CyberWire Daily Privacy needs where you least expect it. [CISO Perspectives]
9 snips
Nov 4, 2025 Merry Marwig, Vice President of Global Communications & Advocacy at Privacy4Cars, sheds light on the overlooked privacy risks associated with modern vehicles. She discusses how cars collect sensitive data like geolocation and biometrics, often without consumer awareness. Merry critiques the traditional notice-and-consent model and emphasizes the need for data sanitization in rental and fleet services. With real-world examples, she reveals the potential dangers of defleeted cars and calls on security leaders to reshape their approach to privacy in the automotive sector.
AI Snips
Chapters
Transcript
Episode notes
Cars Have Become Data Factories
- Vehicles are now information platforms that create intelligence from passive data collection.
- That intelligence enables companies to predict behavior and monetize insights beyond transportation.
Notice And Consent Often Fails
- Many consumers do not read or understand lengthy privacy notices and thus cannot make informed choices.
- Cars collect identifiers, biometrics, geolocation, and communications that often persist without users' awareness.
Embed Privacy In Procurement And GRC
- Work with procurement and GRC to define which vehicle-generated data is sensitive and contract protections accordingly.
- Require simplified disclosures and verified sanitization as part of vendor agreements.