A guide to connected-car data: What you need to know and what you can do

Most new cars are connected to the internet. That gives you useful features such as live traffic, remote locking and automatic emergency calls. But it can also mean your car is collecting information about where you go and how you drive, and potentially sharing it with other companies.

So what exactly does your car know about you, where can that information go and what can you do about it?

This guide looks at the data your car collects about you and your driving. If you’ve ever connected your phone to a car, our guide, Your phone and your car, explains what can happen to your contacts, messages and other information when you connect your phone to a vehicle.

What does your car know about you?

A connected car can send information back to its manufacturer, often without you being particularly aware of it.

Depending on your car and the services you’ve activated, this could include:

• Where you go: your location and a history of your journeys.
• How you drive: including braking, acceleration, speed, when you drive and whether you wear a seatbelt.
• What happens inside the car: some newer vehicles use cameras, microphones and sensors to monitor the driver or operate connected features.
• Information from your car’s app: including location and information about how you use the app.

Location information can be particularly revealing. Over time, your journeys could potentially show where you live and work and other places you regularly visit.

Yet, many drivers don’t know how much information their car may be collecting. Research published in 2024 found that only 28% of UK car owners said they’d read the terms and conditions or data agreements covering their car’s data collection; that 72 per cent of motorists were unaware of cars collecting data related to how and when they are driven; 67 per cent didn’t realise that data pertaining to their use of GPS and infotainment could be gathered; 54 per cent were in the dark that some cars amass data on speed; and 53 per cent that route history is also accessible. Even a car’s current location can be tracked and stored; something that 44 per cent of drivers were also apparently not aware of.

Where can your driving data go?

One of the biggest concerns is whether information collected by your car could be shared with insurers, data brokers or other companies.

We’ve already seen what can happen in the US.

The US Federal Trade Commission took action against General Motors (GM) and OnStar over allegations that they collected and sold drivers’ precise location and driving behaviour data without adequately informing them or getting their consent.

The regulator said this information could be used to set insurance rates. Its final order, issued in January 2026, prevents GM from sharing certain location and driving behaviour data with consumer reporting agencies for five years and requires greater transparency and choice for drivers.

There are questions about the use of connected-car data in the UK too.

The Data Protection Foundation (DPF) investigates how organisations collect and use people’s personal information, including potential data misuse. Its work goes beyond simply helping you understand your rights: members can participate in investigations, provide evidence and, where appropriate, seek redress through collective actions and compensation claims.

We’ll explain more about how you can join the DPF for free below.

What happens if your car data is leaked?

Sharing isn’t the only risk. The huge amount of information collected by connected vehicles also needs to be kept secure. In 2024, a data security problem involving Volkswagen’s software subsidiary Cariad exposed information relating to around 800,000 electric vehicles.

The exposed information included location data, and in some cases it could be linked to individual drivers. The issue affected vehicles across several European countries, including the UK. It’s a reminder that the more information that’s collected about you, the more there potentially is to lose if something goes wrong.

Did you actually agree to your data being used?

You may have agreed to some data collection when you bought your car, activated its connected services or downloaded the manufacturer’s app.

But that doesn’t necessarily mean you remember doing it. Privacy terms can appear towards the end of the buying process, while app and connected-service screens may ask you to agree to several different things at once. You may also be encouraged to activate the manufacturer’s app and connected services before leaving the dealership.

That’s why you should take control of the process rather than simply clicking through.

How to protect your car data

Before you buy, ask what information the car collects, who it is shared with and which data-sharing features you can switch off. Check the manufacturer’s UK privacy policy too.

At the dealership, read the connected-services screens yourself. Don’t let someone simply click through them for you. Look particularly closely at optional driving scores, insurance-linked services, marketing, product improvement and third-party data sharing.

If you’re directed to a privacy policy through a link or QR code, take the time to read it before agreeing. You can also ask the dealer directly, whether information about you or your driving be shared with third-party data brokers?

Once you’ve got the car, go through its privacy and connectivity settings. Check whether you can switch off optional location sharing, data sharing and voice recordings without affecting essential services. Check the manufacturer’s app too. Only give it the phone permissions it needs and consider whether it really needs access to your location all the time.

It’s worth reviewing these settings again after major software or app updates.

What if your car insurance suddenly gets more expensive?

There are many reasons why your insurance premium can change, so don’t assume your car data is responsible. But if you’re concerned, ask your insurer what information it used to calculate your premium and where that information came from. If another company holds information about your driving, you can also ask to see the personal data it holds about you.

Buying or selling a used car?

Connected services create another potential problem: making sure the right person has access to the car. When buying used, check that the previous owner can no longer locate or control the vehicle through their app or online account. Set up your own account and remove previous users where possible.

When selling your car or returning one at the end of a lease, remove the vehicle from your manufacturer’s app and online account. Don’t assume that handing over the keys automatically disconnects you digitally.

Your rights over your car data

UK data protection law gives you rights over the personal information companies hold about you. You can ask to see your data, correct inaccurate information and, in some circumstances, have it deleted or stop it being used or shared. You can also withdraw consent where a company relies on it.

You can usually request a copy of your data for free. Find out how in our Resolver guide to making a Subject Access Request (SAR).

Worried someone could be tracking you?

Connected-car accounts can pose a more immediate risk if you’re worried about stalking or someone monitoring your movements. Check the manufacturer’s app and online account for users or devices you don’t recognise. A former partner or previous owner with access to the account could potentially retain access to connected features.

Remove other users where possible, change your account password and review your location-sharing settings.

If you’re leaving an abusive relationship, avoid relying on a shared or family vehicle account. Set up an account in your own name or ask the manufacturer for help securing access to the vehicle.

If you believe someone is using your car to track you and you’re at risk, contact the police. You can also contact the National Domestic Abuse Helpline in England free, 24 hours a day, on 0808 2000 247.

Join the Data Protection Foundation – and take action over data misuse

The Data Protection Foundation (DPF) investigates how organisations collect, share and use your personal information – and helps people take action where their data may have been misused.

Its work covers connected cars as well as wider data privacy issues. We’ve previously covered its work around the Avast data privacy settlement [replace with Avast article link], where UK users were given the opportunity to consider action over the use of their personal data.

DPF membership is free and eligible members may be able to take part in collective claims, with free legal representation and the potential to receive compensation if a claim succeeds or reaches a settlement. Compensation isn’t guaranteed, but joining means you’ll hear about investigations and opportunities to take action.

The DPF is currently researching how personal data is collected and stored by cars, so joining could be particularly useful if you’re concerned about what happens to your information when you connect your phone to a vehicle.

Join the Data Protection Foundation for free

Take control of your car data

You don’t need to switch off every connected feature. Instead, check what your car collects, who it shares that information with and what you can opt out of.

Review your privacy settings regularly, disconnect your account when you sell your car and, if you’re concerned your data has been misused, find out what’s held about you and take action.

This information is intended for general guidance only and does not constitute legal advice. Resolver is not a law firm or a claims management company and cannot offer legal advice. You should read the settlement terms carefully and consider seeking independent legal advice if required.

Some links in this blog are affiliated. This means we may receive a commission on them, at no cost to you. These affiliate links help us keep Resolver free and independent for everyone.