Germany’s car data row exposes issues with connected mobility

The federal government says its security agencies need stronger tools to respond to espionage, cyberattacks, sabotage and other hybrid threats. The automotive industry accepts the need for better protection, but warns that the draft law could create uncertainty for manufacturers, suppliers, dealerships and drivers.

At the centre of the dispute is access to vehicle telemetry data. Connected cars can produce and transmit information about a vehicle’s location, mileage, technical condition, driving patterns and service history. In the right context, such data could help investigators understand movements or identify security risks. In the wrong framework, it could become a powerful tool for surveillance.

The German Association of the Automotive Industry has taken a cautious but not hostile position. Its president, Hildegard Müller, says security agencies require modern legal instruments, particularly at a time when industrial and technological assets are under pressure. However, she argues that any new powers must be proportionate, clearly defined and compatible with existing European rules on data protection and cybersecurity.

One of the industry’s main concerns is that the legislation must not create a hidden obligation to collect more data than companies already hold. Manufacturers are already subject to extensive compliance duties, and the VDA is pushing for a framework that protects trade secrets, avoids duplication and gives businesses legal certainty. The association also rejects any direct access to vehicles themselves, citing safety concerns.

Repair businesses are worried too. The Central Association of the German Automotive Trade has warned that workshops and dealerships should not become an outsourced arm of the intelligence services. Smaller firms may lack the legal expertise, staff and systems needed to handle sensitive requests without mistakes or liability risks.

The controversy shows how quickly the connected car has moved beyond convenience. Data that helps with diagnostics, maintenance and digital services can also reveal detailed personal routines. That makes clear limits essential.

If Germany proceeds with the reform, lawmakers should define telemetry data precisely, restrict access to serious and justified cases, require proper authorisation, and ensure strong oversight. A security law that is too vague would undermine trust in both the state and the automotive industry. A tighter, more transparent version could strengthen national security without turning everyday mobility into a new privacy battleground.

Image: AI Generated