Skip to main content

FIA: EU data protection rules mean drivers control who accesses their car data

FIA Region I has just released a legal study exploring how the upcoming General Data Protection Regulation (GDPR) will apply to connected car data.
June 28, 2017 Read time: 2 mins

8054 FIA Region I has just released a legal study exploring how the upcoming General Data Protection Regulation (GDPR) will apply to connected car data.

Since most car data can be associated to the registered owner of the vehicle, it qualifies as personal data. According to a recent ruling from the European Court of Justice, data qualifies as personal if it is in the hand of any party that can obtain sufficient information to identify the user. Vehicle manufacturers, who can easily identify vehicle owners, should therefore treat most vehicle data as personal data.

The GDPR protects the portability of data, meaning that citizens may change service providers. This principle applies to car data as well, which means that there should be a choice about who accesses car data and for what purpose. However, without clear legislation on the latency (or delay of delivery) and format, data portability could be compromised as, realistically, third-party service providers may struggle due to delays and unreadable data to provide equivalent services with vehicle manufacturers.

The European product liability and product safety legislation do not justify extensive monitoring of real time car data for vehicle manufacturers.

FIA Region I director general, Laurianne Krid, said “This legal memorandum shows us what the European Data Protection Regulation can and cannot do, when it comes to car data. While it grants users certain rights, we still feel that specific legislation is needed to ensure innovation, choice and ultimately create value for connected vehicle users.”

The study findings were disclosed during a debate in the European Parliament hosted by MEP Ismail Ertug on ‘Autonomous Driving and Data: Access, Ownership, Security’. The legal observations complement the My Car My Data campaign run by FIA Region I, which aims at raising awareness regarding connected vehicles and the use of data.

Related Content

  • February 3, 2012
    The case for integrating urban traffic control and parking
    Although urban traffic control and parking management are inextricably linked in so many ways, there remain fundamental differences which undermine closer integration. Car parking guidance systems can have a significant, positive impact on congestion in town and city centres, however conflicting business models still stand in the way of the more profound integration of car parking management and Urban Traffic Control (UTC) systems.
  • July 23, 2019
    The rise and rise of robo-car
    When it comes to driverless cars, there are many variables – but one thing is for certain: autonomous driving will have a significant impact on vehicle design, says Andreas Herrmann The transition to autonomous vehicles (AVs) means that many of the factors which have shaped automotive design for the past 130 years no longer apply. At present, the design of a car is largely determined by the anticipated direction of travel: the car’s silhouette immediately shows where the front and back are. Driverless ve
  • May 12, 2014
    Cross-border enforcement directive annulled, but remains in place
    The European Court of Justice has stopped a directive designed to ease cross-border exchange of information adopted by the European Parliament and Council in October 2011. This directive sets up a procedure for the exchange of information between member states in relation to eight road traffic offences (speeding, non-use of a seat-belt, failing to stop at a red traffic light, drink-driving, driving under the influence of drugs, failing to wear a crash helmet, use of a forbidden lane and illegally using a m
  • March 2, 2016
    Study reveals major concerns over the security of connected cars
    New research has revealed that half of British drivers (49 per cent) are concerned about the safety of the connected car, with automotive manufacturers also admitting there could be a security lag of up to three years before systems catch up with cyber threats. The report, commissioned by Veracode and carried out by the International Data Corporation (IDC), revealed half of drivers are concerned about the security of driver-aid applications, such as adaptive cruise control, self-parking, and collision av