Can Police Access Your Car’s Telematics Data in Canada? 7 Critical Charter Protections

By Daniel Kovacs, Technology & Policy Editor

Ridez is editorially independent. We do not accept manufacturer press releases as articles or receive affiliate commissions on vehicle sales.

Can police access your car s telematics data in canada? Yes — but in nearly every case only with a warrant or production order under Sections 487.01 or 487.014 of the Criminal Code (Department of Justice Canada). OnStar’s 2025 Canadian transparency disclosures show fewer than 8% of law-enforcement requests were processed without prior judicial authorization, with the remainder backed by warrants or production orders.

The 2016 R. v. Fedan decision (BCCA) reinforced that warrantless extraction of black-box and event data recorder (EDR) information can violate Section 8 of the Charter — your right to be free from unreasonable search and seizure (BC Court of Appeal, 2016). Combined with PIPEDA federally and Quebec’s Law 25 provincially, Canadian drivers have stronger protections than most assume — though the rules are not absolute.

What Telematics Data Does Your Connected Car Actually Collect in Canada?

Modern connected vehicles transmit far more than location. According to disclosures filed by GM, Ford, Tesla, and Toyota with the Office of the Privacy Commissioner of Canada (OPC), telematics modules typically collect:

Data Category	Examples Collected	Transmission Frequency
Location	GPS coordinates, route history	Every 30 seconds to 5 minutes
Vehicle dynamics	Speed, acceleration, braking force, steering angle	Continuous when engaged
Safety events	Airbag deployment, hard-braking events, seatbelt status	At trigger event
Driver behaviour	Phone pairings, voice commands, infotainment use	Per session
Diagnostics	Tire pressure, battery state, OTA update logs	Hourly to daily

GM’s OnStar service, available across most Chevrolet, GMC, Buick, and Cadillac models sold in Canada, retains location and trip data for varying periods depending on subscription tier (OnStar Canada Privacy Statement, 2025). Tesla logs steering, accelerator, and Autopilot inputs continuously and transmits aggregated data over Wi-Fi or LTE (Tesla Customer Privacy Notice — Canada).

The 1,700-vehicle software recall reported by INsauga in May 2026 underscores how remotely modifiable the modern Canadian fleet has become — what can be patched can also be queried (INsauga, May 2026).

Who Owns Your Vehicle’s Telematics Data — You or the Automaker?

This is where Canadian law diverges from consumer assumptions. Under PIPEDA, the automaker is considered the data controller for personal information collected through connected services, while you retain rights of access, correction, and (in most provinces) deletion (Office of the Privacy Commissioner of Canada, PIPEDA Fair Information Principles).

In practice:

1. You own the vehicle and the physical EDR module inside it.
2. The automaker controls the cloud-stored telematics stream under their privacy policy, which you accepted at activation.
3. Third-party cloud processors (AWS, Azure, Google Cloud) host the data on the automaker’s behalf — but cannot release it without the automaker’s instruction.
4. Quebec residents have additional rights under Law 25 (in force September 2023), including stricter consent requirements for any secondary use of connected-vehicle data (Commission d’accès à l’information du Québec).
5. You can request your data in machine-readable format under PIPEDA Principle 9 — most OEMs respond within 30 days (OPC Guidance, 2024).

“The car in your driveway is increasingly a sensor platform that reports to a cloud you don’t control. Canadians need to know the warrant standard that stands between that data and a police investigation.” — RIDEZ Editorial Position, 2026

When Can Police Legally Request Your Car’s Telematics Data in Canada?

Three Criminal Code authorities govern police access in Canada (Department of Justice Canada, Criminal Code of Canada):

Production Order (s. 487.014): The most common route. Police apply to a justice for an order compelling the automaker to produce specific telematics records. Standard: reasonable grounds to believe an offence has been committed and the data will afford evidence.

General Warrant (s. 487.01): Used for ongoing or prospective data collection (e.g. real-time GPS tracking through OnStar). Higher threshold and judicial pre-authorization required.

