Archived link
...
The Public Safety Canada memo, prepared to address concerns about Chinese vehicles, urges Canadians to be mindful of the security and privacy risks of the digital devices they buy and use.
...
"Opening our markets to new players can amplify the presence of high-risk vendors. Connected vehicles, similar to other smart or internet-connected devices, collect significant amounts of data on Canadians, which can have intelligence value," it says.
"For example, unauthorized access to data and connected vehicle systems could be used to establish patterns of life or conduct surveillance on sensitive sites."
...
It points out that companies in Canada must comply with federal privacy law, or provincial equivalents, that set out rules for collecting, using and disclosing personal information.
The memo adds, however, that it's important to remember the national security laws of certain countries, like China, can compel manufacturers and suppliers to share data with their home government or police.
"The risk that Canadian data collected by connected vehicles are accessed and exploited increases when these data are sent to — or transit through — foreign jurisdictions with more permissive data management frameworks."
...
In addition, foreign ownership of the infrastructure — such as the digital cloud — that supports the connected devices can pose a risk to privacy and cybersecurity, the memo says.
...
They can correlate data from many cars to track a person who does not own or use a Chinese car. When you have 100k war drivers you look for a particular mac address being pinged over and over by your fleet.
So you get close to your target at some social or diplomatic event, record all the macs you see then look for them to show up on your war driving fleet's logs. Each car will only collect a few MB of data per day, so little that it won't be significant compared to normal useage.