When Your Car Knows How You Feel – Literally: The Next Frontier of Privacy.

Modern vehicles are rapidly becoming something more than transportation. They are increasingly sophisticated, connected computing platforms equipped with cameras, microphones, sensors, artificial intelligence, wireless connectivity, and the ability to collect enormous quantities of data about drivers and passengers.

The next frontier may be even more personal: biometric and emotion-detection technology capable of evaluating the physical or emotional state of the people inside the vehicle.

Recent attention has focused on patents obtained by Ford Motor Company relating to in-vehicle biometric monitoring and emotion-recognition technology. One Ford patent describes an “emotional human machine interface” capable of collecting biometric data from vehicle occupants and using an “emotion engine” to determine an occupant’s emotional state. The technology contemplated by the patent can incorporate not only biometric information, but potentially user-generated information such as text messages, telephone calls, or social-media activity. (Justia Patents)

Another Ford patent addresses biometric identification within the vehicle environment and contemplates sensors capturing biometric information and comparing that information against data maintained in a remote database. (USPTO)

The fact that a company obtains a patent does not mean the patented technology will necessarily be commercialized. But these developments illustrate an important issue facing automobile manufacturers, technology developers, vendors, insurers, regulators, and consumers:

What happens when the vehicle itself becomes a source of highly sensitive biometric, behavioral, health-adjacent, and emotional information?

From Connected Cars to Biometric Cars

Connected vehicles already generate significant amounts of information.

Depending upon the vehicle and its settings, that information may include:

• precise geolocation;
• vehicle speed and acceleration;
• braking behavior;
• driving patterns;
• infotainment and device information;
• voice commands;
• video or camera-derived information;
• vehicle diagnostics;
• mobile-device interactions; and
• information associated with particular drivers or vehicle identifiers.

Ford’s current U.S. Privacy Notice, for example, acknowledges that connected vehicles may generate categories of information including vehicle data, driving data, vehicle location, audio/visual information, media analytics, and vehicle analytics. (https://www.ford.com/)

Driver-monitoring systems are also already present in vehicles. Ford documentation describes driver-facing camera technology that can monitor a driver’s eyes and head position to determine whether the driver appears distracted. Ford states that the particular system described in its current documentation tracks eye movement and head position rather than capturing facial features or other personal information. (Ford Service Content)

The legal questions become considerably more complex, however, when sensors move beyond determining whether a driver is looking at the road and begin analyzing who the person is, what the person’s body is doing, or what the person may be feeling.

When Safety Data Becomes Biometric Data

The distinction matters.

A camera that determines whether a driver’s eyes are facing forward may perform a narrow safety function. A system that captures facial geometry, performs iris or retina analysis, identifies an individual, analyzes voice characteristics, records heart rate or respiration, or combines physiological signals to infer stress, anger, fatigue, anxiety, or other emotional states may involve an entirely different category of information.

Some emerging automotive technologies contemplate inputs such as:

• facial images or facial characteristics;
• eye or gaze information;
• iris or retina information;
• voice characteristics;
• heart rate;
• respiration;
• perspiration or skin response;
• body temperature;
• behavioral characteristics; and
• inferred emotional or mental states.

Other automotive patent filings have described combining cameras, microphones, heart-rate measurements, blood-pressure information, skin-conductance information, and other biometric measurements to evaluate driver mood or wellness. (Justia Patents)

From a privacy-law perspective, the critical question may not simply be what sensor is being used, but rather what information is derived from the sensor and what the company does with it afterward.

Biometric Privacy Laws May Apply

Biometric information receives heightened protection under a growing patchwork of state laws.

Illinois’ Biometric Information Privacy Act, commonly known as BIPA, expressly regulates certain biometric identifiers, including retina or iris scans, fingerprints, voiceprints, and scans of hand or face geometry. (Illinois General Assembly)

Texas similarly defines biometric identifiers to include retina or iris scans, fingerprints, voiceprints, and records of hand or face geometry. Texas law generally requires notice and consent before biometric identifiers are captured for a commercial purpose and restricts their disclosure. (Texas Statutes)

Other comprehensive state privacy laws regulate biometric information when it is used to uniquely identify an individual.

