My Car My Data: EU data protection rules mean drivers control who accesses their car data
Publication date: 27 June 2017
Today, FIA Region I released a legal study exploring how the upcoming General Data Protection Regulation (GDPR) will apply to connected car data.
Since most car data can be associated to the registered owner of the vehicle, it qualifies as personal data. According to a recent ruling from the European Court of Justice, data qualifies as personal if it is in the hand of any party that can obtain sufficient information to identify the user. Vehicle manufacturers, who can easily identify vehicle owners, should therefore treat most vehicle data as personal data.
The GDPR protects the portability of data, meaning that citizens may change service providers. This principle applies to car data as well, which means that there should be a choice about who accesses car data and for what purpose. However, without clear legislation on the latency (or delay of delivery) and format, data portability could be compromised as, realistically, third-party service providers may struggle due to delays and unreadable data to provide equivalent services with vehicle manufacturers.
The European product liability and product safety legislation do not justify extensive monitoring of real time car data for vehicle manufacturers.
FIA Region I Director General, Laurianne Krid, said “This legal memorandum shows us what the European Data Protection Regulation can and cannot do, when it comes to car data. While it grants users certain rights, we still feel that specific legislation is needed to ensure innovation, choice and ultimately create value for connected vehicle users.”
The study findings were disclosed during a debate in the European Parliament hosted by MEP Ismail Ertug on “Autonomous Driving and Data: Access, Ownership, Security”. The legal observations complement the My Car My Data campaign run by FIA Region I, which aims at raising awareness regarding connected vehicles and the use of data.
My Car My Data - Legal Study launch
My Car My Data
The My Car My Data campaign is about empowering consumers, educating them about vehicle connectivity and making sure they are aware of their rights concerning car data. Specifically advocating for consumers to:
have the right to choose and change service providers and match the right products and level of service to their needs
have the right to choose among service providers competing in an open market place and to enable any chosen service provider to access vehicle data and associated functionalities via an open, secure telematics platform
Learn more about My Car My Data
About FIA Region I
The FIA Region I office, based in Brussels, is a consumer body representing 113 Motoring and Touring Clubs and their 38 million members from across Europe, the Middle East and Africa. The FIA represents the interest of these members as motorists, public transport users, pedestrians and tourists. The FIA’s primary goal is to secure a mobility that is safe, affordable, sustainable and efficient. With these aims in mind, FIA Region I’s work focuses on Road Safety, Consumer Protection, Environmental Protection, and the promotion of Sustainable Motoring. www.fiaregion1.com
Head of Communications, FIA Region I
+32 2 282 0813