Full Report
Waymo driverless taxis capture troves of video footage in order to operate, but the company reveals very little about how much data is stored—and for how long.
Analysis Summary
# Main Topic
Concerns regarding the vast amount of video footage collected by Waymo driverless taxis, the lack of transparency concerning data storage duration, and the company's history of sharing this footage with law enforcement upon legal request.
## Key Points
- Waymo driverless cars are equipped with 29 external cameras providing a 360° view, plus an unspecified number of internal cameras.
- Waymo's policies regarding data retention (how long footage is stored) are not publicly specified on its website or privacy policy.
- The company previously indicated that "interior camera data" is not stored alongside external camera data.
- Waymo has a general policy to challenge overly broad or legally unsound data requests but does not disclose specific case outcomes.
- Waymo has complied with numerous formal legal requests from police, including search warrants in San Francisco and Maricopa County.
- Footage sharing has occurred even when the relevance of the specific vehicle to the incident was not fully established (e.g., murder investigation).
- Data collected may be used by law enforcement in conjunction with other technologies like facial recognition or video-tracking software.
## Threat Actors
- **Law Enforcement Agencies (LEAs):** Act as requesting entities leveraging formal legal mechanisms (subpoenas, search warrants) to obtain surveillance data for investigations.
- **Vandals/Attackers:** Individuals responsible for direct physical attacks against Waymo vehicles (as evidenced by recent incidents where Waymo sued alleged attackers and possessed corresponding footage).
## TTPs
- **Data Collection:** Continuous 360° video capture from 29 external cameras and internal sensors while operating.
- **Data Disclosure:** Sharing collected footage with law enforcement upon receiving valid governmental or legal requests (e.g., search warrants).
- **Surveillance Exploitation:** LEAs integrating Waymo-collected footage with facial recognition or video-tracking software (e.g., Briefcam) to identify suspects.
## Affected Systems
- Waymo Driverless Taxis (Robotaxis) operating in Phoenix, San Francisco, Los Angeles, and Austin.
- Data storage mechanisms (both local vehicle storage and cloud storage—location unspecified).
- Waymo One app user data (though the focus is on sensor data).
## Mitigations
- **Data Minimization/Retention:** Engineering teams reportedly place limits on data access and retention duration, though specifics are proprietary.
- **Policy Enforcement:** Waymo's stated policy involves challenging data requests that lack sound legal basis or are overly broad.
- **Transparency Improvement (Recommendation):** The core issue highlighted is the lack of public disclosure regarding the duration of video retention and the frequency of data sharing with law enforcement/federal agencies.
## Conclusion
The primary intelligence concern is the lack of transparency around Waymo's video data retention policies. The widespread deployment of sophisticated visual sensors on public roads effectively creates a massive, distributed network of passive surveillance cameras whose footage can be accessed by law enforcement with appropriate legal backing. Organizations and individuals operating near these vehicles should assume their actions may be recorded and that this data may not be ephemeral.