Do Drivers Need More Privacy Protection? - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Government // Mobile & Wireless

Do Drivers Need More Privacy Protection?

Government can do more to protect data being collected by in-car location tracking services, watchdog agency tells Congress.

Meet NOAA's Unique 3D Weather Tool
Meet NOAA's Unique 3D Weather Tool
(Click image for larger view.)

Government can do more to protect consumer data that is being collected by a growing number of in-car services that track the location of drivers, the Government Accountability Office said in a new report to Congress.

The growth of location-based services provided through in-car systems, personal navigation devices, and mobile apps is outstripping government and industry privacy protections, the authors of the report concluded. Companies providing the technologies and services have inconsistent safeguards and varying levels of security, and in the absence of meaningful legislation, agencies should fill the gap by establishing clear expectations for companies.

Both the Federal Trade Commission and the Commerce Department's National Telecommunications and Information Administration in 2012 recommended commercial privacy practices that are in line with industry best-practices.

But "we found that the companies in our sample did not consistently follow industry-recommended privacy practices and that federal agencies could clarify their expectations for steps companies should take to protect consumers' location data privacy," the GAO said.

[The GAO isn't the only organization interested in in-car data systems.  Read: Google Android Heads For Cars.]

The study was requested by Sen. Al Franken, chair of the Judiciary Committee subcommittee on Privacy, Technology and the Law.

GAO cited a Frost and Sullivan report predicting that the market for in-car telematics services will grow from 11.8 million subscribers in 2012 to 31.6 million in 2016. In 2012, Sprint announced plans to partner with Chrysler to provide embedded in-car communications services, and satellite radio company SiriusXM in 2013 agreed to acquire a company that provides auto manufacturers with location-based services for their customers. The one market segment that is likely to shrink is standalone personal navigation devices, which are being overshadowed by in-car technology and mobile apps.

For the study, the GAO questioned six auto manufacturers -- Chrysler, Ford, General Motors, Honda, Nissan, and Toyota -- who accounted for 75% of the U.S. new-car market in 2012. All offer models with in-car location-based services. Also examined were two manufacturers of standalone navigation devices, Garmin and TomTom, and two map and navigation application developers, Google Maps and Telenav.

 Image: Flickr - MRoach
Image: Flickr - MRoach

All of these companies collect location data, and nine of the 10 share data with third parties that provide emergency response, traffic information, information about local services, advertisements, and other services. None of the companies sell data to data brokers. All of the companies take steps to remove personally identifiable information and have privacy policies informing customers of how data is used, but the policies often do not conform to industry best-practices and data security is uneven.

Not all data is encrypted while being transmitted and stored, methods for removing personally identifiable information vary, and customers often are not fully informed of how their information is being gathered and used, the GAO found. None of the companies allows customers to have their data removed from the systems.

"Currently, no comprehensive federal privacy law governs the collection, use, and sale of personal information by private-sector companies," the GAO said, although the FTC Act, the Communications Act of 1934, and the Electronic Communications Privacy Act of 1986 address some of these issues. In 2012, the FTC and NTIA called on Congress to pass data privacy legislation to provide a minimum level of protection, but none of three resulting bills introduced in 2012 or 2013 have been enacted.

The proliferation of technologies capable of generating sensitive data and of services using it, coupled with a lack of basic privacy protections, puts consumer privacy at risk, the GAO said.

William Jackson is a technology writer based in Washington, D.C., who specializes in telecommunications, networking, and cyber-security in the public sector.

Mobile, cloud, and BYOD blur the lines between work and home, forcing IT to envision a new identity and access management strategy. Also in the The Future Of Identity issue of InformationWeek: Threats to smart grids are far worse than generally believed, but tools and resources are available to protect them. (Free registration required.)

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
User Rank: Author
1/8/2014 | 8:31:41 PM
Re: Open Season
Wisconsin lawmakers are debating police use of automated license plate scanners -- debating whether it should be limited to the use in an active investigation, as opposed to just collecting millions of plates for possible analysis:
Marilyn Cohodas
Marilyn Cohodas,
User Rank: Author
1/8/2014 | 5:36:45 PM
Re: Open Season
As far as privacy goes, I'm all in with government tracking my car. At least the part of government that will send a police car to investigate in the middle of the night when I accidently slide into a utility pole on a sheet of black ice.
User Rank: Author
1/8/2014 | 5:29:56 PM
Open Season
One wonders what the NSA folks are thinking about doing with all that data our cars will be beaming out?

In the meantime, a Senate Commerce committee released a report last month that made it clear that marketers are having a field day with our digital traces.


User Rank: Author
1/8/2014 | 1:39:29 PM
First things first
I'm far more concerned about drivers plowing their cars into the back of mine or swerving into pedestrian traffic while they check their various in-car information sources than I am about companies mining the data those information sources collect.
Lorna Garey
Lorna Garey,
User Rank: Author
1/8/2014 | 1:26:56 PM
What else is new?
I'm shocked, SHOCKED to hear that laws and regulations are lagging behind technology. Talk to a biotech firm sometime -- these jobs are actually moving out of the US because of rampant uncertainly over regulatory direction on everything from stem cells to drug trials.

Meanwhile, we have the least productive congress in history. And we wonder why the economic recovery is slow.
User Rank: Ninja
1/8/2014 | 11:51:18 AM
I'm actually quite glad you brought this to my attention. I'm pretty low tech with my car as I don't drive much so it's not needed, but I didn't even consider the location data from vehicles and their accessories. I'd certainly like to see that encrypted at the very least. 
The State of Chatbots: Pandemic Edition
Jessica Davis, Senior Editor, Enterprise Apps,  9/10/2020
Deloitte on Cloud, the Edge, and Enterprise Expectations
Joao-Pierre S. Ruth, Senior Writer,  9/14/2020
Data Science: How the Pandemic Has Affected 10 Popular Jobs
Cynthia Harvey, Freelance Journalist, InformationWeek,  9/9/2020
White Papers
Register for InformationWeek Newsletters
Current Issue
IT Automation Transforms Network Management
In this special report we will examine the layers of automation and orchestration in IT operations, and how they can provide high availability and greater scale for modern applications and business demands.
Flash Poll