Most drivers think of a car as a machine that gets them somewhere. A car built in the last several years is also a data collection device that runs whenever the engine does. It logs speed, braking force, acceleration, steering input, seat belt use, and location. It knows when you drive, how far, and how hard you stop. On many models it also pairs with your phone and pulls contacts, call logs, and text history into the head unit. All of that sits somewhere, and where it goes next is the part almost nobody reads about.
The scale of it came into public view in 2023, when researchers at the Mozilla Foundation reviewed the privacy practices of twenty five major car brands. Every single brand failed their basic standards. More than four out of five said they could share or sell driver data. Over half said they would hand data to law enforcement on an informal request rather than a warrant. Several claimed the right to collect information about sexual activity or health from the driver's data trail. Cars scored worse in that review than any other product category the group had studied, including dating apps.
Then came the part with a price tag attached. In 2024 reporting revealed that a major automaker had been feeding driving behavior data from connected vehicles into data brokers that build risk reports for insurers. Drivers found hard braking events and fast acceleration events listed in files they never knew existed. Some learned about it only after their insurance premium jumped or a policy renewal was declined. Most had clicked through an in car sign up flow for a safety and roadside feature and never understood that a driving score would follow. The automaker ended those broker relationships after the reporting, and a state attorney general filed suit.
The consent problem is the heart of it. Agreeing to share data on a fourteen inch touchscreen in a dealership parking lot is not the same as understanding what you agreed to. The screen shows a short summary and a button. The full terms live in a document nobody reads on a phone, and the setting often sits several menus deep in a place you would never look. Turning it off later can disable features you paid for, like remote start, stolen vehicle tracking, or crash notification. That is the trade nobody explains at purchase.
There are people this hits harder than others. If you drive for work, delivery, rideshare, or trades, you accumulate far more logged events than a commuter, and the raw count of hard stops will look worse without context. City driving produces more braking events than highway driving, so an urban driver can score worse than a suburban driver with identical care. Neighborhood matters too, since location history can reveal where you park overnight and where you spend your days. A pricing system built on those inputs can rebuild patterns that insurance law has spent decades trying to keep out of rate setting.
There is also the question of who else can ask. Location and event data has been pulled into divorce cases, custody disputes, and criminal investigations. Some companies say they require a warrant. Others say they will cooperate with an informal request. The standard varies by brand, by country, and sometimes by which internal team fields the call. For a driver, that means the protection you have depends less on the law than on the internal policy of a company you did not choose to do business with.
The good news is that several practical steps exist and none of them take long. Open the connected services menu in your vehicle and look for anything labeled driving score, driver behavior, telematics, or data sharing, then turn off what you can live without. Check the manufacturer's online account portal, since some settings live there and not in the car. Delete paired phone data before you sell or return a vehicle, and do the same in any rental car you use. In several states you can request a copy of what a company holds on you and ask them to delete it, and consumer reporting agencies that build driving reports have to give you your file on request.
The wider point is that the rules for this are still being written. Enforcement is uneven, disclosure is thin, and the technology moves faster than the paperwork behind it. That leaves the burden on drivers for now, which is not fair but is the situation. Spend twenty minutes in your settings this week. Ask the dealer directly what is enabled on your vehicle and get the answer in writing. Then check whether a driving report exists in your name before an insurer quotes you, not after.