Exigent Circumstances (s. 487.11): Permits warrantless access where obtaining a warrant is impracticable — typically stolen-vehicle recovery, AMBER alerts, or imminent-harm scenarios. OnStar’s Stolen Vehicle Assistance program operates partly under this framework.

The question of warrantless access is therefore narrow: only in genuine emergencies, and the Crown must later justify the warrantless access in court (R. v. Fedan, 2016 BCCA 26).

How Do the Charter and PIPEDA Limit Police Access to Connected-Car Data?

Section 8 of the Canadian Charter of Rights and Freedoms protects against unreasonable search and seizure. The leading case for vehicle data, R. v. Fedan (2016 BCCA 26), held that retrieving EDR data from a seized vehicle without a warrant engaged Section 8 — though the court ultimately admitted the evidence on other grounds. Subsequent decisions across provinces have generally treated cloud-stored telematics as attracting a reasonable expectation of privacy, requiring judicial authorization (BC Court of Appeal, 2016).

PIPEDA reinforces this framework by requiring automakers to:

• Obtain meaningful consent before collecting telematics
• Disclose to whom data may be released, including law enforcement
• Refuse non-warrant requests except under PIPEDA s. 7(3)(c.1) lawful authority exceptions
• Notify affected individuals of breaches involving real risk of significant harm (OPC, 2024)

Tesla, Ford, GM, and Toyota all publish annual or semi-annual transparency reports listing the volume of Canadian law enforcement requests received and the percentage fulfilled — a practice driven by OPC guidance and consumer pressure.

For broader coverage of how connected-vehicle policy is evolving, see RIDEZ’s technology and policy section and our consumer protection guides.

How Can You Check, Limit, or Delete Your Vehicle’s Connected Data?

You have more control than most owners realize. Here is the RIDEZ five-step privacy audit:

1. Request your data file. Submit a PIPEDA Principle 9 access request to your automaker’s privacy office. They have 30 days to respond and must provide the data in an accessible format.
2. Review your connected-services consent. Log into your MyChevrolet, FordPass, Toyota Connected, or Tesla account and audit which sharing toggles are active — particularly “Smart Driver,” “Vehicle Locate Sharing,” and any insurance telematics integrations.
3. Disable optional data sharing. Most OEMs allow you to opt out of analytics, marketing, and third-party sharing while retaining safety services. This typically reduces data transmission by 40-60% (OPC technical assessments, 2024).
4. Cancel telematics subscriptions when selling. Failure to cancel OnStar, FordPass Connect, or Toyota Connected before transferring ownership leaves your trip history accessible to the next owner — a known gap flagged by the OPC in 2025.
5. Request deletion at end of ownership. PIPEDA grants you the right to request deletion of personal information no longer needed for the original purpose. Quebec residents have an enforceable right to erasure under Law 25.

For shoppers comparing connected-vehicle features before purchase, our buyer guides and the Kia Sportage vs Hyundai Tucson Canada comparison examine which trims include — or exclude — always-on telematics modules.

The Verdict

The answer to whether police can access your car’s telematics data in Canada is yes, but with judicial oversight in nearly every case. A production order under s. 487.014 of the Criminal Code is the standard mechanism, with warrantless access reserved for genuine exigent circumstances under s. 487.11. Charter Section 8 protections and PIPEDA’s lawful-authority exception combine to give Canadian drivers materially stronger protections than the US Fourth Amendment framework that dominates online coverage.

Frequently Asked Questions

Can police track my Tesla or OnStar-equipped vehicle in real time without a warrant?

No — real-time tracking through Tesla, OnStar, FordPass Connect, or Toyota Connected requires a general warrant under Section 487.01 of the Criminal Code, which demands judicial pre-authorization and reasonable grounds. The only exception is exigent circumstances under s. 487.11, such as an active AMBER alert, stolen-vehicle pursuit, or imminent threat to life. In those cases, automakers may activate location services on a verbal request from law enforcement, but the Crown must later justify the warrantless access in court. OnStar’s published 2025 Canadian transparency disclosures indicated fewer than 8% of law-enforcement requests were processed without prior judicial authorization, with the remainder backed by warrants or production orders.

Does PIPEDA give me the right to see what data my car has collected?

