Toyota and Hyundai face scrutiny in Australia over what they collect from drivers and who sees it

Toyota and Hyundai are among the automakers being investigated in Australia over “driving data” from connected vehicles, according to a Yahoo Finance report published Tuesday. The article frames the inquiry as a test of how companies handle sensitive information about who is driving, what happens in the car, and how that data may be shared beyond the owner’s device.

The report says the matter is being handled by government lawyers in Canberra, who are trying to determine what a Toyota model, described in the story as a RAV4, knows about the person driving the vehicle, who else can view that information, and whether any meaningful agreement or consent was in place. The same report also links Hyundai to the broader probe.

The Yahoo Finance piece adds a warning of sorts for automakers by pointing to General Motors as an example of how these disputes can play out. It characterizes GM as already having “written the playbook” for how this kind of investigation ends, suggesting that regulators may eventually focus on internal systems for data access, disclosure, and user controls.

Connected vehicles increasingly rely on onboard telematics and cloud services to enable functions such as navigation updates, roadside assistance, remote vehicle features, and safety-related connectivity. That convenience can also expand the scope of personal data in play, including information tied to an individual driver’s behavior or identity, not just aggregated, anonymous driving statistics.

In this environment, regulators tend to examine three questions: first, what data is collected and under what technical conditions; second, who can access it, including contractors and business partners; and third, what consumers are told and what choices they actually have. The Yahoo Finance report indicates that the Australian inquiry is focused on each of these areas, at least as applied to Toyota and Hyundai vehicles.

What is less clear from the report is the specific legal theory or the precise outcomes that the Australian process is seeking. The Yahoo Finance article does not, in the information available here, provide details such as whether Toyota and Hyundai have been accused of failing to meet any particular privacy standard, what documents or systems regulators have requested, or whether any remedial actions have been negotiated.

For investors watching automakers, the immediate market risk is reputational and compliance-related rather than operational. If regulators conclude that consent and disclosures were inadequate, automakers could face requirements to revise privacy notices, change data-sharing practices, update consent flows in apps or vehicle interfaces, and bolster auditability of third-party access.