Ford Pledges Not to Sell Driver Telematics to Third-Party Data Brokers

Ford Motor Company has issued a public pledge vowing never to sell customer driving habits to third-party data brokers, seeking to set itself apart from automotive competitors that have faced mounting regulatory penalties for harvesting and offloading vehicle telematics.

The commitment, reported by The Verge (https://www.theverge.com/transportation/1024386/ford-customer-driving-data-privacy-promise-data-brokers), follows General Motors' agreement to pay $220 million to settle claims that it illegally distributed driver behavioral and location records to data brokers. Under that settlement, GM was required to curb the driving data it gathers and obtain express consent from drivers prior to collecting their information.

Automotive telematics has become an acute privacy battleground as modern vehicles evolve into networked, sensor-laden software endpoints. A recent examination of 21 vehicle brands revealed that every evaluated automaker transmitted records to at least one third-party domain over Wi-Fi. More than half routed telemetry to domains focused on advertising, tracking, or analytics, including LexisNexis, Adobe, and Amplitude, which compile vehicle metrics and driver behavior for insurance risk scoring and targeted marketing. In an earlier review of modern connected vehicles, nonprofit foundation Mozilla rated the sector as the worst product category for consumer privacy it had ever evaluated, noting that 92 percent of surveyed automakers afforded drivers minimal control over personal data and 84 percent shared user information externally.

Under its outlined privacy stance, Ford stated that it will protect driver information through aggregation and anonymization techniques, publish clear information explaining how personal data is utilized, and permit customers to adjust the volume of data they choose to share. The company noted that it will continue utilizing operational data internally to advance vehicle safety.

"We know that trust is earned," Kristin Jones, Ford's chief privacy officer, wrote in a blog post outlining the move. "Protecting your personal information is one way we intend to earn it every day."

To assess customer expectations, Ford surveyed more than 1,000 U.S. vehicle owners, encompassing both Ford and non-Ford drivers. The survey indicated that vehicle owners viewed privacy as a principal priority, though more than half agreed that some operational data sharing is acceptable. Approximately 41 percent stated they were very or extremely concerned regarding data privacy within the auto sector, registering lower levels of concern than they expressed for social media networks, government agencies, and financial services.

While a corporate blog post does not function as an enforceable contract on its own, public corporate assertions carry regulatory exposure in the United States. The Federal Trade Commission and state attorneys general retain authority to intervene against misleading or deceptive commercial claims, which can lead to legal action, binding consent decrees, and financial penalties if an automaker's actual data practices contradict its public representations.

Binding rules governing drivers remain embedded in Ford's formal privacy policy and connected vehicle agreements, which include standard operational provisions permitting data sharing to fulfill law enforcement requests and work with authorized third-party service providers. Curtailing data sharing also involves direct functional trade-offs for motorists: disabling telemetry and onboard location tracking typically deactivates connected amenities, including integrated satellite navigation, remote start, and over-the-air software updates.