Your Car May Be Spying on You: The Alarming Truth About China’s Connected Vehicles
- Australia’s leading cyber security expert warns of the dangers of Chinese cars spying on owners and others
- Chinese vehicles accounted for nearly 30% of all car sales in the first six months of 2026
- Experts say China’s national intelligence law allows agencies to direct data extraction from connected vehicles
- Toyota Australia’s Vice President calls for an Australian standard for data protection in the car industry
As the world becomes increasingly connected, our cars are no exception.
With the rise of electric vehicles and advanced technology, many cars now come equipped with cameras, sensors, and data recorders that transmit information to the manufacturer.
But this increased connectivity has raised concerns about cyber security, particularly when it comes to Chinese vehicles.
Alastair McGibbons, former head of the Australian Cyber Security Centre, has warned that the vast amount of data being tracked by these cars poses a significant threat to owners and those around them.
McGibbons explained that modern connected vehicles, especially electric vehicles, are constantly transmitting data to the manufacturer for telemetry purposes. This data can include audio, visual, location, and details from connected telephones.
While this connectivity is legitimate, it also creates a vulnerability that could be exploited by malicious actors. McGibbons noted that this is particularly problematic for Chinese-headquartered companies, as China’s national intelligence law allows agencies to direct data extraction and use.
This is not just a theoretical threat.
McGibbons cited the example of Tesla vehicles being banned from Chinese military complexes due to concerns that the car’s cameras and sensors could be used as a spy tool.
This demonstrates that even China recognizes the external surveillance capability of these vehicles.
The fact that Chinese cars have accounted for nearly 30% of all vehicle sales in the first six months of 2026 only adds to the concern.
John Pappas, Vice President of National Sales and Marketing for Toyota Australia, has highlighted the importance of data protection in the car industry. Pappas emphasized that buyers should be considering cyber security as carefully as the car’s crash safety.
He noted that Toyota Australia’s data servers are based in Australia, with backups in Singapore and the US. However, McGibbons stressed that the key to cyber security protection lies in where the car company is headquartered, not where it manufactures its vehicles.
McGibbons believes that an Australian standard for data protection is necessary to address the surveillance problem.
He proposed that, just like safety glass, there should be an Australian standard for the data collected in vehicles and what type of telemetry and information leaves Australia.
This would provide a level of protection for owners and ensure that their data is not being exploited by malicious actors.
Analysis: What This Means for Australia
The rise of connected vehicles poses significant implications for Australia’s national security. With Chinese cars becoming increasingly popular, there is a growing risk of data being extracted and used for malicious purposes.
The fact that China’s national intelligence law allows agencies to direct data extraction only adds to the concern.
As Australia’s car market becomes more connected, it is essential that we prioritize data protection and establish an Australian standard for cyber security in the car industry.
Security analysts say that the lack of regulation in the car industry has created a vulnerability that could be exploited by malicious actors. Law enforcement insiders warn that the data collected by connected vehicles could be used for surveillance purposes, compromising the safety and security of Australians.
Industry observers believe that the establishment of an Australian standard for data protection is crucial to mitigating this risk and ensuring that the data collected by connected vehicles is protected.
As the car industry continues to evolve, it is essential that we prioritize cyber security and data protection. The alarming truth about China’s connected vehicles highlights the need for increased awareness and regulation in this area.
By establishing an Australian standard for data protection, we can ensure that our cars are not spying on us and that our data is protected from malicious actors.
cyber securityconnected vehiclesdata protectionAustralian Cyber Security Centre
Tesla
Toyota Australia
Australian Cyber Security Centre
Tesla
Toyota Australia
