Effective July 7, 2026, all new cars sold in the European Union will be equipped with an Advanced Driver Distraction Warning (ADDW) system. This system utilizes an infrared camera to monitor driver eye movement, issuing alerts if the driver's gaze deviates from the road for extended periods—3.5 seconds at highway speeds and six seconds at lower speeds. The regulation, part of a broader safety package projected to save thousands of lives by 2038, aims to combat driver distraction, which contributes to a significant percentage of car crashes.

Despite the safety intentions, the implementation of ADDW systems has sparked considerable privacy concerns, primarily due to the ambiguity surrounding data handling. While regulations stipulate that ADDW data should be processed locally within the vehicle and not shared with manufacturers or third parties, there are no independent audits to enforce this "closed-loop" operation. The specific duration for data retention and deletion remains undefined, leading to fears that sensitive eye-tracking and facial data could be exposed in breaches or accessed by unauthorized parties.

Past incidents involving vehicle data sharing, such as General Motors sharing driver behavior metrics with data brokers and Tesla employees accessing internal camera footage, illustrate the potential risks. Even though ADDW data is distinct from these cases, the pattern of vague rules leading to eventual data access is concerning. While the EU's General Data Protection Regulation (GDPR) offers some protection by requiring data minimization and purpose limitation, the definition of "necessary" data for ADDW systems remains unclear, leaving drivers uncertain about how their information is handled.