Browse
Log in / Register
Share
Aug. 22, 2026 — The modern vehicle is no longer just a machine for transportation. It’s a rolling data center, constantly collecting information about where you go, how you drive, who you talk to, and even what happens around you. A new report from Quebec’s Committee on Ethics in Science and Technology warns that these connected cars come with serious privacy pitfalls that most drivers are unaware of.
The 64-page report, released today, identifies 12 distinct privacy risks tied to vehicle connectivity. Among them: relentless location tracking, vulnerability to cyberattacks, and insurance companies using driving data to set rates without transparency. The report also highlights that cameras and sensors in connected vehicles can capture bystanders — pedestrians, cyclists, and other drivers — without their knowledge or consent. That raises legal and ethical questions about surveillance in public spaces.
Luc Bégin, the committee’s chair, emphasized that the benefits of smart cars — such as automatic emergency braking, real-time traffic updates, and remote diagnostics — are real. But he warned that convenience often comes at the cost of personal data. “Most people skip reading the fine print when they accept terms and conditions,” Bégin said. “They have no idea how much of their private life is being recorded, stored, and potentially sold.”
The report comes as U.S. regulators are also grappling with the same issues. The Federal Trade Commission (FTC) has recently signaled increased scrutiny of how automakers and tech companies handle vehicle data. In a 2025 policy statement, the FTC warned that companies collecting geolocation data from cars must obtain explicit user consent and cannot retroactively change privacy policies without notice. Separately, the California Consumer Privacy Act (CCPA) gives residents the right to request deletion of data collected by their vehicles — but few drivers know how to exercise that right.
Consumer advocacy groups in the United States have praised the Quebec report for its thoroughness. “This report is a wake-up call for U.S. drivers too,” said Jamie Lee, a senior policy analyst at the Center for Digital Democracy. “The same risks exist here. Automakers are collecting vast amounts of data, and the legal framework to protect consumers is still patchy.”
The report also highlights the potential for unfair insurance practices. Usage-based insurance (UBI) programs, which offer discounts for safe driving, are becoming mainstream. But the report warns that insurers may access granular data — such as hard braking, sudden acceleration, and even the time of day you drive — to raise premiums or deny coverage. Without transparency, drivers could be penalized for behaviors they didn’t know were being monitored.
Cybersecurity remains a top concern. The report notes that connected cars are essentially computers on wheels, running thousands of lines of code. Hackers can exploit vulnerabilities to remotely control brakes, steering, or engine functions. In 2024, a major demonstration by security researchers revealed that a hacker could take over a Jeep Cherokee from miles away, leading to a recall by Fiat Chrysler. While automakers have improved security since then, the report says the attack surface is expanding as cars become more connected to home networks, smartphones, and public infrastructure.
Another overlooked issue is the secondary use of data. Automakers often share anonymized data with third parties for research, advertising, or urban planning. But the report warns that “anonymized” data can often be re-identified, especially when combined with location traces. A 2025 study from MIT found that four points of time-stamped location data are enough to uniquely identify 95% of individuals. That means a driver’s daily commute pattern could be enough to de-anonymize their data.
The Quebec report recommends several policy changes, including mandatory privacy labels for connected vehicles — similar to nutrition labels on food — that clearly state what data is collected, how it is used, and with whom it is shared. It also calls for stronger enforcement of consent requirements, especially for data collected from bystanders. The committee suggests that automakers should be required to obtain affirmative consent from anyone recorded by a vehicle’s external cameras.
For U.S. drivers, the report offers a practical checklist. Before buying a connected car, check the manufacturer’s privacy policy. Look for options to disable data collection, or at least limit it. Many vehicles allow you to turn off location tracking or opt out of data sharing — but the settings are often buried in infotainment menus. Consumer Reports has published a guide on how to adjust privacy settings in popular models like Tesla, Ford, and Toyota.
The report also urges drivers to be cautious about linking their car to third-party apps. Many smartphone apps that pair with vehicles — for navigation, music, or remote start — can siphon additional data. A 2025 investigation by the New York Times found that the popular navigation app Waze, when used through Apple CarPlay, shared real-time location data with third-party advertisers unless users manually turned off that setting.
In the end, the Quebec report is a reminder that the price of convenience may be your privacy. As vehicles become more intelligent, the line between personal transportation and surveillance grows thinner. “Drivers should not have to trade their privacy for safety features,” Bégin said. “We need a system that respects both.”
The full report is available online and is expected to influence ongoing privacy legislation in Canada and the United States. Several U.S. lawmakers have already reached out to the Quebec committee for more details, as they prepare new bills aimed at regulating automotive data collection.
