Understand Connected-Car Data Privacy Before Buying

Before buying a connected car, you need to know what personal data it collects, how that data is shared and retained, and what controls you have over it. In Australia, there is no single federal law dedicated to connected car data privacy, so protections rely on the Privacy Act 1988 (Cth) and the Australian Privacy Principles, combined with each manufacturer's own privacy policy and terms of use. To build a clear shortlist, compare each model's privacy settings, data sharing defaults, and retention periods side by side, and note where information is missing rather than assuming it is a drawback.

What is connected car data privacy?

Connected car data privacy refers to how personal information generated by a vehicle's connected services—such as location, driving behaviour, biometrics, and infotainment usage—is collected, used, shared, and protected. In Australia, the Privacy Act applies to most car manufacturers that collect personal data through connected services. Key principles include transparency, consent, data minimisation, and the right to access or correct your data. However, enforcement varies, and many overseas manufacturers apply global privacy policies that may not align perfectly with Australian expectations.

What data do connected cars collect?

Modern vehicles can collect a wide range of data through personal data collection systems. Common categories include:

• Location data: GPS coordinates, routes, and timestamps, often used for navigation and emergency services.
• Driving behaviour: Speed, braking patterns, acceleration, and seat belt usage, sometimes shared with insurers.
• Vehicle health: Diagnostics, fuel or battery levels, and maintenance alerts.
• Biometric data: Voice commands, facial recognition for driver profiles, or health metrics from seat sensors.
• Infotainment and phone data: Contacts, call logs, messages, and app usage when a smartphone is paired.

Some vehicles also collect data from cameras and microphones for driver assistance features, and this may be stored or processed externally.

How to compare privacy across listings side by side

When shortlisting cars, create a comparison table with the following columns for each model:

This layout helps you spot missing information quickly: a blank or "not disclosed" cell is not necessarily a drawback—it may simply mean the manufacturer has not published details. However, if a competitor provides clear answers and another does not, that gap might be a risk depending on your priorities.

Which differences matter most for personal priorities?

Not all data privacy features are equally important for everyone. Consider these trade-offs:

• Convenience vs. privacy: Features like remote start from your phone or voice assistants often require continuous data collection. If you value convenience, you may accept more data sharing, but check whether you can turn off specific features while keeping others.
• Insurance discounts vs. data sharing: Some insurers offer lower premiums if you share driving behaviour data. If you are a safe driver, this could save money, but it means your data is shared regularly. Check if sharing is opt-in or opt-out.
• Resale value vs. data retention: Cars that retain data indefinitely might pass your personal information to the next owner. Some manufacturers allow you to delete data before selling, which is important if you have used connected services extensively.
• Legal compliance vs. overseas data transfer: Australian Privacy Principles require that personal data sent overseas is protected. If a manufacturer's policy states data may be stored in countries with weaker laws, that might influence your decision if you are privacy-conscious.

How to distinguish missing information from genuine drawbacks

A missing privacy policy detail is not automatically a red flag, but it becomes a drawback if it prevents you from making an informed choice. For example, if a carmaker does not disclose data retention periods, you cannot know how long your driving history might be stored. In contrast, a genuine drawback is a clear term that conflicts with your needs, such as mandatory data sharing with advertisers with no opt-out.

To distinguish:

1. Check for official documentation: Look for a privacy policy on the manufacturer's Australian website or in the owner's manual. If absent, treat that as a gap.
2. Look for defaults: See whether data sharing is opt-in or opt-out. Opt-out defaults are often a genuine privacy concern because many owners never change settings.
3. Test the settings: If possible, explore the infotainment system in a showroom. Can you disable location tracking easily? Are there clear menus for privacy settings?
4. Ask the dealer: Request written confirmation about data collection and sharing. If they cannot provide it, that is another gap.

Practical example: comparing two hypothetical connected cars

Imagine you are choosing between a Model X and a Model Y. Model X's privacy policy states it collects location and driving behaviour, shares with insurers only with explicit opt-in consent, and retains data for 12 months. Model Y collects location and voice recordings, shares with third-party advertisers by default (opt-out), and retains data indefinitely. Even if Model Y has better performance, your priority for minimal data sharing might make Model X the better privacy choice. If Model Y were missing its retention policy entirely, you would have to decide whether that unknown is acceptable.

Building your shortlist: step by step

1. List your privacy priorities: Decide what matters most—data minimization, control over sharing, short retention, or transparency.
2. Gather information: For each car you consider, find the connected services privacy policy or terms. Note the data categories, sharing defaults, retention periods, and available privacy settings.
3. Create a comparison table: Use the template above to record findings side by side.
4. Mark unknowns: Highlight cells with missing information and decide whether you can live with that uncertainty.
5. Evaluate trade-offs: Weigh each car's privacy profile against your priorities and other vehicle attributes (price, features, safety).
6. Shortlist: Keep only cars that meet your minimum privacy standards or where gaps are acceptable given other benefits.

Consent and privacy settings in connected cars

Under Australian privacy law, consent must be informed and voluntary. Many connected car features ask for consent during setup, but the language may be buried in long terms. Check whether you can use the car without agreeing to all data collection—sometimes core functions like navigation work without enabling extras like voice recognition or telematics for insurance. Look for privacy settings in the car's touchscreen or the companion app: options to disable location, delete voice recordings, or limit data sharing.

Data sharing: who gets your information?

Manufacturers often share data with third parties such as insurers, advertisers, app developers, or government agencies. In Australia, data sharing must comply with the Privacy Act, but exceptions exist for law enforcement and emergencies. Pay attention to:

• Sharing with insurers: Some cars have built-in telematics that can send driving data to insurance partners if you enrol.
• Advertising and marketing: Infotainment systems may collect browsing or usage data for targeted ads.
• Service providers: Cloud storage, navigation, and voice assistant providers may receive your data.

Check if you can opt out of each type of sharing separately.

Data retention: how long is your data kept?

The Privacy Act requires that personal data not be kept longer than necessary, but what is "necessary" varies. Some manufacturers keep data for the life of the vehicle, while others delete after a set period or when you request deletion. If retention is indefinite, ask if there is a way to request deletion, especially before selling the car.

Australia-specific considerations

In Australia, connected car data privacy is also influenced by state laws on surveillance devices and road rules. For example, using collected data as evidence in legal proceedings is possible. Additionally, the Australian Competition and Consumer Commission (ACCC) has examined consumer data rights in the automotive sector, but no specific code exists yet. Therefore, the manufacturer's policy is your primary source of rights.

Conclusion

Understanding connected-car data privacy before buying helps you avoid surprises and choose a vehicle that matches your comfort level with data collection. By comparing policies side by side, noting missing information, and focusing on your priorities—whether consent, sharing, retention, or control—you can build a clear shortlist. Always verify details with official documents and consider how long you plan to own the car, as data practices can affect resale and insurance.