The digital evolution of modern vehicles has driven us into new territory regarding personal data collection and privacy. In the most recent episode of the State of Enterprise IT Security Edition, Brad Bussie, e360’s Chief Information Security Officer, maps out the landscape where automobiles and data privacy intersect, and the implications this has for every driver in the 12th episode of the State of Enterprise IT Security Edition.
“This means that your car and the services you use in it, like GPS, satellite radio, they can collect data such as your contact info, race, immigration status,” Brad articulates, painting a comprehensive picture of the extent to which vehicles are now data collection hubs. It's not just about location tracking; as Brad implies, cars are becoming increasingly adept at profiling their drivers.
The ramifications are significant, with Brad indicating that “that data is shared with a data broker, and then that data broker sells the information to car insurance companies to help tailor an appropriate policy for the driver.” This intersection of data collection and financial implications introduces a complex dynamic between personal privacy and the business models of insurance providers.
Brad brings to light an alarming example that underscores the invasive potential of these practices: "One data broker I came across was Lexus Nexus, and they had a 258-page report on a driver whose insurance went up 21%." This anecdote crystallizes the broader implications of vehicle data-sharing—how personal driving data translates into tangible consequences for consumers.
But perhaps most concerning is the lack of control individuals have over this process. Brad observes, “Most major automakers' privacy policies, they have no opt-out choice, and they don't offer encryption for our data.” In an age where data privacy is paramount, such practices seem discordant with the wider push for user rights and data protection.
The overarching issue, as Brad sums up, is not just about data collection but the broader implications for consumer privacy rights: "So if you're looking for that right to be forgotten from a privacy policy standpoint, doesn't exist." It’s a stark reminder that in the digital age, the road to privacy is fraught with challenges, especially when your vehicle is part of the equation.
As the conversation around data privacy accelerates, Brad’s insights steer the discussion towards crucial questions about the balance between innovation, convenience, and the fundamental right to privacy.
Episode eleven of the "State of Enterprise IT Security" podcast is available now. For more insights into how technology shapes our world, stay tuned to our blog for the latest in enterprise IT security and beyond.
