What Do Connected Cars Know About You? Connected Car Data Explained

New vehicles are equipped with more advanced technologies, from high-end infotainment systems to automatic emergency braking. However, these helpful features also include collecting driver and passenger data. According to Statista, in 2023, the UK had over 19 million connected cars, with forecasts suggesting 100% of new vehicles registered in 2026 will be connected.

Yet, are drivers aware of what types of data are being gathered? Privacy policies are lengthy and complex documents. A recent study found that only 0.5% of website visitors looked at privacy notices in the UK on average. Are drivers doing the same with their vehicle privacy policies? 

In this blog, we have analysed the connected car technology privacy policies from popular vehicle manufacturers to reveal which have the longest policies and how long it would take the average person to read them in their entirety.

Most modern vehicles with connected car technology track a variety of data which drivers may not be aware of. This data mainly includes:

• Driving Behaviour & Location Data: This can track where you drive and park, assess aggressive driving, and track if passengers are wearing seatbelts. Connected cars can track live locations using GPS, which concerns drivers’ privacy, as data can collect driving patterns, history, and routes.
• In-Car Communications & Entertainment: If your car has voice assistance features, this will be tracked alongside phone and Bluetooth pairing in your vehicle. Some car systems can track synced contacts, messages, and call logs. Many connected cars can also record phone calls and conversations from inside the vehicle.
• Biometric & Camera Data: Vehicles, like Tesla’s and GM’s, have monitoring cameras built in, which are tracked, as well as heart rate and fatigue detection. Collecting biometric data raises significant concerns about data privacy, security, and the potential misuse of sensitive personal information.

Manufacturers say this data improves safety and offers personalised services. But many drivers are unaware of how much is collected or who it's shared with.

Do People Actually Read the Privacy Policies? Not really. A 2024 study by Linklaters found that only 0.5% of UK website visitors look at privacy notices. This trend likely applies to car privacy policies too. Below, we have analysed the length of privacy policies from major carmakers. Here are the longest:

Kia Connect tops the list. Reading its 23,359 word privacy policy would take 98 minutes, about the same as watching The Breakfast Club.

Citroen Connect comes second. Its 10,802 word policy takes 45 minutes to read, or about 15 loops of the song Taste by Sabrina Carpenter.

Jaguar Land Rover’s InControl ranks third with a 41-minute read time. That's the length of two episodes of Friends.

These policies include wide-ranging permissions to collect, process, and share driver data.

Connect car policies often share the following information:

• Cybersecurity: Connected cars rely on WIFI to operate, which means they can be at risk of hacking and cyberattacks. Privacy policies include information on data breaches, theft of personal information, and other cybersecurity-related incidents.
• Telematics data: Privacy policies include telematics data, which track a vehicle's driving behaviours, such as speed, braking, and location.
• Liability: Connected cars have complex systems, therefore privacy policies include what is covered in drivers' liability in case of system failures. Drivers should be aware of these in case of potential accidents or property damage.

You’ll also find small print about data sharing with third-party providers, who may have their own privacy terms.

Under GOV.UK GDPR, drivers have several rights over their connected car data:

• Access: You can request a copy of the data collected.
• Rectification: You can correct inaccurate data.
• Erasure: You can ask for personal data to be deleted.
• Objection: You can object to certain types of processing.
• Portability: You can request your data in a portable format.

Car manufacturers must respond to these requests within one month.

A real-world example shows how this tech can affect you. In the US, some drivers found their in-car infotainment systems showing ads based on their driving habits. According to Wired, one user reported ads popping up when braking.

Some insurers already use driving data to adjust premiums. If your vehicle records harsh braking or speeding, your insurance cost may go up.

This technology could soon be used the same way in the UK.

Here are a few simple things you can do:

1. Review your car's privacy settings: Check your infotainment system or car app.
2. Limit permissions: Disable features you don’t use or need.
3. Don't sync sensitive data: Avoid pairing your full contact list or messages.
4. Update software regularly: This helps patch security vulnerabilities.
5. Factory reset before selling: Wipe all personal data before you hand the keys over.

Connected cars offer convenience but raise serious privacy concerns. Drivers rarely read privacy policies, yet these documents reveal how much is tracked and shared. Understanding your rights and taking a few protective steps can help you regain some control over your connected car data.

Before signing a lease or buying a new vehicle, take five minutes to check what data it collects and how it’s used.

You can read more in our blog The Impact of Privacy Concerns on Connected Car Technology. We also publish weekly blogs covering a range of topics, browse the blog section on our website to explore them all.

Nationwide Vehicle Contracts is one of the UK’s leading car leasing brokers. We offer a wide range of leasing deals to suit different needs. To learn more, visit our car leasing guides or speak to one of our team on 0345 811 9595.