Earlier quoted context omitted.
I see where you're coming from, and this proposed law doesn't seem super useful in isolation. But consider: 1. Publishing the same data over OBD-2 ends up being an afterthought. Without even looking at the specifics, I guarantee that there is data transmitted through telemetry that is not output through OBD-2. That's just how embedded development works - focus on making the main feature work, then forget about the re…
These are definitely valid points. Unfortunately your last example (3rd party web services easily discovering when I need an oil change, or what days I've been driving aggressively) is the kind of hypothetical I would want laws actively preventing. Arguably, it's not this law's job to introduce such a protection! But best I can tell, no other law covers it in MA. It is perfectly legal for 3rd parties to sell this and…
But why, if it would still require your consent? Not faux consent based on click through or economic pressure, but real consent in the way the GDPR is getting at.
> But at least manufacturers have national brands which could be hurt by selling or leaking massive amounts of data about their customers. Perhaps some brands could even make privacy a selling point.
This doesn't seem to be playing out for any other industry, even ones with much lower barriers to switching (eg cell phones, supermarkets, credit cards). Privacy just does not seem to be a market differentiator. Car purchase timeframe is on the order of a decade (especially for the type of people concerned with autonomy that don't lease). So you buy a car from a brand that isn't selling your data, and a few years later they turn around and sell your data anyway. Then do you grin and bear it, or sell your car at a loss and go back to the market just to get screwed again? Until there is a privacy law, self help to prevent anyone getting your data in the first place is the only real option here.
> But best I can tell, no other law covers it in MA. It is perfectly legal for 3rd parties to sell this and other data without my explicit consent or even an opportunity to opt out
Yes, this is the root of our society's privacy/surveillance problem. The CCPA is relatively recent, and even that has been neutered to appease entrenched interests.
Companies want to hold power over you by selling your data, and also by withholding your own data from you. Being hesitant to address the second problem because of unknown unknowns about the first problem seems like the path of self-defeat. I'd love to see another ballot initiative that addresses privacy by retaining control of our data, but this is orthogonal.