What Data Toyota Allegedly Collected
Modern Toyota vehicles equipped with the brand's connected services platform (Toyota Connected Services, formerly Entune) continuously transmit vehicle telemetry data to Toyota's servers. The data collected includes precise GPS location at regular intervals, vehicle speed, braking and acceleration patterns, door lock/unlock events, audio system use, and in some cases, voice command recordings from in-vehicle microphones.
The lawsuit alleges Toyota did not adequately disclose the extent of this collection at the point of vehicle purchase, in dealer agreements, or in the Toyota Connected Services terms of service -- which are presented on a small in-vehicle touchscreen in text that vehicle purchasers are unlikely to read before or during purchase. The plaintiffs argue that a reasonable vehicle purchaser does not understand they are consenting to continuous GPS surveillance and behavioral data collection as a condition of vehicle ownership.
Third-Party Data Sharing Allegations
The most legally significant allegations involve Toyota's sharing of vehicle data with third parties, including insurance companies and data brokers. Plaintiffs allege that Toyota provided driving behavior data -- acceleration, braking, speed, location patterns -- to insurance industry data aggregators without vehicle owners' explicit consent. This data can be and has been used by insurers to adjust premiums based on driving behavior, without the driver's knowledge that their vehicle manufacturer was the source.
In 2023, a separate disclosure revealed that Toyota's Japanese operations had exposed location data for 2.15 million vehicles over a ten-year period due to a cloud misconfiguration. While this breach was primarily a Japan-based incident, it focused global attention on Toyota's data handling practices and contributed to the filing of privacy claims in US courts. Related: Roblox data privacy lawsuit.
Legal Basis for the Claims
The Toyota tracking lawsuits advance claims under the California Consumer Privacy Act (CCPA), which grants California residents specific rights regarding the collection and sale of their personal information including location data. Under the CCPA, consumers have the right to know what data is collected, the right to opt out of its sale, and a private right of action for data breaches.
Additional claims are advanced under the Driver's Privacy Protection Act (DPPA), a federal law that restricts the disclosure of personal information obtained from motor vehicle records. Plaintiffs allege Toyota's data sharing arrangements violate the DPPA's prohibition on disclosing personal information for commercial purposes without driver consent. State wiretapping and electronic surveillance statutes in California, Illinois, and other two-party consent states provide additional legal theories.
Who May Qualify
Owners and lessees of Toyota, Lexus, or Scion vehicles equipped with Toyota Connected Services (generally model years 2018 and newer) may qualify. The strongest claims belong to: California, Illinois, and other two-party consent state residents whose vehicles collected voice or audio data; vehicle owners in states with strong consumer data privacy laws who did not meaningfully consent to location data collection; and any vehicle owner whose driving behavior data was shared with insurance companies or data brokers.
Vehicle registration documentation confirming the vehicle is Toyota-brand and connected-services-equipped is sufficient initial documentation for a case evaluation.
2026 Litigation Status
The Toyota car tracking lawsuits are in active proceedings in the Northern District of California and in several state courts. Toyota has argued that its Connected Services terms of service adequately disclose the data collection and that vehicle purchasers consented to these terms. The adequacy of click-through consent in the automotive context is an evolving area of privacy law with significant implications beyond Toyota's specific case.
Regulatory scrutiny is increasing: the FTC has opened investigations into connected vehicle data practices across the automotive industry, and new FTC rules proposed in 2024 would specifically restrict automaker data sharing with insurers. Any regulatory enforcement action could run parallel to or influence the private litigation.
How to Get Legal Help
If you believe you qualify based on the eligibility criteria described above, the next step is a free consultation with an experienced attorney. Most plaintiff-side attorneys handling these cases work on contingency -- meaning you pay nothing unless your case results in a recovery. Bring any relevant documentation including receipts, correspondence, or evidence of the harm you experienced.
To stay current on case developments, claim deadlines, and settlement news, bookmark this page and subscribe to LawsuitWatch alerts. Coverage is updated as new court filings, settlement announcements, and eligibility changes are made public.
Free Legal Evaluation
Do You Qualify to File a Claim?
Our network of verified plaintiff attorneys offers free, no-obligation case evaluations. Contingency fee representation means you pay nothing unless you win.
Toyota Car Tracking Lawsuit: Data Privacy & Location Surveillance Claims: Frequently Asked Questions
Answers to the most common questions about this case and your legal options.
Does my Toyota track my location?
Yes, if your vehicle is equipped with Toyota Connected Services (most 2018+ Toyota vehicles). Location data is transmitted to Toyota's servers. The lawsuit challenges whether this was adequately disclosed and whether sharing that data with third parties was authorized.
Can I opt out of Toyota data collection?
You can disable Toyota Connected Services through your vehicle settings or by contacting Toyota Connected Services support. Disabling the service may also disable features like automatic crash notification, remote start, and navigation services that rely on the data connection.
Was my Toyota driving data shared with my insurance company?
This is one of the central allegations in the lawsuit. The specific data-sharing arrangements are the subject of discovery in the litigation, and Toyota has not publicly confirmed or denied which data was shared with which third parties.
What states have the strongest claims against Toyota?
California (CCPA), Illinois (BIPA for biometric data), Washington, and other states with comprehensive consumer privacy laws provide the strongest legal framework. However, the federal DPPA claims are available to all US vehicle owners regardless of state.
Is there a Toyota settlement already?
No Toyota connected vehicle data settlement has been finalized as of June 2026. The litigation is in early-to-mid stages. Sign up for LawsuitWatch alerts to be notified of settlement announcements.