Philip Siefke bought a 2021 Toyota RAV4 XLE in March 2021, never knowing his new car would spend the next four years quietly transmitting his location, speed, braking patterns, and voice data to a data broker that sold it to his insurance company. He found out by accident, in January 2025, when Progressive Insurance told him it already had his full driving profile before he even applied for a policy.
The federal class action lawsuit that followed, Siefke v. Toyota Motor North America, Inc., et al., Case No. 4:25-cv-00406, was filed in the U.S. District Court for the Eastern District of Texas and names three defendants: Toyota Motor North America, Connected Analytic Services (CAS), and Progressive Casualty Insurance Company. As of March 2026, the case has been sent to private arbitration, but the plaintiff’s legal team at Morgan & Morgan is still pushing for a resolution that benefits all affected Toyota owners.
- What: Toyota allegedly collected telematics data from 2018+ vehicles and shared it with Progressive Insurance through affiliate data broker CAS, without clear driver consent.
- Who: Plaintiff Philip Siefke and all U.S. owners or lessees of model year 2018 or newer Toyota vehicles equipped with connected tracking technology vs. Toyota Motor North America, Connected Analytic Services, and Progressive Casualty Insurance.
- Status: Sent to mandatory private arbitration by Chief Judge Amos Mazzant (December 2, 2025). Class action waiver enforced. Case stayed in federal court as of March 2026.
- Injuries: Violation of privacy rights, unauthorized sale of location and behavioral data, potential insurance premium increases based on tracked driving behavior.
- Settlement: No settlement reached. No compensation available as of June 2026.
- Eligibility: U.S. owners or lessees of model year 2018 or newer Toyota vehicles with connected/telematics technology.
- Key date: December 2, 2025 — federal judge compels arbitration; class action route effectively blocked at federal court level.
Toyota Car Tracking Lawsuit Timeline and Updates
March 2021 — Siefke Purchases a 2021 RAV4 XLE
On or about March 20, 2021, Philip Siefke, a Florida resident based in Polk County, purchased a new 2021 Toyota RAV4 XLE. The vehicle came factory-equipped with an embedded telemetry device as part of Toyota’s Connected Services system.
Siefke says he never received clear notice that activating basic connected vehicle features would mean Toyota would continuously transmit his driving data to third parties. According to the lawsuit, the consent process was buried in digital terms linked by hyperlinks, not disclosed in plain language at the point of sale.
2022 — Toyota Announces Partnership with Connected Analytic Services
In 2022, Toyota issued a press release announcing a formal data-sharing partnership with Connected Analytic Services, a data aggregator that provides telematics and vehicle build data to insurance companies. The press release stated that data would be shared “only at the express request and direction of Toyota customers.”
CAS is an affiliate of Toyota Insurance Management Solutions (TIMS), which separately partnered with Progressive to give Toyota vehicle owners the opportunity to earn insurance discounts through data-sharing enrollment. Siefke’s lawsuit argues this corporate structure — Toyota, TIMS, CAS, and Progressive — was designed to route driver data to insurers while maintaining the appearance of arms-length transactions.
January 2025 — Siefke Discovers His Data Was Already Shared
In January 2025, Siefke visited Progressive’s website to apply for a car insurance policy. During the online process, he opted out of Progressive’s Snapshot data-sharing program, which tracks driving behavior in exchange for potential premium discounts.
A pop-up window appeared after the opt-out, notifying him that Progressive already held his driving data up to January 20, 2025 — before he had initiated any relationship with the insurer. Siefke called Progressive’s customer service line. A representative confirmed that Progressive obtained the data from tracking technology in his Toyota vehicle, routed through CAS.
January 21, 2025 — Siefke Contacts Toyota Directly
Siefke called Toyota on January 21, 2025, to demand an explanation. A Toyota customer service representative told him he had “unknowingly signed up for a trial” of data sharing when activating connected services, and that he needed to opt out via the Toyota mobile app to stop the data flow.
Siefke checked his app. It showed him as opted out. The lawsuit argues this proves the data was flowing regardless of in-app settings, directly contradicting Toyota’s own data-sharing disclosures. Toyota has not publicly commented on this specific discrepancy.