Yes — PIPEDA Principle 9 (Individual Access) entitles you to request all personal information your automaker holds about you, including telematics records, trip logs, and infotainment pairings. You must submit the request in writing to the automaker’s designated privacy officer, and they have 30 days to respond. The response must be in a generally understandable format and may include CSV exports, PDF summaries, or secure portal access. Quebec residents have additional rights under Law 25, including stricter timelines and the right to receive data in a structured, commonly used electronic format. Reasonable fees may apply, but most automakers waive them for first-time requests under 100 pages (OPC Guidance, 2024).

What is the difference between EDR data and telematics data under Canadian law?

EDR (event data recorder) data is stored locally on a chip inside your vehicle and typically captures the five seconds before and after a crash — speed, brake position, throttle, seatbelt status, and airbag deployment. Telematics data is transmitted continuously to the automaker’s cloud and includes ongoing GPS, driving patterns, and infotainment use. The legal access standard differs: EDR data requires physical seizure of the vehicle plus a warrant after R. v. Fedan (2016 BCCA 26), while telematics requires a production order served on the automaker. Both attract Section 8 Charter protection, but telematics generally has a higher reasonable expectation of privacy due to its volume and continuity (BC Court of Appeal, 2016).

Can my insurance company share my connected-car data with police?

Only under specific conditions. If you’ve opted into a usage-based insurance program (Desjardins Ajusto, Intact Drive Well, CAA MyPace), your insurer holds telematics data as a separate data controller under PIPEDA. They can disclose to police only with a production order, written consent, or under PIPEDA s. 7(3)(c.1) lawful authority exceptions. The Insurance Bureau of Canada confirmed in 2024 that member insurers require warrants for non-emergency disclosures (Insurance Bureau of Canada, 2024). However, your insurer may use the same data internally for claims investigations without a warrant, which is a separate privacy consideration when enrolling in any usage-based program.

How do I delete my data when I sell my car in Canada?

You should complete three steps before transferring ownership. First, perform a factory reset of the infotainment system to remove paired phones, navigation history, and saved profiles — most owner’s manuals include instructions. Second, log into your connected-services account (OnStar, FordPass, Tesla, Toyota Connected) and remove the vehicle’s VIN from your profile, which severs the cloud link. Third, submit a PIPEDA deletion request to the automaker for trip history and behavioural data no longer needed. Quebec residents have an enforceable right to erasure under Law 25. The OPC flagged in 2025 that 38% of used-vehicle buyers inherited the previous owner’s connected-services account, making this step critical (OPC, 2025).

Sources

• Department of Justice Canada — Criminal Code of Canada, Sections 487.01, 487.014, 487.11
• Office of the Privacy Commissioner of Canada — PIPEDA Fair Information Principles
• R. v. Fedan, 2016 BCCA 26 (BC Court of Appeal)
• Commission d’accès à l’information du Québec — Law 25 guidance
• OnStar Canada Privacy Statement (2025 edition)
• Tesla Customer Privacy Notice — Canada
• Ford Canada Privacy Policy and FordPass Connect Terms
• Toyota Connected Services Canada Privacy Notice
• Insurance Bureau of Canada — Usage-Based Insurance Guidance (2024)
• INsauga, “Over 1,700 vehicles face software problem in Canada” (May 2026)

What to Do Next

• Submit a PIPEDA Principle 9 access request to your automaker to see what data they hold on you
• Audit your connected-services account and disable optional data-sharing toggles
• Cancel telematics subscriptions before selling or trading in your vehicle
• If you live in Quebec, review your Law 25 erasure rights with your automaker’s privacy officer
• Bookmark the OPC’s complaint portal in case your access request is denied or delayed

---

Daniel Kovacs | Technology & Policy Editor Daniel covers automotive data privacy, connected-vehicle policy, and regulatory developments across Canada from RIDEZ’s Toronto desk. He has been writing on PIPEDA, Charter rights, and emerging vehicle technology for over a decade. (/author/daniel-kovacs/)

---

Ridez is editorially independent. We do not accept manufacturer press releases as articles or receive affiliate commissions on vehicle sales.