Modern cars are chock full of sensors and connected to the internet via built-in cellular modems. That’s a recipe for massive data collection. Last September, Mozilla’s Privacy Not Included team released a blockbuster report how much data our cars were gathering and it was absolutely staggering. According to the hard-to-find privacy policies, your car can collect extremely personal information including precise location, contact lists from your phone, call and message data, and – believe it or not – even “sexual activity”. Today, I’ll walk through this report and its implications with the head of Mozilla’s Privacy Not Included project, Jen Caltrider.

• Mozilla’s Privacy Not Included: https://foundation.mozilla.org/en/privacynotincluded/ 
• Mozilla’s car report: https://foundation.mozilla.org/en/privacynotincluded/articles/its-official-cars-are-the-worst-product-category-we-have-ever-reviewed-for-privacy/ 
• Mozilla’s report on AI chatbots: https://foundation.mozilla.org/en/privacynotincluded/articles/happy-valentines-day-romantic-ai-chatbots-dont-have-your-privacy-at-heart/ 
• Donate to Mozilla Foundation: https://donate.mozilla.org/ 
• Mozilla layoffs: https://techcrunch.com/2024/02/13/mozilla-downsizes-as-it-refocuses-on-firefox-and-ai-read-the-memo/ 
• Sign the petition to stop car data gathering! https://foundation.mozilla.org/en/privacynotincluded/articles/car-companies-stop-your-huge-data-collection-programs-en/ 
• Bruce Schneier article in Slate: https://slate.com/technology/2023/12/ai-mass-spying-internet-surveillance.html 

• Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch 
• Give the gift of privacy and security: https://fdsd.me/coupons 
• Send me your questions! https://fdsd.me/qna 
• Support our mission! https://fdsd.me/support 
• Subscribe to the newsletter: https://fdsd.me/newsletter 
• Check out my book, Firewalls Don’t Stop Dragons: https://fdsd.me/book 

Use these timestamps to jump to a particular section of the show.

• 0:02:39: What were some top finding from your car privacy report?
• 0:05:14: Which cars did you review and how did you evaluate them?
• 0:09:44: How was I notified and how did I consent to my car’s privacy policy?
• 0:10:39: What are cars tracking? Are electric cars any worse than gas cars?
• 0:13:55: What third party data mining is going on in my car?
• 0:20:41: Is there a way to opt out of data sharing?
• 0:24:10: Is less data collected in Europe?
• 0:26:02: Where is all my data stored? Locally, in the cloud, or both?
• 0:28:52: Is the data at least secured?
• 0:29:48: Can dealerships access my data? What about law enforcement?
• 0:32:28: What about rental or fleet cars? What about passengers?
• 0:37:24: Do car dealers disclose this data collection to shoppers?
• 0:39:11: What are some of the security problems with this data collection?
• 0:45:55: How did car makers and legislators respond to your report?
• 0:48:36: Do modern privacy laws cover auto data?
• 0:50:48: So what can we do about this today?
• 0:54:30: What will Privacy Not Included tackle next?
• 0:58:40: Wrap-up