Four Corners reports remote access in BYD Shark 6

Four Corners shows remote access in BYD Shark 6

Four Corners has reported that a cybersecurity expert was able to remotely access a BYD Shark 6 and control functions including the lights, wipers, doors, speakers and microphone. The ABC said the vehicle’s digital access point had no password, allowing the researcher to take control of key systems in the plug-in hybrid ute. ⁴²

The report said the car could also be tracked in real time and that audio from the vehicle could be used to obtain personal details through a connected phone. The ABC said the demonstration showed how remote access could expose data and in-car functions in a connected vehicle. ⁴²

Privacy scrutiny around connected vehicles

Separate privacy material said the OAIC launched a 2026 privacy compliance sweep that included car dealerships among six sectors assessed for how they handle personal information. The same material said the sector faces wider scrutiny because connected vehicles can collect large amounts of data, including location history, voice data and camera footage. ⁹¹¹

A September privacy reform update said the Australian Attorney-General has released a consultation paper and exposure draft privacy bill aimed at emerging technologies, including connected vehicles. The proposed changes would strengthen data security and minimisation, and replace existing collection, use and disclosure rules with a fairness and reasonableness test. ⁹¹¹

BYD statement

In the ABC coverage, BYD said it has not and would not transfer data of Australians to Chinese authorities. The report also said BYD stated the data it collects is stored in Australia. ⁴²