Can Police Access Your Car’s Telematics Data in Canada? 5 Dangers

Can police access your car’s telematics data in Canada? Yes — but the legal path they must follow is more complex than most drivers realize. Your connected vehicle likely generates gigabytes of data every hour you drive: GPS coordinates, speed, braking force, seatbelt status, and even voice commands to your infotainment system. That data lives on automaker servers, and Canadian law enforcement agencies are increasingly interested in it. The question isn’t whether your car is watching you — it is. The question is who else gets to see what it records, and under what legal authority.

What Telematics Data Does Your Connected Car Collect in Canada?

Modern vehicles are rolling data centres. If your car was built after 2018, it almost certainly has an embedded cellular modem transmitting information to the manufacturer’s cloud. Industry estimates suggest connected cars generate up to 25 GB of data per hour during active driving sessions .

Here’s what’s typically collected:

1. GPS location history — real-time and stored coordinates, often logged every few seconds
2. Speed and acceleration data — including hard braking events and rapid acceleration
3. Seatbelt and airbag status — whether occupants are buckled in
4. Infotainment activity — phone contacts synced via Bluetooth, voice commands, navigation destinations
5. Diagnostic codes — engine performance, battery health, tire pressure
6. Wi-Fi and cellular connections — devices that have paired with the vehicle
7. Camera and sensor feeds — in vehicles with dashcams, driver monitoring, or advanced driver-assistance systems

Most of this data flows to automaker servers through services like GM’s OnStar, Ford’s FordPass, or Toyota’s Connected Services. Drivers often consent to this collection during vehicle setup — buried in terms-of-service agreements that few people read. If you’ve ever accepted a connected-services agreement without reading it, you’ve likely authorized broader data sharing than you realize. For more on what dealers bundle into your purchase, see RIDEZ’s breakdown of dealer add-on products you should refuse.

How Canadian Police Legally Access Your Car’s Telematics Data

Canadian law enforcement operates under a stricter framework than its American counterpart — but that doesn’t mean your telematics are untouchable.

Under the Criminal Code of Canada (Section 487), police can obtain a search warrant compelling an automaker to produce telematics records. They can also seek a production order under Section 487.012, which requires a judge to be satisfied that reasonable grounds exist to believe the data will afford evidence of an offence. This judicial check is meaningful — unlike the United States, where a 2024 Senate inquiry found that major automakers regularly shared location data with police without requiring a warrant .

“In Canada, your car’s data doesn’t belong to the police by default. But it takes only one production order to turn your driving history into evidence.”

The Supreme Court of Canada’s decision in R. v. Bykovets (2024 SCC 6) is the most relevant recent precedent. The Court ruled that IP addresses carry a reasonable expectation of privacy because they can reveal intimate details about a person’s online activity . While the case dealt with IP addresses specifically, the reasoning applies directly to telematics: if an IP address deserves protection because it reveals patterns of behaviour, then GPS coordinates, speed logs, and driving routes — which reveal far more — should demand at least the same judicial scrutiny.

In practice, police typically rely on one of these legal mechanisms:

Legal Mechanism	Authority	Judicial Oversight	Typical Use Case
Search Warrant (s. 487 Criminal Code)	Police apply to a justice	Yes — requires reasonable grounds	Accessing a vehicle’s onboard data recorder after a crash
Production Order (s. 487.012)	Police compel a third party (automaker) to produce records	Yes — requires reasonable grounds	Obtaining GPS history from OnStar or FordPass servers
Exigent Circumstances (s. 487.11)	Police act without prior authorization	After the fact — must justify urgency	Real-time location tracking during an active kidnapping
Consent	Vehicle owner voluntarily provides data	No	Owner shares dashcam footage with police

The critical takeaway: in most routine investigations, police need a judge’s approval before your automaker hands over your data. But “most” is not “all.”

PIPEDA, Warrants, and Your Charter Rights Over Vehicle Data

Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) governs how private-sector organizations — including automakers — collect, use, and disclose personal information. Under PIPEDA’s Principle 3, organizations must obtain meaningful consent before sharing personal data with third parties .

