# Connected vehicle data privacy and access concerns

> Live situation record from CLSTR: https://clstr.news/situations/connected-vehicle-data-privacy-concerns
> Updated: 2026-10-23T10:08:04.000Z. Sources: 22. Developments: 5.

A joint study by Northeastern University and Consumer Reports identified significant privacy risks in connected vehicles, noting that 19 of 21 tested models communicated with third-party domains. These data flows often included sensitive identifiers like VINs, geolocation, and contact details, which were transmitted to advertising, tracking, and analytics (ATA) firms such as Alphabet, Meta, Amazon, and Adobe. The Tesla Model 3 was identified as a high-frequency communicator, contacting 34 unique ATA domains. Companion mobile apps often exacerbate these risks; seven of 30 tested apps transmitted sensitive data to third parties, potentially allowing brokers to build consumer profiles for insurers and banks. Honda was noted as the only manufacturer to take active corrective measures by updating apps and requesting the removal of certain stored location data.

Recent findings from a CARUSO study suggest that manufacturers continue to restrict access to connected vehicle data, potentially hindering competition in the automotive aftermarket despite the implementation of the European Data Act. An evaluation of 28 manufacturers revealed that 32% have not implemented Data Act provisions, 64% lack adequate pricing models for third-party access, and 68% lack sufficient API solutions. Further analysis in Brazil highlighted variations in data transparency and retention, with periods ranging from 20 days to five years.

Cybersecurity threats are increasingly shifting toward external ecosystems. Research from the University of Gothenburg and Chalmers University of Technology shows that vulnerabilities involving connected apps, websites, and cloud services have nearly tripled compared to the previous decade. Additionally, the integration of mobile applications has created risks for stalking and harassment, exemplified by a case where a BMW app was used to remotely track and manipulate a vehicle's functions.

## Timeline

### 2026-10-23: Connected vehicle technology raises security and entertainment concerns

As Google expands Android Automotive OS with new entertainment apps, reports highlight security risks where connected car apps can be exploited for stalking and remote vehicle control.

2 sources. https://clstr.news/cluster/connected-vehicle-technology-raises-security-and-entertainment-concerns

### 2026-10-21: Connected car apps and cloud services pose growing security risks

A new study shows that cybersecurity vulnerabilities in connected cars are shifting toward external apps, websites, and cloud services, which have seen a nearly threefold increase in reported weaknesses.

4 sources. https://clstr.news/cluster/connected-car-apps-and-cloud-services-pose-growing-security-risks

### 2026-10-13: Vehicle manufacturers limit access to connected car data

Studies show automotive manufacturers are limiting access to connected vehicle data, impacting aftermarket competition and raising privacy concerns regarding data retention and transparency.

2 sources. https://clstr.news/cluster/vehicle-manufacturers-limit-access-to-connected-car-data

### 2026-10-01: Connected car study reveals extensive data sharing with tech giants

A study by Northeastern University and Consumer Reports reveals that most modern connected cars and their apps transmit sensitive driver data to companies like Google, Meta, and data brokers.

2 sources. https://clstr.news/cluster/connected-car-study-reveals-extensive-data-sharing-with-tech-giants

### 2026-09-29: Connected vehicles share sensitive data with third-party tech firms

A study by Northeastern University and Consumer Reports found that most connected cars and their mobile apps share sensitive data, including location and VINs, with third-party advertising and tracking firms.

12 sources. https://clstr.news/cluster/connected-vehicle-data-privacy-concerns-highlighted-in-new-study

---
Cite as: Connected vehicle data privacy and access concerns. CLSTR, https://clstr.news/situations/connected-vehicle-data-privacy-concerns