Modern cars, as well as motorcycles, scooters and bicycles, are often "connected": they are driving computers, connected to the Internet. In doing so, they often collect personal data, such as location data and data on driving style. The Autoriteit Persoonsgegevens (AP) provides tips on protecting privacy with connected cars.
The AP's tips are in the guide "Connected car? Protect your privacy! The tips help people protect their personal data when buying, renting, using and selling connected vehicles.
Where all you've been lately, how fast you've been driving, who you've called from the car: a vehicle can collect all this kind of data. Thus, a vehicle knows a lot about its occupants. And so does the car manufacturer and possibly other parties with whom a car manufacturer shares that data, such as the leasing company. This can involve very sensitive information. From location data, for example, one can deduce how often someone goes to the doctor, visits the gym or a snack bar, and what time someone gets home from work. But also whether someone drives to an addiction clinic, visits a family member in prison or parks their car at a church, mosque or synagogue every week.
Poor security of that personal data or its resale are risks that people should be aware of. This reselling can be valuable to some organizations because it allows them to create a detailed profile about someone. This allows them to target individuals, for example. That can seem convenient. But it can also result, for example, in advertisements about someone's medical condition appearing while they are just watching TV with friends.
The manual includes what to look for before buying a connected vehicle. For example, a car manufacturer, importer or dealer is required to inform buyers about what data the vehicle collects and stores. The manual also provides an overview of tips and information about your rights when you put the vehicle into service or sell it again. Such as the tip to remove all data from the car when you sell it to prevent the new owner from accessing the previous owner's data.
Car users with questions about the personal data their vehicle collects first contact the manufacturer, dealer, leasing company or other parties involved in buying, leasing or renting a car. For example, when they want to see the data collected about them or have it deleted. If the party involved does not handle a request satisfactorily, the car user can file a complaint or tip with the AP.
Manual: Connected car? Protect your privacy!
This news item can also be found in the AVG and Information Security dossier