However, Section 7(3)(c.1) allows organizations to disclose personal information without consent when requested by a government institution that has identified its lawful authority. This means an automaker can share your telematics with police who present a valid warrant or production order — without notifying you.

Your Section 8 Charter right against unreasonable search and seizure provides the constitutional backstop. The Bykovets decision reinforced that digital data revealing personal patterns of life is protected. But Charter protections only apply against government action — they do not prevent the automaker itself from collecting your data under the terms you agreed to.

Bill C-27, the Digital Charter Implementation Act, proposed modernized privacy rules addressing automated data collection by connected devices — including vehicles. The bill died on the order paper and had not been reintroduced as of early 2026 . Until new legislation passes, PIPEDA remains the governing framework.

For Canadian drivers navigating the broader landscape of consumer protection, understanding these legal boundaries is essential.

What Canadian Automakers Share With Police — and What They Hide

Every major automaker selling connected vehicles in Canada maintains a legal compliance process for law enforcement requests. Here’s what RIDEZ found when reviewing current policies:

Automaker	Connected Service	Discloses Location Data to Police?	Requires Warrant/Court Order?	Notifies Vehicle Owner?
GM (OnStar)	OnStar & Connected Services	Yes, when legally compelled	Yes, requires valid legal process	Not guaranteed
Ford	FordPass Connect	Yes, when legally compelled	Yes, requires valid legal process	Not typically
Toyota	Toyota Connected Services	Yes, when legally compelled	Yes, requires valid legal process	Not typically

All three comply with valid Canadian legal process, none guarantee they will tell you about it, and all retain telematics data for varying periods — sometimes years — meaning police can request historical driving records, not just real-time location. Unlike telecommunications companies, which publish annual transparency reports detailing law enforcement request volumes, no major automaker publishes equivalent data for Canadian connected-vehicle services.

How to Protect Your Car’s Telematics Privacy in Canada

You cannot make your connected car invisible to law enforcement with a valid court order — nor should you want to in cases involving serious crime. But you can limit the data available and ensure your rights are respected:

1. Read your connected-services agreement. Before activating OnStar, FordPass, or any equivalent, read the Canadian privacy policy — specifically the law enforcement disclosure section.
2. Opt out of non-essential data sharing. Most automakers let you disable location sharing, driving behaviour scoring, and marketing-related data collection through the infotainment system or a companion app.
3. Cancel unused connected-service subscriptions. If you don’t use remote start, stolen-vehicle tracking, or in-car Wi-Fi, cancelling reduces retained data. Some safety features like automatic crash notification may also be disabled.
4. Unpair personal devices regularly. Syncing your phone copies contacts, call logs, and sometimes text messages to onboard storage. Delete paired devices when selling or returning a vehicle.
5. File a PIPEDA complaint if your data is mishandled. Report unauthorized disclosures to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
6. Request your personal data. Under PIPEDA, you have the right to access the personal information an organization holds about you. Submit a formal request to your automaker’s privacy office.
7. Consult a privacy lawyer before consenting to data requests. If police ask you to voluntarily share vehicle data, you are not obligated to comply without a court order. Politely decline and seek legal advice.

For more on the technology and policy landscape affecting Canadian drivers, explore our ongoing coverage.

What to Do Next

The legal answer is clear: police can access your telematics data with proper judicial authorization. But opaque automaker policies, broad data retention, and no mandatory owner notification mean Canadian drivers must be proactive about their privacy.

• Review your vehicle’s connected-services privacy policy this week
• Disable non-essential telematics features through your car’s settings menu
• Check whether your automaker offers a data access request portal
• Unpair all personal Bluetooth devices if you’re selling or trading your vehicle
• Bookmark the Office of the Privacy Commissioner for future reference
• Follow RIDEZ for ongoing coverage of connected-car privacy developments in Canada

Your car knows more about you than your phone does. Make sure you know who else is listening.