas come to mind ...


(via)

13 comments:

Ritchie said...

This seems like a rich opportunity for spoofing.

Midwest Chick said...

I really miss my 1991 Toyota Corolla....

Gerry said...

The GTO will do nicely!

Bear Claw Chris Lapp said...

I’ll take two. One for weekdays and one for weekends

LindaG said...

And they want everyone to have an electric, robot controlled car.

James said...

Man, now I REALLY miss my old '85 VW diesel. 5-speed stick (!), Alpine AM/FM/Cassette, and 40 mpg on the interstate. The only "smart" thing in there was my radio, scanning for FM stations. All analog, all the time.

Never should have traded it in . . .

Aesop said...

Now you know why older vehicles' prices have gone stratospheric.

Murphy(AZ) said...

Be still, my old man's heart! A fire engine red Pontiac ticket magnet. 'Tis the stuff of dreams!

Old NFO said...

Sigh... I miss my 66 GOAT. And I can't afford one now.

The Neon Madman said...

Cars? Data privacy in ANYTHING is non-existent.

drjim said...

Glad my Old Toyota lacks all the safety nannies and snoops!

Tree Mike said...

My newest car is a 2004 Ford Focus, it doesn't know shit. Next newest, a 2003 Hyundai, at least as dumb as the Ford, I like 'em that way. If they have black boxes, they're too dumb to rat you out.
I had a '66 GTO, crashed it in 1973, because...dumb ass.

Comrade Misfit said...

I'll keep my 2005 Accord until the wheels fall off.

(Wish I could find a decent 3rd Generation Accord sedan with a manual transmission.)