Toyota Motor Corporation is a Japan-headquartered, NYSE-listed (ADR: TM) automaker whose connected vehicles and Toyota App collect driving behavior, location, and multimedia-screen data under its Toyota Motor North America Connected Services Privacy Notice. The notice discloses that Toyota does not use vehicle location or driving data for its own marketing and does not provide that data to third parties for their own purposes, while separately self-declaring under CCPA that it 'may sell or share' categories of personal information for targeted advertising, and disclosing routine sharing of VIN-linked location data with affiliates, law enforcement, and service providers. The Toyota App's own Apple App Store privacy label declares only a 'Data Not Linked to You' category, with no 'Data Linked to You' or tracking category. Ownership is fully traceable via SEC EDGAR and Toyota's own 20-F filings. Toyota's own May 2023 Global Newsroom notice discloses a multi-year cloud misconfiguration by its Toyota Connected Corporation subsidiary that left customer information — including vehicle IDs, and for overseas customers, names, addresses, phone numbers, and VINs — externally accessible for years; no FTC/state-AG or Japanese regulator enforcement order was located via a primary source during this review.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
9 ON FILE
COLLECTION
Toyota's Connected Services Privacy Notice states that Toyota collects 'driving behavior data' (Driving Data), including acceleration and speed, travel direction, steering and braking use, and vehicle operation sensor readings, as part of the data generated by vehicles equipped with Connected Services.
SEC EDGAR's company record confirms the registrant as 'TOYOTA MOTOR CORP,' CIK 0001094517, with its business and mailing address at 1 Toyota-cho, Toyota City, Aichi Prefecture, Japan, classified under SIC code 3711 (Motor Vehicles & Passenger Car Bodies).
Toyota's own Form 20-F (filed with the SEC, fiscal year 2024) states that Toyota's American Depositary Shares, representing its Common Stock, are registered under the trading symbol 'TM' and listed on the New York Stock Exchange.
Toyota's CCPA privacy notice self-declares that it may sell or share personal information for targeted advertising: it states it will describe 'the categories of Personal Information we may sell or share for targeted advertising currently and in the preceding 12 months,' and separately confirms users may have a right to opt out of that sharing or sale.
Toyota's Connected Services Privacy Notice states that the company may share a vehicle's VIN-linked Location Data and Account Information with emergency responders, law enforcement, its affiliates and service providers acting on its behalf, and with authorized compatible third-party services or devices.
Toyota's own Global Newsroom notice states that following its May 12, 2023 announcement of a cloud misconfiguration, an investigation of 'all cloud environments managed by TOYOTA Connected Corporation (TC)' found that a further part of the data containing customer information had been potentially accessible externally, affecting a domestic Japan dataset (~260,000 customers, 2015-2023) and separate overseas dealer-system files containing address, name, phone number, email, customer ID, and VIN (2016-2023).
The Toyota App's own Apple App Store privacy-nutrition label self-declares only a 'Data Not Linked to You' category (analytics, coarse location, identifiers, usage data) and does not declare a 'Data Linked to You' or 'Data Used to Track You' category anywhere on the page.