…
The Public Safety Canada memo, prepared to address concerns about Chinese vehicles, urges Canadians to be mindful of the security and privacy risks of the digital devices they buy and use.
…
“Opening our markets to new players can amplify the presence of high-risk vendors. Connected vehicles, similar to other smart or internet-connected devices, collect significant amounts of data on Canadians, which can have intelligence value,” it says.
“For example, unauthorized access to data and connected vehicle systems could be used to establish patterns of life or conduct surveillance on sensitive sites.”
…
It points out that companies in Canada must comply with federal privacy law, or provincial equivalents, that set out rules for collecting, using and disclosing personal information.
The memo adds, however, that it’s important to remember the national security laws of certain countries, like China, can compel manufacturers and suppliers to share data with their home government or police.
“The risk that Canadian data collected by connected vehicles are accessed and exploited increases when these data are sent to — or transit through — foreign jurisdictions with more permissive data management frameworks.”
…
In addition, foreign ownership of the infrastructure — such as the digital cloud — that supports the connected devices can pose a risk to privacy and cybersecurity, the memo says.
…
“The risk that Canadian data collected by connected vehicles are accessed and exploited increases when these data are sent to — or transit through — foreign jurisdictions with more permissive data management frameworks.”
So… the USA?
it’s so embarassing that this is framed directly at Chinese vehicles and not the ones already widely sold around Canada that are already doing this and owned by hostile nation(s)
And let’s pretend this tracking is not going on with our phones?
Chinese law mandates that Chinese auto manufactures participate in international espionage, collect and and all data required by the Chinese administration and to not admit to any of it for any reason
The US government can compel US automakers hand over data but they can’t compel them to collect specific data or to track an individual in Canada.
China is an adversarial nation, they have interfered in Canadian elections, they installed secret police in Canada, they take Canadians hostage when we refuse to comply with their demands. It’s incredible that we have basically put all of our manufacturing eggs in the basket of a man with a penchant for extorting and murdering his neighbours.
And don’t forget when China threatened to annex Canada or when they started arresting Canadian citizens at the border.
You could take your comment and find and replace China with USA and it would be even more accurate.
The collection, use, and disclosure of personal information must be limited to reasonable purposes, which organizations must identify to individuals at the time of collection … Organizations must limit their collection of personal information to that which is necessary for the purpose identified to the individual.
That’s what Canada’s Vehicle Cyber Security Guidance says is required by Canadian privacy law. Maybe start enforcing that law, then? If that principle were adhered to in reality, cars wouldn’t collect any sensitive data at all. It would not have intelligence value for friends or adversaries if it didn’t exist.
Doesn’t seem like much protection at all. Put together some very long Terms of Service document that hardly anyone will read but which is required for full use of your vehicle and an open interpretation of “reasonable” and companies basically have free rein.
Because that’s the same framework the CRTC allows with our phone data.
Every time I see something about sppooooky nefarious Chinese gonna use their hypnotizing baubles to trick Canadians into feeding their data into the gaping maw of CCP… it is describing an already widely-deployed mechanism.
If there were effective privacy regulations in place that applied to everybody we wouldnt need to do this every time.
People pointing fingers at China are just foreign agents of the USA. Projection is so hawt right now.
Also…wakeup morons, Spavor was spying.
This has already been reported on, and it’s actually Israel that currently hacks the cars onboard e-sim to geo-locate. Also cars systems don’t have robust cyber security and can also get hacked through that e-sim.
But now it’s scary because China is sending cars over.
Sure, let’s go with this angle. If we collect all this data an enemy could gain access and use it to target Americans.
You know, any enemy could do this… foreign or domestic…
Whats dumb is the CCP could just purchase whatever data they want now. They don’t need to collect it n
They can correlate data from many cars to track a person who does not own or use a Chinese car. When you have 100k war drivers you look for a particular mac address being pinged over and over by your fleet.
So you get close to your target at some social or diplomatic event, record all the macs you see then look for them to show up on your war driving fleet’s logs. Each car will only collect a few MB of data per day, so little that it won’t be significant compared to normal useage.
