Australia's privacy watchdog is investigating Toyota and Hyundai over how their connected vehicles collect, use and retain customer data, as the Federal Government says it is working to ensure upcoming privacy reforms better protect Australians. Advocacy groups in Australia such as the Australian Electric Vehicle Association (AEVA) has recently started lobbying the government to strengthen data privacy laws for cars that could be spying on owners. The Office of the Australian Information Commissioner (OAIC) is investigating whether Toyota and Hyundai are collecting, using and managing customer data from connected vehicles in accordance with Australian privacy laws. The investigation was first revealed by privacy commissioner Carly Kind during Senate estimates earlier this year, when she confirmed two unnamed Asian vehicle brands were under investigation. The OAIC later identified Toyota and Hyundai in response to questions from Nationals Senator Bridget McKenzie. According to a report by consumer advocacy group Choice, investigators are examining whether the two manufacturers are collecting more personal information than is necessary for connected vehicle functions. It’s also looking at whether customer data is being shared with third parties for purposes including marketing without adequate consent, and whether personal information is properly destroyed or de-identified when it is no longer required. An OAIC spokesperson told Choice the office "aims to complete investigations within 18 months", although the timeframe may vary depending on the complexity of the findings. The investigation comes as the Federal Government continues work on the next stage of Privacy Act reforms. A spokesperson for Attorney-General Michelle Rowland told Choice that "Australians want their privacy respected," adding that people handing over personal data "expect it will be protected". The spokesperson also said the government is working to ensure the next round of privacy law reforms is "workable and in the best interests of Australians", although no timeframe