Guidelines 1/2020 on processing personal data in the context of connected vehicles and mobility related applications
Paragraph 1.1.2 National initiatives of European Data Protection Board (EDPB) members
8. In January 2016, the Conference of the German Federal and State Data Protection Authorities and the German Association of the Automotive Industry (VDA) published a common declaration on the principles of data protection in connected and not-connected vehicles. In August 2017, the UK Centre for Connected and Autonomous Vehicles (CCAV) released a guide stating principles of cyber security for connected and automated vehicles in order to raise awareness on the matter within the automotivesector. In October 2017, the French data protection authority, the Commission Nationale de l’ Informatique et des Libertés (CNIL), released a compliance package for connected cars in order to provide assistance to stakeholders on how to integrate data protection by design and by default, enabling data subjects to have effective control over their data.