{"id":24516,"date":"2024-05-16T01:30:03","date_gmt":"2024-05-16T09:30:03","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2024\/05\/16\/news-18246\/"},"modified":"2024-05-16T01:30:03","modified_gmt":"2024-05-16T09:30:03","slug":"news-18246","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2024\/05\/16\/news-18246\/","title":{"rendered":"How carmakers sell driver data to insurers | Kaspersky official blog"},"content":{"rendered":"<p><strong>Credit to Author: Alanna Titterington| Date: Thu, 16 May 2024 08:34:27 +0000<\/strong><\/p>\n<p>Early in the movie &#8220;The Fifth Element&#8221;, there is a sequence that shows the dystopian nature of the future world: Korben Dallas&#8217;s smart taxi fines him for a traffic violation and revokes his license. Back in 1997, this seemed like science fiction \u2013 and it was. Today it&#8217;s turning into reality. But first things first.<\/p>\n<p>Not so long ago, we looked at the potential <a href=\"https:\/\/www.kaspersky.com\/blog\/spies-on-wheels-how-carmakers-sell-your-intimate-data\/49341\/\" target=\"_blank\" rel=\"noopener\">dangers<\/a> associated with the amount of data modern vehicles collect about their owners. Then, even more recently, an <a href=\"https:\/\/www.nytimes.com\/2024\/03\/11\/technology\/carmakers-driver-tracking-insurance.html\" target=\"_blank\" rel=\"nofollow noopener\">investigation<\/a> revealed what this might mean in practice for drivers.<\/p>\n<p>It turns out that carmakers, through specialized data brokers, are already selling telematics data to insurance companies, who are using it to raise the cost of insurance for careless drivers. Most alarming of all, however, is that car owners are often kept in the dark about all of this. Let&#8217;s investigate further.<\/p>\n<h2>Gamification of safe driving with far-reaching consequences<\/h2>\n<p>It all started in the US when owners of General Motors vehicles (parent company of the Chevrolet, Cadillac, GMC, and Buick brands) noticed a sharp rise in their auto insurance premiums compared to the previous period. The reason, it transpired, was the practice of risk profiling by data broker LexisNexis. LexisNexis works with auto insurers to supply them with driver information, usually about accidents and traffic fines. But vehicle owners hit by the premium hike had no history of accidents or dangerous driving!<\/p>\n<p>The profiles compiled by LexisNexis were found to contain detailed data on all trips made in the insured vehicle, including start and end times, duration, distance and, crucially, all instances of hard acceleration and braking. And it was this data that insurers were using to increase insurance premiums for less-than-perfect drivers. Where did the data broker get such detailed information?<\/p>\n<p>From General Motors&#8217; OnStar Smart Driver. That is the name of the &#8220;safe driving gamification&#8221; feature built into General Motors vehicles and the myChevrolet, myCadillac, myGMC, and myBuick mobile apps. The feature tracks hard acceleration and braking, speeding, and other dangerous events, and rewards &#8220;good&#8221; driving with virtual awards.<\/p>\n<div id=\"attachment_51249\" style=\"width: 2058px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/05\/16043125\/car-manufacturers-silently-sell-user-telematics-data-1.jpg\"><img fetchpriority=\"high\" decoding=\"async\" aria-describedby=\"caption-attachment-51249\" class=\"size-full wp-image-51249\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/05\/16043125\/car-manufacturers-silently-sell-user-telematics-data-1.jpg\" alt=\"OnStar Smart Driver in General Motors mobile apps\" width=\"2048\" height=\"1764\" \/><\/a><\/p>\n<p id=\"caption-attachment-51249\" class=\"wp-caption-text\">The OnStar Smart Driver safe driving gamification feature is built into myChevrolet, myCadillac, myGMC, and myBuick mobile apps by General Motors. <a href=\"https:\/\/www.onstar.com\/services\/smart-driver\" target=\"_blank\" rel=\"nofollow noopener\">Source<\/a><\/p>\n<\/div>\n<p>What&#8217;s more, according to some car owners, they didn&#8217;t enable the feature themselves \u2013 the car dealer did it for them. Crucially, neither General Motors&#8217; apps nor the terms of use explicitly warned users that OnStar Smart Driver data would be shared with insurance-related data brokers.<\/p>\n<p>This lack of transparency extended to the <a href=\"https:\/\/www.onstar.com\/legal\/privacy-statement\" target=\"_blank\" rel=\"nofollow noopener\">privacy statement<\/a> on the OnStar website. While the statement mentions the possibility of sharing collected data with third parties, insurers are not specifically listed, and the text generally aims for maximum vagueness.<\/p>\n<p>Along the way, LexisNexis was discovered to be working with three other automakers besides General Motors \u2013 Kia, Mitsubishi, and Subaru \u2013 all of which have similar safe driving gamification programs under names like &#8220;Driving Score&#8221; or &#8220;Driver Feedback&#8221;.<\/p>\n<div id=\"attachment_51248\" style=\"width: 2114px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/05\/16043002\/car-manufacturers-silently-sell-user-telematics-data-2.