Call for Stronger Regulations on Connected-Car Data in Australia

Australian Electric Vehicle Association Calls for Tougher Laws on Connected Vehicles

The Australian Electric Vehicle Association (AEVA) is urging the federal government to implement stricter regulations for the increasing number of internet-connected ‘connected vehicles’ on Australian roads. The organization is concerned about the privacy and security risks posed by the current framework, which relies on the Privacy Act 1988 and industry standards that may not adequately protect motorists or clarify how vehicle data is collected, used, shared, and owned.

According to the AEVA, as the use of internet-enabled vehicles grows, with an estimated 95% of new vehicles expected to be connected by 2035, there is a pressing need for intervention to address consumer protection and national security threats.

Major automotive brands like Ford, Toyota, BYD, GWM, and Tesla offer connected services that allow vehicles to communicate over the internet through smartphone apps or built-in SIM cards. These services are available across a range of vehicle types, including petrol, diesel, hybrid, and electric vehicles.

The AEVA emphasizes that the security risks associated with connected vehicles extend beyond electric vehicles to any modern vehicle equipped with internal SIM cards or telematics systems capable of transmitting data externally.

AEVA President James Pickering stated that current data privacy legislation in Australia falls short, leaving consumers vulnerable. The organization is advocating for comprehensive policy solutions to be adopted, drawing inspiration from regulations in Europe and China.

Europe, for example, has implemented the General Data Protection Regulation (GDPR) and cybersecurity regulations for new vehicles, while the European Union’s Data Act grants legal rights to access vehicle-generated data. Similarly, China has introduced rules on automotive data security and cross-border data transfer guidelines.

The AEVA’s recommendations include keeping sensitive data within vehicles, storing data in Australian cloud infrastructure, implementing mandatory cybersecurity requirements, and requiring active consent for data collection. The organization also calls for transparency in data collection and sharing, allowing consumers to access and delete their vehicle data.

By advocating for stronger regulations and consumer rights, the AEVA aims to strike a balance between connectivity and privacy in the automotive industry. The organization believes that empowering consumers and independent repairers with access to vehicle data is crucial for maintaining transparency and security in the digital age.

For more information on cybersecurity concerns related to Chinese vehicles, Zeekr has responded to address these issues.