by David Kim

Police records obtained by WIRED reveal that the rise of internet-connected car features, spurred by automakers’ subscription models, is increasing drivers’ vulnerability to government surveillance. These documents expose how law enforcement agencies exploit the data generated by modern vehicles, often without public knowledge or meaningful legal oversight.

A California State Highway Patrol (“CHP”) presentation, part of over two dozen police records reviewed by WIRED, details how law enforcement taps into “connected car” data. Subscription services—like hands-free driving, heated seats, or accident-recording cameras—rely on constant internet connectivity, producing extensive data trails. The undated CHP document, citing 2024 connected vehicle statistics, notes that active subscriptions significantly amplify the data available to investigators, including location and user behavior tracked via telematics and Wi-Fi.

Obtained through a public records request by Property of the People, these records show police are far more informed about vehicle surveillance capabilities than the public. Corporate policies, not laws, largely determine driver privacy. For example, General Motors’ OnStar system, when active, sends location data twice as often as Ford’s, according to the documents. Internet providers like AT&T, T-Mobile, and Verizon also vary in how they respond to police data requests.

The subscription model drives much of this surveillance risk. Preinstalled devices in vehicles communicate with cell towers, even if drivers decline subscriptions. A 2022 detective’s email in the records noted that some vehicles still transmit data to manufacturers without active subscriptions, possibly to support data sales or encourage subscription renewals. Free trials often hook users into these connected services, ensuring a steady data flow accessible to law enforcement.

General Motors requires a court order to share location data, said spokesperson Charlotte McCoy, adding that customers can disable connectivity. “We assess each request individually,” she said. Ford did not comment. In a 2024 letter to the Federal Trade Commission, Senators Ron Wyden and Edward Markey criticized automakers like Toyota and Nissan for sharing location data with only a subpoena. Only Tesla notifies customers of government data requests, the senators said.

Police use “tower dumps” to identify devices near crime scenes, cross-referencing vehicle details like make or color. However, such methods face legal challenges. The 2018 United States Supreme Court ruling in Carpenter v. United States, 585 U.S. 296 (2018), highlighted location data’s Fourth Amendment implications. Recent 2024 rulings, including a Fifth Circuit decision and a Mississippi magistrate’s order, declared warrantless “tower dumps” and “geofence” searches unconstitutional. Google has since limited its compliance with such requests.

The records reveal inconsistencies in data access. AT&T allows real-time “pings” for voice devices, while Verizon restricts police from setting cell tower search radiuses. This reliance on corporate policies raises concerns about unchecked government surveillance, with police noting that companies could abruptly alter data-sharing practices.

Advocates stress the lack of public awareness. “This surveillance is happening without people’s knowledge or consent,” said Jay Stanley of the American Civil Liberties Union. Andrew Crocker of the Electronic Frontier Foundation noted that location data can vividly map a person’s life. Ryan Shapiro of Property of the People warned against expanding law enforcement’s surveillance powers amid eroding civil liberties.

As connected vehicle features proliferate, the tension between innovation and privacy grows. Without stronger legal safeguards or transparent corporate practices, vehicles may become conduits for pervasive government surveillance, transforming the open road into a data-driven dragnet.  

Source: WIRED

Subscribe today

Already a subscriber? Login