miDGT app found sending user data to third-party servers

The Spanish Data Protection Agency (AEPD) has concluded an investigation revealing that the miDGT application, used for managing official driving documentation, was sending user data to third-party servers without user knowledge.

The issue was brought to light by a user who utilized DuckDuckGo’s tracking protection to detect suspicious activity. The investigation, which began in 2023, found that the app was transmitting various technical details to external servers, potentially outside the European Union. According to the AEPD, even the Dirección General de Tráfico (DGT) was unaware of how the application was functioning in the background.

Data being transmitted included the application version, pixel density, installation date, operating system build number, battery level, unique identifiers, CPU data, screen resolution, and network operator information.