Ford's announcement of a "privacy promise" to customers reads like a press release written by a legal team that won an argument with a marketing department. The automaker says it's making an "explicit commitment" that customer vehicle data is "safe" — a word doing extraordinary heavy lifting in a document that simultaneously explains all the ways Ford collects, uses, and shares that data.
The timing is instructive. Connected vehicles have become rolling surveillance platforms, harvesting location data, driving behavior, voice recordings, and increasingly, biometric information. Mozilla's 2024 study famously called cars "the worst product category we have ever reviewed for privacy," and Ford was among the manufacturers singled out. Now, facing mounting regulatory scrutiny in both the US and EU, Ford has opted for the corporate equivalent of a wellness rebrand.
What the promise actually says
Ford's framework distinguishes between data used to "improve safety and vehicle performance" and data that might be shared with third parties. The company says it won't sell personal information to data brokers — a low bar that sidesteps the more common practice of sharing data with "partners" for "business purposes." Insurance companies, for instance, have been eager customers of driving-behavior data, and Ford's language appears to leave that door open.
The promise also emphasizes customer "control," but the mechanics of that control remain vague. Opting out of certain data collection often means losing access to features customers paid for — a coercive choice dressed up as consumer empowerment.
The regulatory backdrop
Ford's move arrives as California's privacy regulator has begun investigating automaker data practices, and as the EU's AI Act imposes new obligations on systems that profile individuals. The Federal Trade Commission, meanwhile, has signaled interest in vehicle data as part of its broader crackdown on commercial surveillance. Ford is betting that a proactive "promise" — even a thin one — provides political cover and shapes the narrative before regulators do.
General Motors faced backlash earlier this year when it emerged the company had been sharing driving data with insurers without clear consumer consent. Ford's announcement reads partly as an attempt to avoid a similar reputational hit, though the substance may not differ meaningfully.
Our take
Ford's privacy promise is corporate theater, but it's revealing theater. The company clearly believes that data collection is now a reputational liability worth managing — a shift from even two years ago, when automakers treated privacy concerns as niche complaints from paranoid technologists. That Ford felt compelled to issue any statement at all suggests the political winds have shifted. Whether the promise amounts to anything beyond a press release depends entirely on enforcement, and on whether customers start treating data practices as a factor in purchasing decisions. For now, Ford has promised your data is safe. It just hasn't promised not to use it.
