During a Norwegian National Guard exercise focused on protecting Oslo Airport in a wartime scenario, soldiers found that some of their rental cars had recorded their movements, passengers and security codes entered at military access points. The recordings were reportedly made by cameras in the cars’ advanced driver-assistance systems, according to Norwegian newspaper Dagens Næringsliv.
At least two of the vehicles were Chinese-built Deepal models supplied by First Rent A Car Norway. The company’s main shareholder is Zhejiang Geely Holding Group, and it operates Hertz in Norway as a franchisee rather than as a subsidiary of the US rental brand. The recordings were deleted from the vehicles, but it is not known whether the data had been retained elsewhere or transmitted. The report said there was no evidence that Chinese authorities had obtained it.
The rentals were part of a Norwegian Armed Forces logistics agreement signed in 2024 and running through 2028, with a maximum value of 350 million Norwegian kroner, or nearly €33 million. The cars are used for everyday duties as well as exercises and operational work. Norway’s armed forces say they recognize the risks posed by vehicle electronics, but there is no blanket ban on cars from particular countries. The case raises questions about what data connected vehicles collect, where it is held and who can access it.