Privacy UX Crash Test: How 49 Auto Brands Handle California Consumer Data Rights, Gaps, & How to Improve

Privacy4Cars® has conducted a comprehensive benchmarking study evaluating the processes offered by 49 automotive brands to Californian consumers when they wish to make privacy choices. We’re committed to sharing these findings to foster continuous privacy-related improvements in the broader automotive industry and inform relevant stakeholders, including consumers, auto brands, privacy tech providers, privacy professionals, industries within and beyond automotive, government, and more. The quantitative analysis evaluated auto brands’ actual practices, rather than their stated policies, by using 12 objective criteria derived from the California Privacy Protection Agency’s settlement with American Honda Motor Company.

Summary Report: Overview of Benchmarking Analysis

(FREE)

The summary report includes:

  1. Summary of methodology, key findings, and insights
  2. Summary table with ranking and scores for 49 brands: Acura (pre and post changes driven by enforcement), Afeela, Alfa Romeo, Audi, Bentley, BMW, Buick, Cadillac, Chevrolet, Chrysler, Dodge, Ferrari, Fiat, Ford, Genesis, GMC, Honda (pre and post changes driven by enforcement), Hyundai, INEOS, Infiniti, Jaguar, Jeep, Karma, KIA, Lamborghini, Land Rover, Lexus, Lincoln, Lucid, Maserati, Mazda, Mercedes-Benz, Mini, Mitsubishi, Nissan, Polaris, Polestar, Porsche, RAM, Rivian, Rolls Royce, Scout, Smart Car, Subaru, Tesla, Toyota, Vinfast, Volkswagen and Volvo
  3. Take-aways for automakers, consumers, government (lawmakers and enforcement agencies), companies in the automotive space, and privacy professionals across all sectors

Download Free Summary

Full Report: Detailed Benchmarking Analysis

(US $5,000)

*Complimentary for verified government, non-profit, academic and media professionals

The Full Report: Detailed Benchmarking Analysis includes:

  1. All the contents of the summary report
  2. Detailed 1800+ pages of screenshots, analyses, & how to improve
  3. 49 auto brands analysed
  4. 6 privacy tech vendors analysed (Evidon, Ketch, OneTrust, Salesforce, TrustArc, and Usercentrics)
  5. 2 hours of consulting with Privacy4Cars with paid report licenses

Get The Report

Disclaimer and Copyright Notice

© 2025 Privacy4Cars, Inc. – All rights reserved.

This publication, including all content, scoring, analyses, and screenshots, is the copyrighted property of Privacy4Cars® (“the Company”) and is intended solely for informational purposes. Fair use, such as media citation, quotation, or scholarly reference, is permitted. However, no part of this report may be reproduced, distributed, or utilized for commercial purposes – including, but not limited, to business planning, compliance, consulting, or competitive analysis – without prior purchasing of a license from the Company.

This report is not legal advice and should not serve as a substitute for professional counsel. Readers should consult qualified legal and privacy experts for guidance on regulatory compliance or any other legal matters.

Our benchmarking criteria were developed with reference to the California Privacy Protection Agency’s recent enforcement actions but are not endorsed by, nor do they represent the views or methodologies of, the California Privacy Protection Agency (CPPA). The CPPA has not reviewed, approved, or adopted this scoring mechanism for determining compliance or non-compliance with applicable law.

While every effort was made to standardize our best practices scoring criteria and to apply them fairly and consistently across all reviewed auto brands, we do not guarantee the complete accuracy of this report at the time of publication. The content reflects our findings as of the date noted in each section and may not reflect subsequent changes, as automakers frequently update their online interfaces and processes. Screenshots and assessments were made primarily using a California-based VPN connection, but technical factors – including different locations, browsers, and browser plugins – may cause user experiences to vary.

The Company reached out to all manufacturers evaluated in this report during May 2025, by email and shortly thereafter by regular mail where possible. Some manufacturers engaged in follow-up discussions with us, and whenever such interactions occurred, we conducted individualized reviews with their privacy or legal representatives. This collaborative process improved the accuracy and quality of our report. Participation in such review does not imply agreement or disagreement with our scoring by these manufacturers.

This publication is provided “as is,” without representation or warranty of any kind (express or implied), including, without limitation, as to accuracy, reliability, completeness, or fitness for any particular purpose. The Company expressly disclaims any and all liability to any person, organization, or entity with respect to anything, and the consequences of anything, done or omitted to be done wholly or partly in reliance upon the whole or any part of the contents of this publication.

For licensing inquiries, permissions, or questions, please contact info@privacy4cars.com