Canada’s privacy watchdog is closely monitoring a U.S. class-action lawsuit that raises questions about how auto insurers collect and use driver data through smartphones and other technology.
The case, filed in a Chicago district court on March 3, targets Allstate Insurance and its data analytics unit, Arity, alleging violations of the Federal Wiretap Act and the Fair Credit Reporting Act. Drivers claim that their travel locations, trip distances, speed, acceleration, braking, phone usage, and attention to the road were monitored and monetized without proper consent. Some plaintiffs also say Arity inaccurately reported their driving behavior, including times when they were passengers, potentially affecting insurance outcomes.
Allstate responded that the plaintiffs did not allege their data was actually captured or that their insurance rates were impacted. The company emphasized that its privacy policies clearly disclose potential data collection. In a statement on March 4, Allstate said, “Consumers who choose to share driving data through Arity-powered apps can access emergency assistance, track fuel efficiency, and unlock personalized insurance rates after a clear notice and explicit opt-in process.”
Global News contacted Canada’s Office of the Privacy Commissioner (OPC) to determine whether similar concerns exist domestically. The OPC confirmed it is “monitoring the matter” but said it has not received any similar complaints in Canada. The office referenced the Personal Information Protection and Electronic Documents Act (PIPEDA), which requires businesses to obtain consent before collecting or sharing personal data.
Telematics and Usage-Based Insurance in Canada
Many Canadian insurers use telematics, also called usage-based insurance (UBI), which monitors driving behavior to set policy rates that reflect individual risk profiles. Programs have been available in Canada since 2012–2013.
Drivers deemed more cautious may benefit from lower premiums, while aggressive or distracted driving can increase costs. Monitoring can include mileage, speed, braking, acceleration, and even cellphone use. Some programs, such as CAA MyPace, do not require a phone and charge based on kilometers driven. CAA stated that all UBI programs require explicit consent and that personal driving data is not sold or shared with third parties.
Intact Insurance and Aviva also offer consent-based programs. Intact emphasized that myDrive data is only shared with a trusted service provider under strict privacy safeguards, while Aviva uses telematics data to adjust premiums without using it to determine coverage eligibility.
The Insurance Bureau of Canada noted that insurers cannot collect or share driving behavior information without the individual’s explicit consent, in compliance with Canadian privacy laws.
Balancing Savings and Privacy
Retail analyst Bruce Winder said the case highlights the tension between cost savings and privacy. “If consumers see a tangible financial benefit and companies are transparent, many may accept data collection,” he said. “For those highly protective of their privacy, paying higher premiums may be worth it.”
Winder emphasized that transparency is key. “Companies need to go beyond the fine print and clearly explain what users are consenting to,” he said. “Deceptive practices erode trust, while openness builds customer satisfaction.”
As U.S. courts consider the lawsuit, Canadian drivers and insurers are watching closely, raising broader questions about data privacy, consent, and the future of telematics-based insurance.
