Guidelines 01/2020 on processing personal data in the context of connected vehicles and mobility related applications

• Jurisdiction: European Union
• Year: 2021
• Date: 09 March 2021
• Type of Document: Guidance

Adopted 1

Guidelines 01/2020 on processing personal data in the

context of connected vehicles and mobility related

applications

Version 2.0

Adopted on 9 March 2021

Adopted 2

Version history

Version 2.0

9 March 2021

Adoption of the Guidelines

after public consultation

Version 1.0

28 January 2020

Adoption of the Guidelines for

public consultation

Adopted 3

Table of contents

1 INTRODUCTION ............................................................................................................................... 4

1.1 Related works.......................................................................................................................... 5

1.2 Applicable law ......................................................................................................................... 6

1.3 Scope ....................................................................................................................................... 8

1.4 Definitions ............................................................................................................................. 11

1.5 Privacy and data protection risks.......................................................................................... 13

2 GENERAL RECOMMENDATIONS.................................................................................................... 15

2.1 Categories of data ................................................................................................................. 15

2.2 Purposes ................................................................................................................................ 17

2.3 Relevance and data minimisation ......................................................................................... 17

2.4 Data protection by design and by default.............................................................................18

2.5 Information............................................................................................................................ 21

2.6 Rights of the data subject...................................................................................................... 23

2.7 Security.................................................................................................................................. 23

2.8 Transmitting personal data to third parties.......................................................................... 24

2.9 Transfer of personal data outside the EU/EEA...................................................................... 25

2.10 Use of in-vehicle Wi-Fi technologies ..................................................................................... 26

3 CASE STUDIES ................................................................................................................................ 26

3.1 Provision of a service by a third party...................................................................................26

3.2 eCall ....................................................................................................................................... 30

3.3 Accidentology studies............................................................................................................33

3.4 Tackle auto theft ................................................................................................................... 35