Skip to main content

Car data is personal data, says report

Early results from a new study commissioned by FIA Region I indicates that most car data can be linked to a user and therefore should be treated as personal data.
June 7, 2017 Read time: 2 mins

Early results from a new study commissioned by 8054 FIA Region I indicates that most car data can be linked to a user and therefore should be treated as personal data. The study examined how existing and upcoming EU legislation on data protection and liability could apply to vehicle data. It clearly dismisses the attempts to categorise data according to its technical or non-technical nature, as currently proposed by vehicle manufacturers. Data does not automatically lose relevance in terms of privacy because of its technical nature. For instance, technical information regarding a low oil gauge of a specific vehicle is linked to an identifiable customer, it directly relates to this person.

The General Data Protection Regulation, expected to come into force from May 2018, introduces the concept of data portability, intended to allow users to transfer their personal data to a third party upon request. This provision was drafted to ensure competition. However, data protection legislation alone may not be sufficient to ensure competition as there remain concerns over the latency and quality of the data to be provided.

"This study shows, without ambiguity, that most of the data generated by car users should be treated as personal data. It dismisses claims that exclusive access could be granted to vehicle manufacturers based on the nature of the data or liability obligations. While data protection legislation will provide some rights to users, it cannot replace sound technical and competition legislation to guarantee free choice and innovation." said Laurianne Krid, director general of FIA Region I.

The study also explores whether liability obligations grant a right to access data to manufacturers. Neither the product liability directive nor the produce safety directive obliges manufacturers to permanently monitor data once the vehicles are on the road. If such processing of data was needed, it must be based on consumer consent. Data should also be equally shared with component manufacturers.

The full study will be published in the coming weeks.

Related Content

  • January 23, 2012
    Speed reduction measures - carrot or stick?
    In Sweden, marketing company DDB Stockholm employed a mock speed camera as part of a promotional campaign for automotive manufacturer Volkswagen. The result was worldwide online interest and promotion of the debate over excessive speed to the national level. A developing trend in traffic management policy is to look at how to induce road users to modify their behaviour by incentivising change rather than forcing it through the application of penalties. There have been several studies conducted into this; an
  • September 14, 2022
    OPINION: ITS must be included in EU Green Deal
    To reach the objectives of the European Green Deal, a classification system has been developed to identify environmentally-sustainable activities. However, Richard Lax of Kapsch TrafficCom is worried that it might not have the intended effect – and ITS could lose out as a result…
  • January 26, 2012
    What's next for traffic management and data collection?
    As the technologies and stakeholders in traffic management evolve, what can we expect to see happening in the coming years? For many, the conversation of the moment is just how, and how far, the newer technologies and services provided principally by the private sector should be allowed to intrude into the realms of traffic management.
  • January 7, 2013
    Need for secure approach to connected vehicle technology
    Accidental or malicious issue of false messages to connected vehicles could result in dire consequences, so secure systems of authentication and certification are likely to be necessary, write Paul Avery and Sandra Dykes. Connectivity among vehicles in urban traffic systems will provide opportunity for beneficial impacts such as congestion reduction and greater safety. However, it also creates security risks with the potential for targeted disruption. Security algorithms, protocols and procedures must take