when they visit particular sites or where a vehicle is parked outside business hours. Information about driving behaviour can also reveal patterns about individual employees.
These details may be useful for operational planning, but they can create privacy concerns if collected or used without adequate transparency.
The issue extends beyond electric vehicles or vehicles manufactured in a particular country. Petrol and diesel vehicles can also be connected, and privacy risks depend on the vehicle ' s systems, the data collected, the service providers involved and the protections in place.
Privacy under scrutiny in Australia
Connected vehicle privacy has become a focus for Australian regulators and industry groups.
In 2026, the Office of the Australian Information Commissioner( OAIC) was reported to be investigating Toyota and Hyundai over concerns about their handling of connected vehicle data. The investigations had not established wrongdoing by either manufacturer at the time of reporting.
The issue also coincides with broader Federal Government efforts to modernise Australia ' s privacy laws.
In August 2026, the Government released draft legislation and a consultation paper proposing stronger consent requirements and a fair and reasonable test for the collection and use of personal information. The proposals specifically recognise emerging technologies, including connected vehicles, as a source of privacy risk.
The reforms were proposals at the time of consultation, rather than proof that every connected vehicle currently breaches privacy law.
Data collection should be proportionate to a legitimate business need. Organisations should understand what information their vehicles generate, ensure employees receive appropriate information about monitoring and review the privacy terms associated with connected services.
The ugly: When connectivity becomes a cybersecurity risk
Connectivity can create additional entry points for cybercriminals if systems are not properly secured.
In September 2026, an ABC Four Corners investigation raised concerns after cybersecurity researcher Dan Hreszczuk, co-founder of Canberra-based Fortify Labs, demonstrated remote access to certain functions on a BYD Shark 6.
We
’ ll keep your fleet moving
Get back to business fast with 24 / 7 roadside assistance, Australia wide.
Learn more
National Roads and Motorists’ Association Limited ABN 77 000 010 506 is a separate and independent company from Insurance Australia Limited ABN 11 000 016 722 trading as NRMA Insurance.
9