Consent in Connected Cars: What Drivers Agree to Share
Setting up a connected car takes about as long as pairing a phone. In those few taps, the owner agrees to collection that can include precise location history, voice recordings, driving behaviour, and contacts synced from a phone. The car then collects the same data on anyone who drives or rides in it, none of whom were in the showroom for the agreement.
This gap between who consents and who is recorded is now the central question in vehicle privacy. This guide explains what connected cars collect, where consent does and does not reach, and the practical steps owners, borrowers, and fleet managers can take today.
Parent consent for a school app should name the data collected, the vendors receiving it, and how long it is kept. A single tap at enrolment rarely covers new features added later, so schools should refresh consent when an app changes what it collects.
Consent in a connected car should name the data the vehicle collects, who receives it, including insurers and data brokers, and how to switch each use off. A single accept screen at delivery rarely covers later features, so owners should review the privacy settings after every major software update.
What a connected car actually collects
Modern vehicles record far more than trips. Location history, speed and braking patterns, voice commands, phone contacts synced over Bluetooth, and in some models cabin camera images all flow to the manufacturer and its partners. Much of it leaves the car over a built in mobile connection, so it is shared before the owner ever opens an app or reads a dashboard privacy page.
The consent moment usually happens once, on a delivery day screen or a companion app signup, when the buyer is focused on driving away. That single agreement is then treated as covering years of new services, driver scoring products, and data sales that did not exist when the car was bought. Regulators increasingly treat that as a weak basis for sharing.
Where the current model falls short
Bundling is the main problem. Navigation needs location, but insurance scoring, advertising profiles, and broker sales do not, yet they are often switched on by the same acceptance. Passengers never see any notice at all, even though their conversations and movements are inside the data being collected by a car they do not own.
Second owners inherit the problem. A used car can keep sending data linked to the previous keeper until accounts are reset, and many buyers never learn a reset exists. Dealers rarely make the data handover part of the sale, so location history and saved destinations pass silently from one household to the next.
Checks owners and fleets should run
Start in the vehicle privacy menu and the companion app, and list every sharing toggle separately: manufacturer analytics, insurer programmes, broker or marketplace sharing, and advertising. Turn off anything that is not needed for a service actually used, and take screenshots, because updates can quietly restore defaults that favour sharing.
Fleet operators carry the same duties toward their drivers. A worker driving a tracked van all day generates a detailed movement record, and using it for discipline, route scoring, or sale needs its own clear notice and a genuine policy, not a line buried in a vehicle handbook nobody reads.
Keep reading: Consent for School Apps: What Parents Agree to and What Schools Should Check, Consent and Workplace Monitoring: What Employee Notices Must Actually Say, and Consent in Connected Cars: Location Data, Passengers, and Shared Vehicles cover the nearby cases in this series.
Frequently asked questions
Can I turn off connected car data sharing completely?
Some collection can be switched off in the privacy menu or app, including insurer and broker sharing on many models. Core safety and recall systems may keep a basic connection, but marketing and data sale uses are usually optional and can be declined without affecting driving.
Does a passenger consent to being recorded in someone else's car?
Passengers rarely get any notice, which is a real gap in the current model. Owners should tell regular passengers what the car collects, especially cabin recording, and manufacturers are under growing pressure to add clear in car notices for guests.
What should happen to car data when a vehicle is sold?
The seller should remove their account, reset saved destinations and contacts, and end data sharing before handover. Buyers should check which account the car is linked to on day one, because until it is changed the vehicle may keep reporting to the previous owner.
Can insurers require access to driving data?
Insurers can offer policies priced on driving data, but joining should be a separate, informed choice with the scoring factors explained. It should never be switched on silently through a car purchase agreement the driver barely saw.