Source: Schneier on Security
Researchers found that modern connected vehicles generate continuous streams of personal data—location, driving habits, intimate moments—that manufacturers share with third parties with minimal transparency and often without explicit driver permission. Unlike smartphones, which have developed consent frameworks and privacy settings, cars operate in a regulatory vacuum where the default is surveillance-first design. Every commute becomes a data extraction opportunity for insurance companies, advertisers, and unknown data brokers. Insurers already use driving data to deny or reprice coverage, and there's no technical or legal mechanism forcing automakers to let owners opt out.