Comment on Mozilla review of 25 car brands finds they're "a privacy nightmare"

cloud@lazysoci.al ⁨1⁩ ⁨year⁩ ago

• ChunkMcHorkle@lemmy.world ⁨1⁩ ⁨year⁩ ago

  If you don’t mind, please also highlight

  health diagnosis data

  genetic information

  Because omfg, think about those for a second, and how any data that leaves your control is subject to eventual collection by law enforcement, legal or not:

  Some bonehead rears you, but your health diagnosis data says you have a heart condition, or maybe just high blood pressure. These conditions can involve occasional lightheadedness, though you know yours is well controlled. You don’t even think about it anymore because you take care of yourself and all your regular tests are good. But suddenly, you’re in this minor accident, not even your fault, and it’s no longer a simple rearending because some asshole has brought your health history into it so that YOU and not he will be on the hook for monetary damages.

  (Triple if the bozo who hit you is some lame ass drunk rural county sheriff or elected official.)

  And “genetic information” is code for DNA. How they would collect your DNA from your car I don’t know, but do you REALLY want your genetic information associated with your vehicle and outside the confines of GINA* for the convenience of data sellers? I know I don’t. (GINA is also the law that binds companies like 23andMe from selling your genetic data.) But the whole point of trying to legislate personal control over your own genetic information is because of all the dystopian scenarios that can easily evolve from others having it without your consent.

  Yet now your car wants it too? Question this. Letting anyone have it by such means does a complete end run around any law meant to keep your personal genetic information private, and guts any rights you may have to your own privacy under the law, because you signed it away. Imagine the billions insurance companies could make, both health and auto, by refusing to pay for this or that because genetically it was a “pre-existing condition” or a “contributing factor” to you getting rearended by a drunk.

  I’ve never been so thrilled to drive an ancient beater in my life.

  *Note: GINA is weak already, but legislators are trying to weaken it further still: in 2018 a proposed change meant that “Employers would have been able to demand workers’ genetic test results if the bill were to have been enacted.”

  source

  • cloud@lazysoci.al ⁨1⁩ ⁨year⁩ ago

    I don’t want to edit the post but consider as if it was done, thanks for the addition

    source
  • FuryMaker@lemmy.world ⁨1⁩ ⁨year⁩ ago

    How and where are they actually capturing that data exactly?

    source
  • Aux@lemmy.world ⁨1⁩ ⁨year⁩ ago

    I don’t know where you live, but it already illegal to hide any health data from road authorities in many countries like UK. If you get a lightheadedness from a know diagnosis and get into a crash, you will not only be prosecuted for the crash itself, but also for fraud that you’re unfit to drive. Double criminal sentence, enjoy!

    source

    • Cryophilia@lemmy.world ⁨1⁩ ⁨year⁩ ago

      To be fair the UK is farther along the dystopian nightmare surveillance state path than the US.

      source

      • Aux@lemmy.world ⁨1⁩ ⁨year⁩ ago

        Not really.

        source

        • -> View More Comments
• Fjern@lemmy.world ⁨1⁩ ⁨year⁩ ago

  At the very least… cant the US implement one of the basic rules from GDPR?

  In simple terms, what data can companies keep? Data need to have: OK Data nice to have: Not OK

  source

  • gravitas_deficiency@sh.itjust.works ⁨1⁩ ⁨year⁩ ago

    The US will absolutely not implement anything remotely like GDPR, because that would hurt the profits of a LOT of companies who happen to have a LOT of lobbyists on K street.

    source
  • ZC3rr0r@lemmy.ca ⁨1⁩ ⁨year⁩ ago

    I’d much rather they implement the right to deletion. I know they will get their hands on a ton of data, regardless of how we write the clause. But at least let me delete that data when I want it gone.

    source

    • Railcar8095@lemm.ee ⁨1⁩ ⁨year⁩ ago

      GDPR includes right to delete data too.

      source

      • ZC3rr0r@lemmy.ca ⁨1⁩ ⁨year⁩ ago

        I know, this was inresponse to the other post about which parts of the GDPR to implement. If I had to pick any one feature to carry over from the GDPR into whatever legislation we get on this side of the ocean, I’d pick the right to deletion.

        source
    • CosmicCleric@lemmy.world ⁨1⁩ ⁨year⁩ ago

      And how often will you have to keep asking for your data to be deleted?

      source

      • nao@sh.itjust.works ⁨1⁩ ⁨year⁩ ago

        No matter how often you ask or what the answer is, you likely won’t be able to tell if it has actually been deleted anyway.

        source
      • ZC3rr0r@lemmy.ca ⁨1⁩ ⁨year⁩ ago

        Companies are held to certain expedience standards when it comes to removal. If you request it and the company doesn’t delete within the described maximum time, they will get fined under GDPR.

        source
• blackn1ght@feddit.uk ⁨1⁩ ⁨year⁩ ago

  How do they even capture this stuff? Are you expected to write some essays before you can buy the car?

  source

  • jimbo@lemmy.world ⁨1⁩ ⁨year⁩ ago

    Meh, it’s a CYA policy. They’re not actively collecting that data, but if you mention something in those categories in an email, chat, phone call, etc to a Nissan employee, that data might be stored.

    source
• slurpeesoforion@startrek.website ⁨1⁩ ⁨year⁩ ago

  BuT tHeY nEeD tHaT sO tHeY kNoW hOw nOt tO dIsCrImInAtE aGaInSt yOu.

  source
• Rodeo@lemmy.ca ⁨1⁩ ⁨year⁩ ago

  I don’t see how the things you highlighted are worse than any of the rest of it.

  It’s all bad.

  source