ADAS & Autonomous Vehicle Engineering - November 2023 - 22

Cybersecurity
Over-the-air (OTA) updates and automakers' desire to offer more revenue-generating content are the latest vectors to
consumer data. The 2022 Jeep Grand Cherokee offered streaming of Amazon Fire TV.
How is that possible?
As of 2018, there were no real auto consumer data protection
laws. Essentially, we lived in the Wild West, and
any company providing an app for a mobile phone, or
anybody providing services to drivers could pretty much
track any data they wanted, without asking permission.
Where are we today?
Since 2018, several things have happened; Europe
passed the GDPR (General Data Protection
Requirement), which has completely bifurcated
Europe and the U.S. over data privacy, because their
rules are way different than our rules.
The Feds have not yet passed any federal consumer
privacy legislation. As a consequence, several states
began passing their own versions of GDPR between
2019 and 2023. And these rules, in theory, apply to any
services provided by automotive in our cars.
A lot of services - Apple CarPlay, Android Auto,
Sirius radio, other apps - may be in violation of the
law, because they do not ask permission. And they also
don't provide notice of what they do with the data that is
being collected. All of that needs to be disclosed today
in ways that it did not need to be disclosed last year.
What can vehicle buyers do?
I'm paraphrasing Mozilla here. Consumers have very
little control. They can choose to not use a car app or
try not to use connected services, but that might mean
their car doesn't work properly - or at all. Consumers
have almost zero control and options in regard to
privacy other than simply buying an older model.
Regulators and policymakers are behind on this
front. But momentum for protection is rapidly growing
on the consumer side, and within the next 12 months
we could have a series of lawsuits against car companies.
What is DeleteMe doing in this area?
As a privacy company, we have nothing to do with
protecting car data. We talk about this issue, because
we are very up-to-date on the current regulatory
regimes and the trends they're taking. For consumers,
we can remove their data from location brokers.
From the Mozilla report, a selection of what some auto
companies said about automotive privacy:
* " Data breaches are common. Serious data leaks and
breaches are ordinary in the industry. "
* " Some brands have more than five different privacy-policy
documents, an unreasonable number for
consumers to engage with. "
* Companies can share data with law enforcement
and governments based on " formal or informal "
requests. "
* " they can share and sell consumers' " preferences,
characteristics, psychological trends, predispositions,
behavior, attitudes, intelligence, abilities, and
aptitudes " to data brokers, law enforcement, and
other third parties. "
* " By being a passenger, you are considered a user
- and by being a user, you have consented to their
privacy policy. Several car brands also note that it
is a driver's responsibility to tell passengers about
the vehicle's privacy policies. "
22 November 2023
ADAS & AUTONOMOUS VEHICLE ENGINEERING
22 November 2023
ADAS & AUTONOMOUS VEHICLE ENGINEERING
Stellantis

ADAS & Autonomous Vehicle Engineering - November 2023

Table of Contents for the Digital Edition of ADAS & Autonomous Vehicle Engineering - November 2023