Toyota, Progressive Insurance, and a data analytics firm are now being accused of collecting detailed personal driving information without proper consent
Maybe it’s time to create some rules about data brokering? It’s not really about tracking and consent, it’s about who can sell what data about whom to what parties.
It’s become an enormous business, it deals with you and I, it delights in living in the shadows, and it is almost completely unregulated. I don’t really care if Toyota records my data, I care that it’s allowed to sell it or share it.
I think a reasonable first step would be that all data about a specific person belongs to that person and nobody else. We have rules about photos, we need to expand them to data brokering, because the problem is the same: if you can be identified and placed, you are at risk.
The Mozilla foundation did a great report on cars & privacy.
The only way to truly avoid that outcome is with enforceable rules around consent, transparency, and control, letting drivers see exactly what’s being collected, who it’s going to, and giving them a real way to say no. That, or skip the connected car entirely and drive something that isn’t quietly reporting back every time you hit the brakes.
Yeah none of that’s gonna happen anytime soon. When my 16 year old car bites the dust my next car will be another one from that same era. I’m not letting big brother know everything about me and jack up my insurance rates for the privilege of being spied on.
When do companies ask for consent? Look at Google and incognito mode. Look at 23&me, I can go on. And nobody sees anything done about it. We are numbers. Not people. That’s our world
Time to make data sharing illegal. If it is technically needed, the industry needs to have a written contract with the user, which describes in detail which data is shared. It must be a separate contract from anything else, and one each for each industry partner.
“T&Cs update : please agree to 80 pages of impenetrable legal jargon before you can continue to use your vehicle”
That’s why I say it must be a written, separate contract. And not signing it must be without consequences regarding other contractual obligations.
Hahaha welcome to the eu




