Federal Judge, "car makers allowed to intercept texts"

Federal Judge, "car makers allowed to intercept texts"

Honda(HMC), Toyota(TM), Volkswagen(VOW.DE), Ford(F), General Motors(GM) and 20 other automakers are legally allowed to collect customers' text messages, mobile phone call logs, and share your personal user data with data brokers.

According to a report published by the Mozilla Foundation, best known for the Firefox web browser, found that 84% of the automakers sharing user data with outside parties.

Data that can be collected:
-name
-address
-date of birth
-financial account numbers
-credit card number, CVV code, and expiration date
-records of products or services purchased or considered
-driver's license number
-social security number
-sex life or sexual orientation information
-photographs
-medical information
-disability status
-genetic information
-fingerprints and faceprints
-sleep data
-religion or creed
-keystrokes
-contact numbers
-calendar entries
-notifications
-citizenship status
-immigration status and much, much more.
This is a short list taken from 17 pages of additional data legally collected.

Every time I drive my 2023 Jeep Grand Cherokee, I'm giving Jeep consent to do the following:

We collect Covered Data from a Vehicle when Connected Services are activated, which includes vehicle and driving data, precise geolocation data, biometrics, and other sensitive and personal information that is linked or linkable to Vehicle and other drivers of a Vehicle or users of the Connected Services.  

Overview of Sources and Categories of Personal Information. While the actual Covered Data that we collect may vary depending upon the circumstances (as further described below), generally, we may collect, use, disclose, and otherwise process the following categories of personal information (as defined by the CCPA) related to the Connected Services:

Identifiers: such as first and last name, address, phone number, email address, account name, SSN, other contact information, IP address, VIN, online identifiers, driver’s license number, and other government identifiers or other unique personal identifiers;

Paper and electronic customer records: such as payment information, credit card account number, and related information;

Commercial information: including records of products or services purchased or considered, records from usage of the Connected Services, or other purchase or usage histories;

Internet and other network activity information or mobile app activity: including, but not limited to, browsing history, search history, and your interaction with a website, application, or advertisement; 

Geolocation: location data from your Vehicle or device;

Biometric identifiers: such as fingerprints or facial templates, if you enable and enroll in biometric authentication to access your Vehicle or certain Connected Services;

Audio, visual and other electronic data: including data related to your Vehicle usage or interactions with us, such as error codes, diagnostic and performance data, and other sensor data generated by your Vehicle, images, and event data generated in connection with certain Connected Services (such as autonomous driving and distracted driver features), data from third-party account services that you link to your Connected Services account (e.g., Amazon Alexa), and images captured in connection with vehicle camera record.

This Covered Data includes certain sensitive personal information, including SSN, driver’s license number, precise geolocation, and biometric information. We may share (as defined under the CCPA) identifiers, customer records, commercial information, internet or other electronic network activity data, and profiles and inferences, with dealers and other third parties as described in this Notice. We retain Covered Data for as long as reasonably necessary for purposes for which it was collected and is used by us, as stated in this Notice. 


Further Reading

Judge rules it’s fine for car makers to intercept your text messages | Malwarebytes
A judge has refused to bring back a class action lawsuit against four car manufacturers because the privacy violation did not meet the WPA standard.
*Privacy Not Included: A Buyer’s Guide for Connected Products
Cars and their privacy and security concerns
*Privacy Not Included: A Buyer’s Guide for Connected Products
Your car can collect data about what you do, where you go, what you say, and even how you move your body. Find out what car companies do with that information.
*Privacy Not Included: A Buyer’s Guide for Connected Products
All 25 car brands we researched earned our *Privacy Not Included warning label – making cars the worst category of products that we have ever reviewed
Uconnect® and SiriusXM Guardian - Privacy Policy
Find information here about your privacy rights and how your information may be used.
Your car can keep collecting your data after a judge dismissed a privacy lawsuit
Vehicle data privacy has been a concern for years.