California, for example, treats biometric information processed for the purpose of uniquely identifying a consumer as sensitive personal information under the California Consumer Privacy Act. Precise geolocation and certain health-related information also receive heightened treatment. (California Privacy Protection Agency)

Colorado likewise classifies certain biometric information as sensitive data and generally requires consent before sensitive data is processed. Its privacy framework also incorporates principles such as transparency, data minimization, purpose limitation, and reasonable care. (Colorado Attorney General)

For companies developing automotive monitoring technology, this creates an immediate compliance question:

Does the vehicle merely detect a signal locally for a safety function, or is the company collecting, retaining, linking, transmitting, profiling, or otherwise processing identifiable biometric data?

That distinction can materially change the regulatory analysis.

Emotion Inference Creates an Additional Layer of Risk

Emotion-recognition technology raises another issue because the system may create new information rather than simply collect existing information.

Consider a vehicle camera that observes a driver’s facial movements.

The raw camera image represents one category of information. An algorithm may then analyze that image together with voice tone, heart rate, driving behavior, or other signals and generate an inference:

Driver appears angry.

Driver appears anxious.

Driver appears fatigued.

Driver appears emotionally distressed.

That inference may itself become personal information.

And its sensitivity may depend heavily upon what happens next.

A system that uses the inference for several seconds solely to adjust cabin lighting presents one risk profile. A system that stores emotional profiles over time, associates them with an identifiable driver, sends the information to a cloud environment, shares it with affiliates or vendors, or uses it for advertising, insurance, employment, financing, law-enforcement, or other consequential purposes presents a very different one.

The law increasingly focuses not simply on the collection of data but on purpose, secondary use, disclosure, retention, and automated decision-making.

Your Car Is a Difficult Place to Obtain Meaningful Consent

Automotive privacy creates an unusually difficult consent problem.

The purchaser of a vehicle is not necessarily its only occupant.

A vehicle may routinely contain:

• spouses;
• children;
• friends;
• employees;
• rideshare passengers;
• rental-car customers;
• valet drivers;
• mechanics;
• prospective purchasers; and
• other temporary occupants.

If cameras, microphones, or biometric sensors evaluate everyone inside the cabin, manufacturers must confront a deceptively simple question:

Who consented?

Consent buried inside an owner’s mobile-app agreement may not necessarily resolve privacy obligations relating to passengers who never saw the agreement.

Likewise, a notice presented when a vehicle is purchased does little for someone who enters that vehicle three years later.

Automotive companies therefore may need to consider in-vehicle notice, passenger disclosures, sensor indicators, privacy settings, guest modes, data minimization, and technical mechanisms that permit certain functionality to occur locally without transmitting identifiable information outside the vehicle.

The FTC Has Already Put Automakers on Notice

These risks are not theoretical.

The Federal Trade Commission has expressly identified connected cars as a significant privacy issue, noting that vehicles may collect sensitive information including biometric data and precise geolocation. The FTC has warned that unlawful collection, use, or disclosure of this information can implicate the Federal Trade Commission Act. (Federal Trade Commission)

More importantly, automotive privacy has already resulted in federal enforcement.

In January 2026, the FTC finalized an order resolving allegations that General Motors and OnStar collected and disclosed drivers’ precise geolocation and driving-behavior information without adequate notice and informed consent.

Among other requirements, the order requires affirmative express consent in specified circumstances and gives consumers mechanisms to obtain and delete certain data and limit certain vehicle-data collection. (Federal Trade Commission)

That enforcement action should be closely studied by companies developing the next generation of connected-vehicle technology.

The lesson is broader than geolocation:

A legitimate product feature does not necessarily provide unlimited permission to collect or repurpose the information generated by that feature.

Could Emotional Data Affect Insurance?

One of the most significant concerns involves downstream use.

Imagine that a vehicle determines that a driver frequently appears distracted, angry, fatigued, stressed, or anxious.

Could that information eventually influence an insurance premium?

Could it become part of a driver-risk score?

Could a fleet operator use it to evaluate an employee?

Could it be used to personalize advertising?

Could it be disclosed in litigation?

