The California Privacy Protection Agency has announced its first case, investigating the data practices of newer-generation cars that are connected to the internet. This includes examining the treatment of data collected from vehicles, such as locations, smartphone connections, and camera images.
Established in 2020, the agency has the authority to enforce Californians’ right to learn, stop the spread, and delete their personal data. The enforcement division will investigate how companies are complying with California law in collecting and using consumers’ data in the connected vehicle space.
With the increasing reliance on connected cars and data collection, location information has become valuable to businesses seeking to target nearby drivers. Combining this data with other internet data can provide a detailed profile of a person’s habits, preferences, and activities.
Insurance companies are also interested in vehicle data, such as braking patterns and performance indicators. However, privacy policies in the industry have often been vague, making it challenging for consumers to understand the use of their data.
The executive director of the California Privacy Protection Agency, Ashkan Soltani, emphasized the need to regulate the collection and use of data in connected vehicles. As vehicles become more technologically advanced, they have the ability to monitor people both inside and near the vehicle, raising concerns about privacy.
California regulators may collaborate with European counterparts to learn more about data collection in vehicles. European investigations have prompted automakers to disclose more information about data collection and provide more options for users to control their data.