April 21, 2025 — Class Action Filed in Eastern District of Texas
Siefke filed a federal class action lawsuit in the U.S. District Court for the Eastern District of Texas on April 21, 2025. The complaint names Toyota Motor North America, Progressive Casualty Insurance, and Connected Analytic Services as defendants.
The lawsuit alleges violations of the Federal Wiretap Act, the Computer Fraud and Abuse Act, invasion of privacy, breach of express and implied contract, and unjust enrichment. Siefke seeks to represent all U.S. consumers who owned or leased a 2018 or newer Toyota vehicle equipped with telematics tracking technology. The proposed class seeks damages exceeding $5,000,000.
The suit draws a direct parallel to earlier automaker data-sharing scandals. A 2024 New York Times investigation had already exposed General Motors, Honda, Kia, and Hyundai for similar practices involving data broker LexisNexis. Siefke’s attorneys at Steckler Wayne & Love PLLC and Morgan & Morgan Complex Litigation Group argue the Toyota-CAS-Progressive arrangement follows the same playbook.
December 2, 2025 — Judge Compels Arbitration, Class Action Blocked
Chief Judge Amos Louis Mazzant of the Eastern District of Texas issued his ruling on December 2, 2025, granting Toyota’s motion to compel arbitration. The judge found that the arbitration agreement embedded in Toyota’s Connected Services Terms of Use constituted a binding contract.
The ruling noted that hyperlinks to Toyota’s Terms of Use appeared on the screens Siefke interacted with during app setup and that the terms were “reasonably conspicuous.” Judge Mazzant wrote that by linking his vehicle to the Toyota app and activating Connected Services, Siefke “manifested his assent to be bound by Toyota’s Terms of Use, which included the Arbitration Agreement.”
The terms Toyota cited included a disclosure in a text box titled “NOTICE OF MANDATORY ARBITRATION PROVISION” in boldface at the top of the first page. The terms also stated that clicking “Accept” authorized the vehicle to transmit “location, driving and vehicle health data to Toyota and its affiliates on a regular and continuous basis.” The court also granted arbitration motions filed by Progressive and CAS.
February–March 2026 — Case Stays Private; Siefke Continues Push
As of March 2026, the federal court case is officially stayed pending mandatory arbitration. Siefke’s legal team at Morgan & Morgan is exploring options to continue the case in a way that benefits other Toyota owners beyond individual arbitration.
Siefke himself has stated publicly that he intends to keep fighting. His attorneys argue that the arbitration clause was buried in dense digital terms that no ordinary consumer would read, and that consent through hyperlinked boilerplate does not constitute meaningful informed consent. As of June 2026, no settlement has been reached and no compensation is available for class members.
What the Lawsuit Alleges: The Full Data Pipeline
The complaint in Siefke v. Toyota Motor North America lays out a three-company data pipeline that plaintiffs argue was designed to collect and monetize driver behavior without meaningful consumer awareness.
The data types Toyota’s telematics system allegedly collects go far beyond location. According to court filings, Toyota vehicles capture and transmit:
- GPS location and route history
- Vehicle speed and direction
- Sudden braking and hard acceleration events
- Swerving and cornering behavior
- Fuel levels, odometer readings, and tire pressure
- Seatbelt status
- Image data from in-vehicle cameras
- Voice data captured inside the vehicle
This data flows from the vehicle to Toyota, then to CAS, and from CAS to Progressive and potentially other insurance carriers. The lawsuit argues Progressive’s Snapshot program — which was originally marketed as an opt-in discount program requiring a separate plug-in device — was quietly receiving Toyota telemetry data from CAS without requiring any plug-in, and without drivers choosing to participate.
The complaint calls CAS’s stated commitment to protecting driver privacy “untrue.” Similar to the fraudulent concealment pattern seen in the 23andMe data exposure case, where millions of genetic profiles were accessed without meaningful warning, Toyota drivers were allegedly exposed to data harvesting through the fine print of feature activations they didn’t understand.
Who Can File: Eligibility for Toyota Owners
The proposed class in the Siefke lawsuit is broad. Siefke seeks to represent all individuals in the United States who owned or leased a model year 2018 or newer Toyota vehicle equipped with Toyota’s telematics tracking technology.
