On Tuesday, July 7, 2026, the European Union’s General Safety Regulation (Regulation 2019/2144) crossed its final compliance threshold: every new passenger car, van, truck, and bus sold in the bloc must now come fitted with an Advanced Driver Distraction Warning system — a camera, mounted somewhere in the cabin, that tracks where the driver is looking and whether they appear drowsy. The mandate was years in the making, phased in for new vehicle types in 2024, and now it’s universal.
The official rationale is straightforward. The European Commission estimates that driver distraction and fatigue contribute to somewhere between 10 and 30 percent of road fatalities. If a camera can detect a drooping eyelid or a gaze lingering too long on a phone, the car can sound an alert. Lives saved. Box checked.
That is the story regulators told. It is not, as it happens, the interesting one.
The Data Pipeline Nobody Discussed
What the GSR mandate does not specify — what no press release from Brussels bothered to address — is where the footage goes. The regulation requires the monitoring. It does not require the data to stay in the car.
The camera generates a feed. That feed can be processed locally on an embedded chip, or it can be piped through a connected telematics system. And automakers, having invested billions in designing these systems, have a strong incentive to find a second use for the hardware. A camera that only beeps when you yawn is a compliance cost. A camera that feeds a continuous stream of behavioral data to a cloud server is an asset.
“The OEMs are treating this like a firehose,” said a data architect at a German tier-one supplier, speaking after a compliance review last month. “The safety use case closes the regulatory door. But everyone is designing the architecture so the door can be opened again later. The camera is the sensor. The business model comes after.”
He is not being paranoid. The insurance industry has spent the last three years laying groundwork for exactly this moment. Usage-based insurance, priced by telematics, has been the industry’s white whale for a decade — held back by the clunkiness of aftermarket dongles and phone apps. A factory-installed camera that ships with every new car solves the distribution problem overnight.
The Premium That Knows You Yawned
Consider the math. In 2024, the EU registered roughly 10.6 million new passenger cars. Even in a down year, that is a colossal number of rolling sensor platforms. If those cameras capture even a sliver of driver behavior — glance patterns, blink rates, reaction times — the resulting dataset would be the most granular picture of behind-the-wheel human behavior ever assembled.
Now ask who wants that picture. Not just insurers. Fleet operators want it to discipline drivers. Employers want it to verify that the sales rep really was on the road. Plaintiff’s attorneys want it for discovery after a collision. And manufacturers, who own the telematics pipe, want it because selling anonymized behavioral data to third parties is a recurring revenue stream that doesn’t require selling a single additional car.
The EU has, to its credit, built a privacy framework in GDPR. But GDPR governs personal data; it does not prevent a driver from consenting to share that data in exchange for a lower premium. And once a market for driver-attention data exists, the “choice” not to share becomes expensive. Opt out, pay more. Opt in, and every long blink gets priced.
Safety Was the Sales Pitch
There is an uncomfortable pattern here, and it is not the lazy privacy-as-freedom rant that this debate usually produces. The pattern is that Brussels sold this as a pure safety play — look at the name, “General Safety Regulation” — while building the plumbing for a surveillance economy that safety didn’t require.
An ADDW system can function perfectly well as a closed loop. Camera detects distraction, car vibrates the steering wheel, data evaporates. That version of the mandate would have been more expensive to implement, or at least less lucrative to monetize. So the version we got, as one engineer on the working group told me in a courthouse hallway during a standards meeting in Geneva, “was written to be agnostic about data retention from the start. Nobody wanted to foreclose options.”
Nobody wanted to foreclose options. That is not the language of safety. It is the language of a market being quietly assembled under the floorboards of a regulation that voters were never asked to debate.
The European Reflex
The standard right-of-center response to this story is to howl about Brussels overreach, to invoke the nanny state, to demand that regulators keep their cameras out of our dashboards. That response has the advantage of being emotionally satisfying, and the disadvantage of being about five years too late. The mandate is law. The cameras are being installed. The ship has sailed.
The more interesting question is what happens now that the cameras are there — and whether the data they generate will be governed by anything resembling democratic consent, or simply by the terms of service in the infotainment screen, which nobody reads and everyone accepts.
If the EU is serious about safety, it should be equally serious about closing the data pipeline. Require ADDW to be a closed system, processed on-device, with no telemetry export. If it won’t do that — and it won’t — then the honest position is to say so, and to let the public argue about what kind of surveillance they are willing to accept in exchange for marginally cheaper insurance.
What we got instead was a safety mandate that doubles as market infrastructure. The cameras arrived on July 7. The business models are only a few quarterly earnings calls behind.