On: Data collected by cars and sold to third parties

[jboggan]

I'd like to point out that the CA assembly has passed AB-1542 and it is likely going to be signed by the governor this week. This would make the sale and sharing of "sensitive" personal information illegal, and one of the sensitive personal categories is geolocation data that can map an individual to within a 1850-ft radius.

In my understanding, this pretty much makes this type of driver data illegal to sell or share. CalPrivacy's enforcement division has their eye on connected car manufacturers already, so we'll see what they do with that.

https://leginfo.legislature.ca.gov/faces/billHistoryClient.x...

[porkshoe → jboggan]

Another note for Californians -- the California DROP (delete request and opt-out platform) takes VINs as one of the inputs.

https://privacy.ca.gov/drop/

[MarleTangible → jboggan]

Honda found a work around where they show you a warning on your dash if you disable data collection, similar to maintenance being due or low fuel.

[IshKebab → jboggan]

Well they'll still sell the data but "anonymised" like with phone location data. Better, but not fixed.

[jboggan → IshKebab]

Not true. If they do that they are violating the law and that will show up in the audits. They have to delete the data, all records associated with that identifier, now including any 3rd party data that they bought from other brokers and did not collect or buy originally. There have been many loopholes for years but they are all being closed.