Dan YorkMar 4, 2023

Are there ANY car manufacturers NOT selling data about you / your car?

Reading @pluralistic 's Feb 28 piece about VW tracking cars (and not providing the info unless you pay): https://pluralistic.net/2023/02/28/kinderwagen/

Cory Doctorow writes:
---
> And yet, here we are. Like most (all?) major car makers, Volkswagen has filled its vehicles with surveillance gear, and has a hot side-hustle as a funnel for the data-brokerage industry.
---

Is anyone keeping a list of car manufacturers who are NOT doing this?

Pluralistic: VW wouldn’t locate kidnapped child because his mother didn’t pay for find-my-car subscription (28 Feb 2023) – Pluralistic: Daily links from Cory Doctorow

Show threadPlatonides

@danyork @pluralistic EU companies would be subject to the GDPR. Tracking data for your car is clearly 'personal data' under §4.1

They would need your permission for processing it (skipping the case of a collision, which would probably be covered by the eCall law, though), you could retract your permission, get it erased, and you would have the right to obtain access to the data (article 15)

Yet, Volkswagen is a German manufacturer...

@lispi314 @dalias @sldrant

Mar 5, 2023 at 1:57amWeb
Show threadCassandrichMar 5, 2023
@platonides @danyork @pluralistic @lispi314 @sldrant The law (GDPR) should require eCall to be implemented in a least-data-collected manner practical (i.e. outgoing only on crash), but it's not clear to me whether it actually does.
Show threadPlatonidesMar 5, 2023

@dalias @danyork @pluralistic @lispi314 @sldrant
Right. eCall making the cars forcefully call for help on a crash seems sensible.
The vendors taking advantage of having needed to implement that to sell a track-my-car *if the user consents* (perhaps through some setting in their dashboard) would be fine as well.
But the car manufacturer doing that with no consent? That seems a big no-no.

I see a case for a battling owner forcing the manufacturer to change their car so it does not to track him.

Show threadCassandrichMar 5, 2023
@platonides @danyork @pluralistic @lispi314 @sldrant Yes. I don't see why nobody is pursuing these kinds of GDPR cases. The law is no use if nobody brings cases... 😫
Show threadPlatonidesMar 5, 2023

@dalias maybe @noybeu would be willing to pursue that

@danyork @pluralistic @lispi314 @sldrant