OnStar plans to collect data from customers that stop services an 'unheard of' privacy violation, U.S. Senator says
Computerworld - GM subsidiary OnStar's plan to collect and share GPS tracking and other data from vehicles even after their owners stop subscribing to its service has prompted an outcry from some lawmakers.
Senator Charles Schumer (D-NY) on Sunday called OnStar's policy change a "brazen, almost unheard-of" privacy invasion, and called on the U.S. Federal Trade Commission to investigate it.
In a letter to FTC chairman Jon Leibowitz, the senator expressed alarm at what he termed as the dramatic changes announced by OnStar. "These changes put consumers at risk for having sensitive personal data collected and shared without their knowledge," Schumer wrote.
Schumer is the third Senator to protest OnStar's policy change in the recent days.
Last Wednesday, Sens. Al Franken (D-Minn.) and Chris Coons (D-Del.) sent a similar letter to Linda Marshall, president of OnStar.
"OnStar's actions appear to violate basic principles of privacy and fairness for OnStar's approximately six million customers," the senators wrote. "We believe that OnStar's actions underscore the urgent need for prompt congressional action to enact privacy laws that protect private, sensitive information like location."
OnStar, which provides in-car communication services to millions of consumers, last Monday announced the update to its privacy policies. Under the new policy, OnStar said it will continue to collect GPS and other vehicle-related data from cars even if the owners no longer are subscribed to the service.
Unless the vehicle owner calls OnStar and specifically asks for the data connection to their vehicles to be deactivated, data about their vehicles will continue to be collected, the company said.
The vehicle-related data that OnStar collects includes diagnostic error codes and odometer readers, crash information, airbag deployment data, seat belt usage data and information on any mobile device that may have been paired with the vehicle.
"It is important that you convey this to other drivers, occupants, or subsequent owners of your vehicle," OnStar said.
In their letter, Franken and Coons urged OnStar to reconsider its decision and expressed skepticism over OnStar's promise to anonymize data before sharing it with others.
"OnStar's assurances that it will protect its customers by "anonymizing" precise GPS records of their location are undermined by a broad body of research showing that it is extraordinarily difficult to successfully anonymize highly personal data like location," the senators noted.
Franken, chairman of the Senate Judiciary Subcommittee on Privacy, Technology and the Law has proposed legislation that would make it tougher for companies to collect GPS location data. The Location Privacy Protection Act would require that companies obtain permission from customer before collecting their location data.
OnStar could not be reached for comment.
Jaikumar Vijayan covers data security and privacy issues, financial services security and e-voting for Computerworld. Follow Jaikumar on Twitter at @jaivijayan, or subscribe to Jaikumar's RSS feed . His e-mail address is firstname.lastname@example.org.
Read more about Privacy in Computerworld's Privacy Topic Center.
- Best iPhone, iPad Business Apps for 2014
- 14 Tech Conventions You Should Attend in 2014
- 10 Desktop Apps to Power Your Windows PC
- How to Add New Job Skills Without Going Back to School
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- Accelerating Network Convergence in Virtualized and Cloud Data Centers Adopting a converged networking strategy enables organizations to traffic server and storage I/O workloads on consolidated data throughput channels. Intelligent software helps optimize...
- Omnichannel: From Buzzword to Strategy Customers demand a seamless experience across channels, especially mobile. Read this whitepaper for a research-based framework for using omnichannel for higher customer engagement.
- How 10GbE Network is the Backbone of the Virtual Data Center The shift to a virtual data center has put tremendous strain on legacy networks; driving the need for more speed, lower latency, more...
- 10GbE in the Data Center Improvements in 10GbE technology, lower pricing, and improved performance make 10GbE for the mid-market a viable and cost-effective strategy. This white paper discusses...
- Data Protection and Disaster Recovery with iSCSI and VMware Get this on demand webcast now
- Webinar: Building a Big Data solution that's production-ready Big data solutions are no longer just a nice-to-have. All Privacy White Papers | Webcasts