Toyota and Hyundai face scrutiny over driver-tracking claims as GM quantified the value of car data at $25 billion

Automakers are increasingly navigating a delicate line between using vehicle data to improve products and collecting information that consumers may view as intrusive. A Yahoo Finance report on Toyota and Hyundai centers on allegations that the companies were involved in tracking drivers, setting up a policy and regulatory challenge that regulators have been investigating for years.

The report says Australian regulators opened a file on Toyota and Hyundai about five years before the current discussion escalated, indicating that the issue has been on the compliance radar for some time. The Yahoo account frames the matter as part of a broader trend: vehicles now generate streams of data about driver behavior, routes, and device interactions, and the definition of “use” becomes central when questions arise about consent and visibility.

What makes the story notable for industry watchers is that General Motors had previously put a number on how much modern car data could be worth. According to the Yahoo report, GM told investors it assigned a value of $25 billion to in-vehicle data, portraying the figure as tied to its ability to monetize data or use it strategically, rather than as a vague estimate.

In practice, the amount an automaker assigns to vehicle data can influence everything from product design to legal posture. If a company believes the data can be transformed into advertising-like revenue, services revenue, or other forms of economic value, it may prioritize instrumentation, data pipelines, and partnerships that increase data flow. That can raise the risk that regulators or consumers will scrutinize whether data collection aligns with disclosures, opt-in choices, and permitted use cases.

The report’s pairing of alleged tracking with GM’s valuation also illustrates a competitive reality: companies do not treat connected-car data as a byproduct. They treat it as an asset that can support downstream services, such as improved diagnostics, personalization, or fleet and mobility offerings, depending on what has been disclosed and contracted. Even without naming specific mechanisms in the Yahoo piece, the implied pressure is clear, automakers may have incentives to maximize data access while still meeting privacy expectations.

Toyota did not respond in the Yahoo report with a detailed explanation of the alleged conduct, and the information in the report does not, on its face, provide the kind of technical breakdown regulators typically seek. The company’s own official news channels, including Toyota’s U.S. and global newsroom pages, are maintained for corporate and product updates, but they do not replace regulatory records or enforcement findings when questions focus on data collection practices.

Sector context matters because connected-car features rely on telematics systems that transmit data for navigation, remote services, and diagnostics. Those systems can also capture patterns that regulators may classify as personal information, particularly when linked to a driver or a vehicle owner. As a result, even firms that emphasize safety or service improvements can face scrutiny if collection and usage are not transparent or if consent frameworks do not match the practical reality of data flow.

The biggest uncertainty remains the level of specificity in public discussion. The Yahoo report as characterized here points to scrutiny and an earlier Australian file but does not provide, within the available text, details such as the exact software or telemetry pathways involved, the precise jurisdictions and legal standards applied, or the outcomes of any enforcement actions. Until regulators or the companies publish findings, buyers will need to watch for formal documentation that clarifies what data was collected, how it was used, and whether disclosures and permissions were adequate.

Going forward, the question for Toyota, Hyundai, and their peers is whether regulators will treat the disputed behavior as a compliance failure, a disclosure problem, or an issue of consent and data governance. Watch for any official regulatory filings, enforcement announcements, and company statements that address the technical and legal specifics, along with any updated privacy disclosures for connected vehicle platforms.