International DPAs give guidance on automated and connected vehicles

DPAs from all over the world, convening currently at their 39th International Conference in Hong Kong, adopted yesterday resolutions on data protection in automated and connected vehicles, and collaboration between data protection authorities and consumer protection authorities for better protection of citizens. The third resolution deals with future options for International Enforcement.

The DPAs urge the stakeholders to, for example

• give data subjects comprehensive information as to what data is collected and processed in the deployment of connected vehicles, for what purposes and by whom

• utilize anonymization measures to minimize the amount of personal data, or to use pseudonymization when not feasible

• keep personal data no longer than necessary in relation to the legitimate purpose for which they are processed, for further compatible purposes, or in accordance with law or with consent, and to delete them after this period

• provide technical means to erase personal data when a vehicle is sold or returned to its owner

• provide granular and easy to use privacy controls for vehicle users enabling them to, where appropriate, grant or withhold access to different data categories in vehicles

• provide technical means for vehicle users to restrict the collection of data.

The DPAs say that ‘comprehensive collection of data shared within a connected vehicles system including cooperative intelligent transportation system, may not only lead to the accumulation of individuals’ movement profiles, but could also generate vast amounts of data on the evaluation of driving behaviors, which may prove to be valuable information for certain entities, e. g. motor insurance companies, vehicle manufacturers, advertisers as well as law and traffic enforcement agencies, particularly when data will be personalized, e.g. by utilizing any broadcast vehicle identifiers.’

See the resolutions at https://icdppc.org/document-archive/adopted-resolutions/

Read more about the proceedings at this conference in the October edition of Privacy Laws & Business International Report. For information: www.privacylaws.com/Publications/int/
and www.privacylaws.com/Publications/Subscription-Information/  and www.privacylaws.com/Publications/Subscribe-new/