- Owned or leased a model year 2018 or newer Toyota vehicle
- Vehicle was equipped with Toyota Connected Services / telematics technology
- Activated the Toyota mobile app or connected services at any point
- Did not receive clear, affirmative notice that driving data would be shared with insurance companies or third parties
- Located in the United States during the period of alleged data sharing
Toyota models with embedded telematics include recent versions of the RAV4, Camry, Corolla, Highlander, Tacoma, Tundra, 4Runner, Prius, and others from the 2018 model year forward. If your vehicle came with a Toyota Safety Connect or Remote Connect subscription trial, it was almost certainly equipped with the technology at issue in this lawsuit.
Important caveat: due to the December 2025 arbitration ruling, the case is no longer proceeding as a class action in federal court. Whether individual claimants can pursue arbitration claims, and whether Morgan & Morgan will find a mechanism to pursue broader relief, remains an active legal question as of June 2026.
Toyota’s Defense: Consent Was Given
Toyota’s position in court is straightforward: every driver who activated Connected Services agreed to the terms, and those terms clearly disclosed data collection and transmission to Toyota and its affiliates.
Chief Judge Mazzant sided with Toyota on the arbitration question, finding the hyperlinks to the terms were “reasonably conspicuous” and placed users on notice. Toyota argues the opt-out mechanism was functional and available to any driver who wanted to stop data sharing. The automaker also contends that no data is collected from vehicles where the driver has declined the Connected Services agreement, since declining disables the vehicle’s data transmission capability entirely.
Progressive and CAS have both declined to comment publicly on the lawsuit. Progressive noted in a public statement before the suit that Toyota customers must consent to connected services enrollment and can later share their data with Progressive for potential discounts.
What Toyota Knew About the Consent Gap
The most damaging allegation in the Siefke complaint is not that data was collected — Toyota disclosed that in its Terms of Use. The damaging allegation is that the consent mechanism was designed to fail.
When Siefke checked his Toyota app after calling customer service, the app showed him as opted out of data sharing. Yet Progressive already had his data. The lawsuit argues this means Toyota’s opt-out system was either non-functional or that data was flowing through a separate channel that the app settings did not actually control.
This gap between stated consent controls and actual data flows is the same pattern that drew regulatory fire at General Motors. In January 2025, GM reached a settlement with the Federal Trade Commission, which banned GM from disclosing consumer geolocation and driver behavior data to consumer reporting agencies for five years — the first major regulatory consequence to flow from the automaker data-sharing scandal first exposed by the New York Times.
Toyota faces no equivalent regulatory sanction as of June 2026. But the Siefke lawsuit, even if it proceeds through private arbitration rather than a public trial, creates a documented record of the gap between Toyota’s public privacy commitments and what plaintiffs allege actually happened.
The Arbitration Trap: Why This Ruling Matters Beyond Toyota
The December 2025 arbitration ruling in Siefke v. Toyota carries implications that go well beyond this single case. It established that buried arbitration clauses in connected vehicle apps — apps that consumers activate to use basic features like remote start or navigation — can be used to block federal class action litigation over data privacy violations.
Consumer advocates argue this outcome creates a structural problem. A driver who wants to use their vehicle’s safety features, parking cameras, or connected navigation must accept a terms of use document that includes an arbitration clause and a class action waiver. Refusing to accept means losing access to features that, in many modern vehicles, are tied to the same connected system.
Judge Mazzant acknowledged this dynamic but found it did not invalidate the consent. He noted that customers have the choice to enroll in Connected Services or decline them. Critics of the ruling counter that, in practice, refusing connected services on a modern vehicle is not a realistic option for most consumers, and that this kind of “consent” does not meet the standard the law intends.
U.S. Senators Ron Wyden and Edward Markey asked the Federal Trade Commission to investigate automakers’ data practices in July 2024. That investigation’s scope and timeline have not been publicly updated as of June 2026. The FTC’s GM settlement could serve as a template, but no formal action targeting Toyota has been announced.
How This Data Can Raise Your Insurance Rates
The practical harm alleged in the Siefke complaint is not abstract. Driving data shared with insurance companies — including sudden braking events, late-night driving, high-speed travel, and frequent cornering — is used by insurers to price risk. If that data reaches Progressive, Allstate, or another carrier, it can result in higher premiums, fewer coverage options, or rejection of a quote.
