There is a strange sort of symmetry in the world of personal data this week: one new report has identified a company that wants to sell the US government granular car location data from basically every vehicle in the world, while a group of privacy advocates is suing another company for providing customer data to the feds.
A surveillance contractor called Ulysses can «remotely geolocate vehicles in nearly every country except for North Korea and Cuba on a near real-time basis,» Vice Motherboard reports.
Ulysses obtains vehicle telematics data from embedded sensors and communications sensors that can transmit information such as seatbelt status, engine temperature, and current vehicle location back to automakers or other parties.
«Among the thousands of other data points, vehicle location data is transmitted on a constant and near real-time basis while the vehicle is operating,» the company wrote in a sales pitch document obtained by Vice. As roughly 100 million new cars are manufactured worldwide each year that are «increasingly connected to the manufacturer, other vehicles, infrastructure, and their owners, it becomes apparent that telematics will revolutionize intelligence,» the document adds. Ulysses claims it can currently access more than 15 billion vehicle locations around the world every month, and it estimates that by 2025, 100 percent of new cars will be connected and transmitting gigabytes of collectible data per hour.
Vice said the office of Sen. Ron Wyden (D-Ore.), who serves on the Senate Intelligence Committee and often advocates for privacy issues, provided it with the document. «Sen. Wyden is conducting an ongoing investigation into the sale of personal data, particularly via data brokers, to put some sunlight on this shady industry,» Keith Chu, a representative for Wyden’s office, told Vice. «Our office is continuing to perform oversight into where data brokers are acquiring Americans’ information and who they’re selling it to.»
Ulysses does not currently have any contracts with the US government but has worked in the past with US Special Operations Command (SOCOM), Vice reports. That contract, which ran from 2016-2017, involved data SOCOM used «to deepen our understanding on how foreign competitors used economic and financial tools against US interests» in Central and South America and in Africa.
Meanwhile, in California…
If Ulysses does snag a federal contract, it would be joining a long line of other firms that sell personal user data to the government.
The Secret Service, Immigration and Customs Enforcement (ICE), and the IRS all purchase cell phone location data that might otherwise require a warrant to obtain. Customs and Border Patrol (CBP) also buys license plate-reader data. The agencies that purchase data have contracts to access databases maintained by brokers that collect information from a wide variety of sources, then package and sell access to it.
The Washington Post reported last month that ICE also purchased access to a database chock-full of consumer information to track immigrants. The database ICE used, CLEAR, includes more than 400 million phone, water, electricity, and other utility documents the agency would otherwise not have been able to access on its own, according to the Post.
A coalition of privacy advocates in California is now suing Thomson Reuters, which operates CLEAR, alleging that it violates state privacy law by collecting and sharing personal information without individuals’ consent.
«When we look at the ways that these data brokers are remaking our country, the Fourth Amendment concerns are terrifying,» Surveillance Technology Oversight Project Executive Director Albert Fox Cahn, who is participating in the suit, told the Post. «But the way that they’re allowing companies to track millions without the most basic consent is deeply alarming as well.»
Sen. Wyden also told the Post he plans to introduce federal legislation soon to close the loopholes that allow such data sales. «I do think that there’s going to be a new focus on privacy in this session,» Wyden said. «I think as more and more states pass privacy legislation, pressure builds for Congress to finally pass federal legislation.»
