Car manufacturers are collecting data on drivers and passengers. The Mozilla Foundation in a report on 25 car brands and 15 manufacturing companies concludes that the collected data, which includes everything from health status, sexual activity and intelligence quotient, to sell it to law enforcement agencies, but also to others .
Researchers found that Japanese carmaker Nissan had admitted it could sell information about drivers' and passengers' sexual activity, intelligence and health diagnostics to data brokers, law enforcement agencies and other companies. German automaker Volkswagen said it may record drivers' voices to profile them for targeted advertising.
"The amount of data these car companies openly said they could collect was staggering," said Jen Caltrider, principal researcher at the Mozilla Foundation, which owns the company that runs the Firefox browser.
It's like no one has ever challenged them or asked them questions about privacy, and so they just include everything.
Europeans are - in principle - better protected from abuse thanks to the privacy law, the General Data Protection Regulation (GDPR), but the report suggests that this law is little enforced in the case of car companies. An analysis of the law's implementation across Europe showed that few national regulators had taken action against car companies' data collection since the law came into force.
Caltrider and other researchers looked at the privacy policies of car companies and downloaded their apps in Germany, France, the US, Japan and South Korea. They found that the car industry collected massive amounts of data through dozens of sensors and technology built into the latest car models that calculate people's weight as they sit, film the car inside and out with cameras, listen to conversations through microphones and track users through connection in smartphone applications.
"It's no longer just about selling cars to make money. It's more about collecting data and then using that data to make money," Caltrider said, adding that the cars appeared to have more practical worse privacy concerns than mental health apps, smart home devices, and the gadgets we use at the gym like headphones and fitness trackers.
The researchers also found that 84 percent of the car brands reviewed may share and sell data with other companies as data brokers, a market valued at hundreds of billions of euros by some estimates. Just over half of brands said they can share data with the government and law enforcement when requested, rather than get a court order.
The report points out that users rarely had the opportunity to clearly and consciously accept the privacy rules of their cars.