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-51248\" class=\"size-full wp-image-51248\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/05\/16043002\/car-manufacturers-silently-sell-user-telematics-data-2.jpg\" alt=\"Description of the telematics data sale service on the LexisNexis website \" width=\"2104\" height=\"1738\" \/><\/a><\/p>\n<p id=\"caption-attachment-51248\" class=\"wp-caption-text\">According to the LexisNexis website, the companies that work with the data broker include General Motors, Kia, Mitsubishi, and Subaru. <a href=\"https:\/\/risk.lexisnexis.com\/products\/telematics-ondemand\" target=\"_blank\" rel=\"nofollow noopener\">Source<\/a><\/p>\n<\/div>\n<p>At the same time, another data broker \u2013 Verisk \u2013 was found to be providing telematics data to car insurers. Its automotive clients include General Motors, Honda, Hyundai, and Ford.<\/p>\n<div id=\"attachment_51247\" style=\"width: 2114px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/05\/16042919\/car-manufacturers-silently-sell-user-telematics-data-3.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-51247\" class=\"size-full wp-image-51247\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/05\/16042919\/car-manufacturers-silently-sell-user-telematics-data-3.jpg\" alt=\"Description of the telematics data sale service on the Verisk website\" width=\"2104\" height=\"1738\" \/><\/a><\/p>\n<p id=\"caption-attachment-51247\" class=\"wp-caption-text\">Another broker, Verisk, lists General Motors, Honda, Hyundai, and Ford in its telematics sales service description. <a href=\"https:\/\/www.verisk.com\/insurance\/products\/drivingdna-data\/\" target=\"_blank\" rel=\"nofollow noopener\">Source<\/a><\/p>\n<\/div>\n<p>As a result, many drivers found themselves, in effect, locked into a car insurance policy with costs based on driving habits. It&#8217;s just that <a href=\"https:\/\/www.kaspersky.com\/blog\/progressive-snapshot-car-hacking\/7284\/\" target=\"_blank\" rel=\"noopener\">such programs<\/a> used to be voluntary, offering a basic discount for participation \u2013 and even then, most drivers opted out. Now it appears that carmakers are enrolling customers not only without their consent, but without their knowledge.<\/p>\n<p>According to available information, this is currently only happening to drivers in the US. But what starts in the States usually migrates, so similar practices may soon appear in other regions.<\/p>\n<h2>How to protect yourself from data-hungry cars<\/h2>\n<p>Unfortunately, there is no silver bullet to stop your automobile from harvesting data. Most new vehicles already come with built-in telematics collection as standard. And the number is only <a href=\"https:\/\/www.globenewswire.com\/news-release\/2021\/11\/15\/2333887\/28124\/en\/Global-Automotive-OEM-Telematics-Market-Report-2021-Nearly-62-of-All-Cars-Sold-in-2020-were-Equipped-with-OEM-Embedded-Telematics-Market-Analysis-Forecast-to-2026.html\" target=\"_blank\" rel=\"noopener\">going to grow<\/a> so that in a year or two these cars will make up more than 90% of the market. Naturally, the maker of your car won&#8217;t make it easy or even possible to turn off telematics.<\/p>\n<p>If you&#8217;re ready to consider the factor of your car collecting data on you for third parties (or, in simple words, spying), then read our post with detailed tips on <a href=\"https:\/\/www.kaspersky.com\/blog\/spies-on-wheels-how-carmakers-sell-your-intimate-data\/49341\/\" target=\"_blank\" rel=\"noopener\">how you can try to get rid of surveillance by carmakers<\/a>. Spoiler alert: it&#8217;s not easy and requires careful study of the documentation, as well as sacrificing some of the benefits of connected cars, so these tips won&#8217;t work for everyone.<\/p>\n<p>As for the scenario described in this post of selling driver data to insurers, our advice is to search the in-vehicle menu and mobile app for a safe driving gamification feature and disable it. It may be called &#8220;Smart Driver&#8221;, &#8220;Driving Score&#8221;, &#8220;Driver Feedback&#8221;, or something similar. US-based drivers are also advised to request their data from <a href=\"https:\/\/consumer.risk.lexisnexis.com\/consumer\" target=\"_blank\" rel=\"nofollow noopener\">LexisNexis<\/a> and <a href=\"https:\/\/fcra.verisk.com\/%23\/\" target=\"_blank\" rel=\"nofollow noopener\">Verisk<\/a> to be prepared for nasty surprises, and to see if it&#8217;s possible to delete information that has already been collected.<\/p>\n<p> <input type=\"hidden\" class=\"category_for_banner\" value=\"premium-gamer\" \/> <br \/><a href=\"https:\/\/www.kaspersky.com\/blog\/car-manufacturers-silently-sell-user-telematics-data\/51245\/\" target=\"bwo\" >https:\/\/blog.kaspersky.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/05\/16042546\/car-manufacturers-silently-sell-user-telematics-data-featured.jpg\"\/><\/p>\n<p><strong>Credit to Author: Alanna Titterington| Date: Thu, 16 May 2024 08:34:27 +0000<\/strong><\/p>\n<p>Insurance companies, through data brokers, are buying data about customers\u2019 driving habits from carmakers and using it to, yes, drive up insurance prices.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10425,10378],"tags":[8816,11395,11389,11092,5897,4053,1331,10438],"class_list":["post-24516","post","type-post","status-publish","format-standard","hentry","category-kaspersky","category-security","tag-apps","tag-cars","tag-connected-cars","tag-mobile-devices","tag-privacy","tag-surveillance","tag-technology","tag-threats"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/24516","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=24516"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/24516\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=24516"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=24516"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=24516"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}