Connected Car Data Privacy: How to Secure Your Vehicle Data in Australia

close

Protecting vehicle data

How to secure your data in the connected car
New X9 PC P16-2

Modern connected cars generate up to 25 gigabytes of data per hour [1]. However, a study by the Mozilla Foundation reveals something alarming: all 25 car brands tested failed basic data protection standards [2]. Your vehicle knows exactly where you live, where you work, and where you take your children.

This guide shows EV drivers in Australia what information is collected and how you can regain control over your privacy.

What car data does your vehicle collect about you?

Connected vehicles are now rolling computers. They continuously collect information about their surroundings, driving behaviour, and occupants [3]. Many electric vehicle owners underestimate how accurate this digital profile actually is in everyday use.

Location and movement

The GPS receiver in the vehicle registers every step:

  • All routes travelled, including precise timestamps.

  • Frequently visited destinations such as one's home address, workplace, or children's school.

  • Exact parking positions and the respective parking duration of the car.

Driving behaviour and technical vehicle data

The system also tracks your behaviour in traffic:

  • Speed, acceleration, and braking behaviour in different situations.

  • The way you approach curves and pass through intersections.

  • The use of seat belts and detailed records in the event of accidents.

Personal habits in the interior

The sensors in the cockpit also record very private details:

  • Voice recordings via the voice control of the infotainment system.

  • Video data from the driver monitoring cameras, which are designed to detect fatigue.

  • Contacts and call logs of the paired smartphone.

  • Music preferences, radio stations and preferred air conditioning settings.

Under Australia's Privacy Act 1988, all information linked to your number plate or vehicle identification number is considered personal data [3]. It therefore enjoys the full protection of the Australian Privacy Principles.


Risks in connected transport: How sensitive data endangers cars and drivers

Many drivers underestimate the dangers posed by the uncontrolled sharing of data [4]. This is not just about personalised advertising, but also about tangible financial and personal risks.

Profiling by insurance companies

Some insurance companies already use telematics-based tariffs. Your individual driving style determines the premium amount. Those who brake abruptly or frequently drive at night may pay higher premiums, as their driving behaviour is directly analysed.

Security vulnerabilities and cyberattacks

Car manufacturers are lucrative targets for cybercriminals. A successful attack on the manufacturers' servers can result in the theft of sensitive information such as your home address, your daily routes, or even login credentials for your vehicle profile.

Complications during resale

If you sell your car, all your personal settings will remain stored in the system unless it's thoroughly cleaned. The new owner can then access your navigation history and phone contacts. Conversely, when buying a used car, you might inherit the previous owner's history.

Disclosure to third-party providers

Manufacturers often share the collected information with external partners. These include marketing companies, mapping service providers, and analytics firms that derive commercial benefit from the movement profiles.


8 practical steps for more data protection in everyday life

You don't have to stand idly by while modern vehicles collect data. With the following steps, you can quickly regain control over your privacy:

  1. Check privacy settings: Go directly to the system menu of your infotainment system and deactivate the transmission of unnecessary data.

  2. Restrict location tracking: Turn off persistent GPS tracking if you do not need it for active navigation.

  3. Manage connected apps: Check the permissions of the manufacturer's smartphone app and revoke unnecessary access rights.

  4. Use voice assistants strategically: Deactivate the voice assistant's permanent readiness to prevent it from accidentally recording private conversations indoors.

  5. Keep your software up to date: Always install security updates promptly to close known security gaps in the car's operating system.

  6. Do your research beforehand: Use independent sources such as review sites and official safety databases to find out about technical details and features of different vehicle models before making a purchase decision.

  7. Take precautions when selling your car: Reset the infotainment system to factory settings before selling, unpair all mobile phones, delete your user account in the manufacturer's app, and remove the vehicle from your online profile.

  8. Opt for privacy-friendly brands: When buying an electric car in Australia, prefer manufacturers who handle your data transparently and adhere to strict security standards.


How we at XPENG protect your vehicle data

At XPENG — one of Australia's leading Chinese EV brands — we prove every day that modern electromobility and strong data protection can go hand in hand. For the Australian market, we have implemented extensive security measures to protect your private data in the car:

  • Local data storage: We store data from our Australian customers in secure data centres.

  • In-house data protection officer: A dedicated data protection officer continuously monitors our compliance with all legal requirements.

  • Rigorous certifications: XPENG was the first emerging Chinese electric vehicle manufacturer to receive the demanding ISO 27001 certification for information security management systems and ISO 27701 certification for data protection management systems from the British Standards Institution (BSI) [5].

  • Full control in the cockpit: You can transparently control which consents you give for data processing at any time via the vehicle settings.

  • Legally compliant transfer: For any data transfers, we use legally recognised contractual safeguards.

  • Future-proof cyber resistance: Our security concept meets the stringent UN R155 requirements for the cybersecurity of motor vehicles.

With these comprehensive measures, we demonstrate that technological progress and privacy protection don't have to be mutually exclusive. Learn more about our security standards and discover our latest electric vehicle models directly on our website.