BMW is a German multinational automaker (Bayerische Motoren Werke Aktiengesellschaft) headquartered in Munich and listed on the Frankfurt and Munich stock exchanges (ISIN DE0005190003); BMW of North America, LLC operates BMW's connected-car ("ConnectedDrive"/"My BMW") and mobile-app services in the US. BMW's own ConnectedDrive Data Protection Policy discloses that connected-vehicle services collect vehicle status, position/movement, service, environmental, user-profile and multi-sensor data (radar, ultrasonic devices, gestures, voice), with account-tied personal data deleted automatically six years after the agreement expires. BMW Group's Data Ecosystem page states the company does not sell personal data to third parties and describes an opt-in, customer-directed third-party data-sharing channel called CarData, plus a vehicle event data recorder that is not readable over-the-air. The My BMW app's own Apple privacy label does not declare a "Data Used to Track You" category but does declare a "Data Linked to You" category covering precise location, contact info and user content. Ownership is traceable through BMW's own registry filing (Munich HRB 42243) and its public stock-exchange listing, and a 2012 class-action settlement (Skuro v. BMW of North America) alleged BMW's telematics vendor recorded customer service calls without consent; BMW denied wrongdoing but settled, and no more recent privacy enforcement action was found via primary sources in this review.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
8 ON FILE
[2023-01-15] · COLLECTION
BMW's ConnectedDrive Data Protection Policy (legal notices on data protection, revision dated 15 January 2023) states that to perform connected-vehicle services BMW and BMW AG process data originating from the vehicle including vehicle status information, position and movement data, vehicle service data, dynamic traffic and environmental information, a user profile, and sensor information covering radar, ultrasonic devices, gestures and voice, and that personal data tied to a ConnectedDrive/My BMW account is deleted automatically six years after the agreement expires.
BMW's investor-relations 'BMW shares' page states that BMW's ordinary shares (ISIN DE0005190003, ticker BMW GY / BMWG.DE) are listed on the Frankfurt and Munich stock exchanges, with 615,810,431 shares outstanding as of 30 June 2025, and gives the geographic breakdown of institutional shareholdings (North America 40.5%, Europe 55.0%, Asia 3.5%).
BMW Group's own data-protection statement for its corporate website identifies the controlling entity as Bayerische Motoren Werke Aktiengesellschaft, headquartered in Munich, Germany, and registered at the Munich commercial court.
BMW Group's Data Ecosystem page states the BMW Group does not sell personal data to third parties, and separately describes 'CarData,' a service under which BMW releases a customer's vehicle data to third parties such as workshops, insurance companies, or fleet managers only at the customer's explicit request and choice, framed as BMW's mechanism to meet the EU Data Act.
The ConnectedDrive Data Protection Policy states that BMW creates evaluations and reports from customer agreement and vehicle data and shares them with BMW dealers to improve sales, service and training processes, but that these reports are produced only in an aggregated and anonymised form so recipients cannot draw conclusions about an individual customer.
A class-action settlement summary states that Skuro v. BMW of North America, LLC (Case No. 10-8672-GW (FFMx), U.S. District Court, Central District of California) alleged that BMW and its telematics services provider, Agero Connected Services (formerly ATX Group), violated consumer privacy laws by recording BMW Assist calls without consent; BMW and the vendor denied wrongdoing but agreed to settle, offering class members cash or a service-plan credit.
BMW Group's Data Ecosystem page states that the vehicle's event data recorder (EDR), described as the vehicle's 'black box,' records only data that is legally required, is not readable over-the-air by BMW, and can only be read by experts commissioned for official enquiries and rulings.
BMW North America's own Apple App Store privacy-nutrition label for the My BMW app declares a 'Data Linked to You' category covering identifiers, usage data, diagnostics, precise location, contact info (email address, name, phone number), and user content (photos or videos, other user content), in addition to a separate 'Data Not Linked to You' category; the label does not declare any 'Data Used to Track You' category.