As one commenter on Top Class Actions noted after the suit was filed: “I have a Toyota and have checked on several insurance companies online. They all have my info as soon as I begin. Put my name in and the rest shows up automatically.” This pattern of pre-filled insurance data is precisely what Siefke encountered.
The lawsuit alleges that even drivers who never consented to Snapshot or similar programs had their data flowing to Progressive. If true, those drivers were being priced on behavior they never agreed to share, through a system they didn’t know existed.
Expected Outcomes: What Happens in Arbitration
Because the case has been sent to private arbitration, there is no public trial scheduled. Arbitration proceedings are confidential, meaning outcomes will not be publicly reported unless the parties choose to disclose them.
No settlement has been reached as of June 2026 and no claim forms are available. Law firms monitoring similar automotive data-sharing settlements note that comparable data privacy settlements have historically paid between $20 and $100 or more per consumer, depending on the strength of the consent-defect claims and the number of class members.
| Scenario | Likely Outcome | Consumer Impact |
|---|---|---|
| Individual arbitration award for Siefke | Private ruling, no precedent | No benefit to other owners |
| Morgan & Morgan finds alternative class mechanism | Mass arbitration or new lawsuit | Possible claims for 2018+ Toyota owners |
| FTC investigates Toyota following GM precedent | Regulatory action, consent decree | Data sharing halted; no direct compensation |
| Toyota agrees to class settlement | Settlement fund announced with claims deadline | Compensation per qualifying owner |
Toyota owners who believe their data was shared without their consent should preserve documentation now: vehicle purchase records, VIN numbers, Connected Services enrollment materials, and any screenshots of Toyota app opt-out screens. This documentation could become relevant if a settlement or mass arbitration claim process opens in the future.
Plaintiffs in similar corporate data cases, like those pursuing claims against government agencies over consumer policy decisions, often find that early documentation significantly strengthens individual claims when claim windows finally open.
The Broader Automaker Data-Selling Scandal
The Toyota lawsuit did not emerge in a vacuum. It is one of several lawsuits filed in the wake of a March 2024 New York Times investigation that revealed multiple automakers — including General Motors, Honda, Kia, and Hyundai — were quietly selling driving data to LexisNexis Risk Solutions, a data broker that packages and resells the information to insurance companies.
The fallout from that investigation has been significant. Texas Attorney General Ken Paxton filed suit against General Motors and its subsidiary OnStar for allegedly collecting and selling the driving data of more than 1.8 million Texas consumers to insurers without their consent, describing the practices as “false, deceptive, and misleading.” In January 2025, GM settled with the FTC under terms that banned the company from sharing consumer driving behavior data with consumer reporting agencies for five years.
The Toyota-CAS-Progressive arrangement follows a structurally similar pattern: manufacturer collects data, routes it through a corporate affiliate or data broker, and that entity sells access to insurance carriers. The key difference in Toyota’s case is that CAS is a Toyota-affiliated entity, making the corporate separation even thinner than in the GM-OnStar-LexisNexis chain.
A 2023 Mozilla Foundation research project studying automaker privacy practices described modern cars as “a privacy nightmare,” finding that OEMs had shifted from selling cars to selling the behavioral data those cars generate. The Siefke lawsuit cites the Mozilla report directly.
What This Lawsuit Teaches Consumers
The Toyota tracking case is not just a lawsuit about one man’s driving data. It is a case about the terms under which Americans own and operate modern vehicles — and about how much of their lives those vehicles are recording and reporting without their knowledge.
For decades, driving was private. Your speed, your route, your late-night trips, your stops — none of it was recorded or sold. That has changed. Modern connected vehicles are data collection platforms with engines. Every Toyota, GM, Ford, and other connected vehicle generates a continuous behavioral record that manufacturers, their affiliates, and their insurance partners can access.
The consent process for this data collection is not designed to inform. It is buried in multi-screen app activation flows, routed through hyperlinks to lengthy terms documents, and structured so that declining means losing access to features consumers reasonably expect to use. When Siefke checked his Toyota app after calling customer service and saw that he was already opted out, yet Progressive had four years of his data, the system revealed exactly how it was built to function.
