DATA and the CONNECTED CAR

The Future of Privacy Forum released an infographic, “Data and the Connected Car – Version 1.0,” describing the basic data-generating devices and flows in today’s connected vehicles. The infographic will help consumers and businesses alike understand the emerging data ecosystems that power incredible new features - features that can warn drivers of an accident before they see it, or jolt them awake if they fall asleep at the wheel.

This infographic accompanies a project FPF launched earlier this year, a consumer guide to Personal Data in Your Car. The Guide includes tips for understanding the new technologies powered by data in the car. It describes common types of collected data, the Privacy Principles that nearly all automakers have committed to, and includes a “privacy checklist” for renting or selling a car.

Germany’s Federal Commissioner for Data Protection, Andrea Voßhoff, has given her view on data protection in digitised traffic systems with her “13 Recommendations” in relation to automated and connected cars, including a call for specific rules that make it clear which data businesses can process without the "explicit consent" of vehicle users.

According to publications, the Commissioner stated that car users should have full control of the use of personalized vehicle data, data generated by connected vehicles should automatically be anonymised, unless there are reasons for it to be in personally identifiable form, and that car users should be able to "simply delete personal data" unless there are legal reasons why that information should remain recorded. Location data recorded by connected and autonomous vehicles should also be "deleted as soon as they are no longer required for the respective purpose

The Recommendations are non-binding, but rather served as recommendations for the industry (suppliers, car manufacturers, and other data controllers) implementing the requirements of transparency and “privacy by design”. Based on the principle to safeguard the driver’s privacy, drivers shall be able to access relevant personal data and request data deletion, unless the collection and storage of their data is justified under law.

This update is intended as a summary only and should not be regarded or relied upon as advice with respect to any specific situation. For specific advice please contact our office.