‘Behavioural fingerprint’: Privacy watchdog targets car makers The OAIC is seeking answers after claims that two Asia-based car makers are harvesting private driver data from connected cars. Australia’s privacy watchdog is currently in the middle of an investigation into two car makers based in Asia, claiming they collected personal driver information through internet-connected cars. In February 2026, Australia’s Privacy Commissioner, Carly Kind, spoke at a Senate Hearing, where she confirmed that the Office of the Australian Information Commissioner (OAIC) had launched two official inquiries, while a further two investigations were dropped. RELATED: ‘Your weight, your speed, where you work’: How your connected car is tracking your every move A spokesperson for the OAIC told Drive that its investigations into the two Asia-based manufacturers are about the car makers' collection practices, including “whether they collect more personal information than is reasonably necessary for their functions and features”. Additionally, the OAIC is looking into whether the two car makers obtained valid consent and whether they have used or disclosed this information “for secondary purposes without consent or a valid exception”. As per a 2024 Drive report, some car makers in the US were allegedly collecting personal driver information and passing it on to external data brokers, who in turn sold the data to insurance companies. “Overcollection and unnecessary retention of personal information creates risk to personal security and privacy,” an OAIC spokesperson told Drive. “Location data in particular, which connected vehicles have the potential to easily collect, is a specific category of data that presents clear privacy concerns,” they said. The OAIC could not provide an update and did not disclose which manufacturers were under investigation, but said it aimed to complete its report within 18 months. While driver location is a major concern among regulators, experts have said connected cars can