> For one, the EU regulation does not impose any independent audit to ensure that the ADDW systems installed actually operate on a closed-loop basis. Meaning both the car manufacturers and the tech companies selling them these systems could theoretically circumvent the rules and stealthily collect data on drivers.

> Secondly, the EU offers little clarity over how the data is handled. We don’t know how much footage the system captures once a “distraction” decision has been made, nor how long that data is stored or when it gets deleted, if it ever does.

> The implications are obvious. The continuous surveillance of the inside of a car can net car companies (or any third party that’s capable of hacking into it) a treasure trove of data that’s too valuable to pass on. Put simply, driver behavior can be turned into precious consumer data to be used internally or sold to the highest bidder.