Could law enforcement request it?

Could an automobile lender obtain it?

Could a company use emotional-state information to decide when a consumer is more receptive to an offer?

Those scenarios are not necessarily permitted under existing law. But they demonstrate why automotive privacy must be addressed before sensitive data ecosystems are constructed.

The FTC’s GM enforcement action is particularly instructive because the agency alleged that driving-behavior information ultimately reached consumer reporting agencies and was used in connection with insurance decisions. (Federal Trade Commission)

Adding biometric or emotional-state information to that ecosystem could significantly increase the regulatory and reputational risk.

Data Minimization May Become One of the Most Important Automotive Privacy Principles

There is an important technical distinction between sensing information and collecting information.

A driver-monitoring camera could theoretically evaluate eye movement locally within the vehicle, produce a binary determination that the driver is attentive or inattentive, and immediately discard the underlying data.

Alternatively, the vehicle could retain the video, associate it with the driver’s identity, transmit it to a remote server, combine it with location and driving history, create a behavioral profile, and preserve that profile for years.

Those two architectures may accomplish a similar immediate safety objective while creating dramatically different privacy risks.

For developers, manufacturers, and vendors, privacy-by-design therefore should include questions such as:

• What data is actually necessary for the feature?
• Can processing occur locally within the vehicle?
• Does raw biometric information need to leave the vehicle?
• Does the information need to be associated with an identifiable individual?
• How long must the information be retained?
• Can the system function using ephemeral rather than stored data?
• Are secondary uses prohibited?
• Which vendors receive the data?
• Is the information used to train AI models?
• Can consumers access or delete their information?
• Can consumers disable nonessential collection?
• What happens when the vehicle is sold?
• What notice is provided to passengers?

These questions are increasingly becoming legal questions as much as engineering questions.

What About the Reported 2027 Requirement?

Social-media discussions regarding this technology have also referenced 2027, sometimes suggesting that the federal government will require all new vehicles to contain emotion scanners or a government-controlled “kill switch.”

That characterization is misleading.

Congress did direct the National Highway Traffic Safety Administration through Section 24220 of the Infrastructure Investment and Jobs Act to develop a federal motor vehicle safety standard addressing advanced impaired-driving prevention technology.

But NHTSA has not established a federal requirement that 2027 vehicles contain an emotional-state monitoring system or government-controlled vehicle “kill switch.” NHTSA has continued research and rulemaking concerning impaired-driving technologies, including evaluation of thousands of public comments. (NHTSA)

Separately, Ford has announced that new hardware and software will begin appearing on its new electric-vehicle platform in 2027, with more advanced “eyes-off” Level 3 driving technology targeted for 2028. (Ford From the Road)

Those are distinct developments and should not be conflated.

The privacy concern, however, remains very real.

The Bigger Question: Who Controls the Digital Interior of the Vehicle?

The automobile may be emerging as one of the most consequential privacy environments consumers regularly enter.

Phones can be placed on a table.

Smart speakers can be unplugged.

Vehicles are different.

To operate safely, increasingly automated vehicles may legitimately need cameras, microphones, proximity sensors, eye tracking, driver-monitoring systems, and other technologies capable of observing the people inside them.

The challenge for regulators and industry will be determining when safety monitoring becomes surveillance.

As biometric sensors and AI-driven inference systems become increasingly sophisticated, automobile manufacturers and technology providers should consider privacy compliance at the product-design stage rather than waiting until after commercialization.

That analysis should include biometric privacy laws, state comprehensive privacy statutes, FTC consumer-protection requirements, cybersecurity safeguards, data-retention policies, vendor contracts, consumer consent, artificial-intelligence governance, and restrictions on secondary use and disclosure.

The technology may be arriving faster than a comprehensive national privacy framework.

For companies developing products at the intersection of automotive technology, artificial intelligence, biometrics, and connected devices, that makes privacy-by-design increasingly important.

Kendall PC counsels companies navigating emerging regulatory issues involving artificial intelligence, privacy, data governance, digital health, connected technologies, and other highly regulated products. As technologies evolve faster than the laws governing them, companies should evaluate regulatory obligations early in product development and commercialization.