The lesson for Toyota owners, and for all connected vehicle owners, is this: your car’s terms of use are as important as your insurance policy. Read them. Know what data your vehicle transmits. Know who receives it. Know what opting out actually stops. And if you discover your data was shared without your informed consent, document it immediately — because future settlement claims will require that paper trail.
The GM precedent shows that regulatory action is possible. The Toyota lawsuit shows that class action litigation, while now rerouted through arbitration, is still active. The connected car data economy is being challenged. Whether it will be reformed depends on whether consumers, courts, and regulators all push in the same direction at once.
Read These
- Pennsylvania homeschool diploma lawsuit
- Starbucks lawsuit
- Chaturbate content moderation lawsuit
- UPS Teamsters buyout lawsuit
- DOT non-domiciled CDL lawsuit
Frequently Asked Questions
What is the Toyota car tracking lawsuit about?
The lawsuit, Siefke v. Toyota Motor North America, alleges Toyota secretly collected telematics data from 2018+ vehicles — including location, speed, braking, and voice data — and sold it to Progressive Insurance through affiliate data broker Connected Analytic Services, without meaningful driver consent.
Which Toyota models are affected by the data tracking lawsuit?
The proposed class covers owners and lessees of model year 2018 or newer Toyota vehicles equipped with Toyota’s connected telematics technology. This includes RAV4, Camry, Corolla, Highlander, Tacoma, Tundra, 4Runner, Prius, and other connected models.
What happened when the case went to court?
In December 2025, Chief Judge Amos Mazzant of the Eastern District of Texas granted Toyota’s motion to compel arbitration, finding the plaintiff accepted a binding arbitration agreement when he activated Toyota’s Connected Services. The class action was effectively blocked.
Can I still file a claim against Toyota for data tracking?
No formal claims process exists as of June 2026. The case is in private arbitration. If you believe your data was shared, preserve your vehicle records, VIN, and any Toyota app screenshots now, in case a future settlement or mass arbitration claim window opens.
Is there a settlement in the Toyota tracking lawsuit?
No settlement has been reached as of June 2026 and no compensation is available. Morgan & Morgan is exploring options to pursue broader relief beyond individual arbitration.
What data did Toyota allegedly collect and share?
Court filings allege Toyota transmitted location, GPS routes, speed, direction, braking intensity, swerving and cornering events, fuel levels, odometer readings, tire pressure, seatbelt status, and both image and voice data captured inside the vehicle.
How did this affect insurance premiums?
Progressive Insurance allegedly received Toyota telematics data through CAS and used it to price risk — even for drivers who never opted into a monitoring program. Drivers with hard braking or late-night driving patterns may have received higher quotes as a result.
What is an arbitration clause and why does it matter here?
An arbitration clause requires disputes to be resolved privately rather than in open court. Toyota’s Connected Services terms included one, and the judge found it binding. This prevents a public class action trial and means Toyota owners cannot sue collectively in federal court.
What is Connected Analytic Services (CAS)?
CAS is a data aggregator affiliated with Toyota Insurance Management Solutions (TIMS), a Toyota corporate entity. CAS collects telematics data from Toyota vehicles and provides it to insurance companies, including Progressive, allegedly on behalf of vehicle owners.
Did the GM data sharing lawsuit result in any compensation?
GM settled with the FTC in January 2025, resulting in a five-year ban on sharing consumer driving data with consumer reporting agencies. No consumer compensation fund was announced. The GM-OnStar-LexisNexis case followed a similar pattern to the Toyota-CAS-Progressive arrangement.
What should Toyota owners do now?
Document everything: keep your vehicle purchase records, VIN, Connected Services enrollment materials, and screenshots of your Toyota app data-sharing settings. If a settlement or mass arbitration process opens, this documentation will support your claim.
What federal laws does the Toyota lawsuit allege were violated?
The complaint alleges violations of the Federal Wiretap Act, the Computer Fraud and Abuse Act, invasion of privacy laws, breach of contract, and unjust enrichment. Damages sought exceeded $5,000,000 for the proposed class.
Leave a Reply