Connected vehicle data poses national security risk, Ottawa warns

Data from advanced electric vehicles could be used to track people or conduct surveillance if it falls into the wrong hands, an internal federal government memo warns.

Public Safety Canada's warning addresses concerns about Chinese-made vehicles and urges Canadians to consider the security and privacy risks of the digital devices they buy and use.

The memo explains that connected vehicles collect significant amounts of data on Canadians "which can have intelligence value." Unauthorized access to connected vehicle systems could establish patterns of life or conduct surveillance on sensitive sites, it says. The risk increases when data are sent to or transit through foreign jurisdictions with less stringent data management frameworks.

The warning comes as Canada recently adjusted its tariff policy on Chinese electric vehicles, pledging to reduce a 100 per cent tariff to 6.1 per cent with an annual cap of 49,000 vehicles in exchange for lower tariffs on Canadian agricultural products. The government says this move is necessary to expand the economy in response to changing geopolitical conditions and ensure economic sovereignty.

Vehicles manufactured in China must comply with Canada's Motor Vehicle Safety Act, and manufacturers certify compliance with safety standards. However, the memo notes there are growing security threats presented by connected vehicle technologies along the supply chain, which the government is assessing.

The document points out that while companies in Canada must comply with federal privacy law, national security laws in countries like China can compel manufacturers and suppliers to share data with their government. Each Canadian must also weigh the cybersecurity and privacy implications of the devices they purchase and use, the memo says.