The eye, the yawn, the dashcam: the EU's driver-monitoring rule and the soft tissue of consent

Brussels has decided that the inside of your face is now a piece of safety equipment. Under a new European Union regulation, every new vehicle placed on the EU market must be fitted with a camera system that watches the driver — eyes, blinks, yawns, head pose — for signs of distraction or fatigue. The rule, which sits inside the bloc's evolving General Safety Regulation framework, took effect on 7 July 2026 and is being read by industry lawyers as the most consequential privacy-by-mandate decision Brussels has taken since the cookie banner.

The interesting fight was never whether the cameras work. Driver-monitoring systems have been a quietly booming slice of the automotive stack for half a decade. The fight is what "consent" means when the alternative is not driving — and whether a continent that spent a decade arguing about cookies has the vocabulary to notice that it has just consented to something larger.

A rule dressed as safety

The European Commission's pitch is straightforward. Distraction and fatigue are implicated in a non-trivial share of road deaths; a glance that drifts for two seconds at 90 km/h covers roughly fifty metres blind. A camera that notices the drift, the closed lid, the slack jaw, and pings the driver is, in the Commission's telling, the next logical step after seatbelts, ABS, and the breathalyser interlock.

The technical case is real. Euro NCAP has been rewarding cars with interior monitoring since 2022; suppliers such as Smart Eye, Seeing Machines, and the automotive arms of the larger Tier-1s have shipped systems that meet Euro NCAP's "Attention Assist" protocols. Mandating the technology across the fleet is, in the Commission's framing, a tidying-up exercise — bringing the laggards up to a bar the safety leaders have already cleared voluntarily.

The regulatory shape is less tidy. The text obliges manufacturers to detect "driver drowsiness, distraction, and impaired attention" and to issue a warning. It does not, in its public-facing communications, dwell on what the camera does with the frames once the warning has been issued — how long the data persists, whether it leaves the vehicle, whether it can be subpoenaed, whether it can be cross-referenced against other in-cabin sensors. Those questions are delegated to the GDPR, which regulates the processing, and to a 2024 data-governance update that the Commission insists is sufficient.

The consent that isn't

Critics inside and outside the car industry are converging on the same complaint, which is structural rather than technical. A driver who refuses the camera does not have a car. A passenger who finds the camera unsettling does not have a seat. The market is not optional; the surveillance is.

This is the second time in a decade that the EU has used its market-access leverage to push a default into European life. The first was cookies — and the cookie regime is now widely treated, including by data-protection authorities, as a piece of consent theatre. The user is asked; the user clicks; the user carries on. The default has, in practice, won. The same dynamic is now being installed in the cabin of every new car sold in one of the world's largest automotive markets, with the addition that the "user" cannot, in any realistic sense, opt out of buying the car.

Privacy regulators have been careful, in their public statements, to draw a line between the cabin and the cloud. The European Data Protection Board's guidance on the connected car, refreshed in 2025, says clearly that biometric data derived from in-cabin monitoring cannot be sent off the vehicle without a specific legal basis. That is, on paper, a meaningful constraint. In practice, it is a constraint on the data flow rather than on the data collection — and the collection is the part that bothers people.

The industrial logic, and what it costs

The rule is also a quiet industrial-policy document. The EU's automotive semiconductor strategy has been fretting for three years about its dependence on a small number of imaging-sensor and AI-accelerator suppliers, the bulk of them outside the bloc. A regulation that requires every new car to ship with a relatively capable interior camera and an on-device inference pipeline is, for those suppliers' European competitors, a guaranteed addressable market. The Commission's communications do not foreground this. The Commission's procurement-adjacent documents, read carefully, do.

The cost lands where costs always land. Cheaper vehicles — the segments in which European manufacturers have already ceded share to Chinese, Korean, and Indian rivals — will absorb the bill-to-materials most painfully. There is a plausible argument that this is fine, and that the safety case justifies the price. There is also a plausible argument that the price will be paid by buyers who already have the fewest options, and that the regulatory framing has not reckoned with the distributional consequence of making every car a little more expensive to make the safer ones a little safer.

What the rule actually does, in plain language

Read narrowly, the regulation does what it says: it forces a camera and a model into every new car. Read in the context of the last decade of EU digital rulemaking, it is another step in a pattern in which Brussels decides what a piece of technology does, who supplies it, and what defaults Europeans live with — and then tells the Europeans that they consented because the rule was published in the Official Journal.

That framing is not original to this regulation. It is, however, now bolted to a fifty-kilo piece of steel that most adults in the EU will use almost every day. The next time the bloc debates the line between safety and surveillance, it will not be in a browser tab. It will be in the cabin, looking back.

This article focuses on the privacy and industrial logic of the EU's driver-monitoring mandate; it does not adjudicate the safety statistics, which Euro NCAP and the Commission treat as settled and which the manufacturer trade association ACEA has not, as of writing, contested in their published commentary.

Wire provenance

This editorial synthesis draws on the following public wire/social posts:

• https://t.me/x/2719
• https://t.me/x/2720