Guidelines 1/2020 on processing personal data in the context of connected vehicles and mobility related applications

Subparagraph 3.1.1.5  Recipient

115. The EDPB recommends that, as far as possible, the vehicle’s usage data should be processed directly in telematics boxes, so that the insurer only accesses the results data (e.g. a score), not detailed raw data.

116. If a telematics service provider collects the data on behalf of the controller (the insurance company) to generate numerical scores, it does not need to know the identity of the driver (such as names, licence plates, etc.) of the policy holders.