EDPB车联网个人数据保护指南（英文版）.pdfVIP

Guidelines 1/2020 on processing personal data in the context of connected vehicles and mobility related applications Version 1.0 Adopted on 28 January 2020 Adopted - version for public consultation 1 Table of contents 1 INTRODUCTION 3 1.1 Related works 4 1.2 Applicable law 5 1.3 Scope 6 1.4 Definitions 9 1.5 Privacy and data protection risks 10 2 GENERAL RECOMMENDATIONS 12 2.1 Categories of data 12 2.2 Purposes 14 2.3 Relevance and data minimisation 14 2.4 Data protection by design and by default 14 2.5 Information 17 2.6 Rights of the data subject 19 2.7 Security and confidentiality 19 2.8 Transmitting personal data to third parties 20 2.9 Transfer of personal data outside the EU/EEA 20 2.10 Use of in-vehicle Wi-Fi technologies 21 3 CASE STUDIES 21 3.1 Provision of a service by a third party 21 3.2 eCall 25 3.3 Accidentology studies 27 3.4 Tackle auto theft 29 3.5 Personal information stored on rental cars’ dashboard 30 Adopted - version for public consultation 2 The European Data Protection Board Having regard to Article 70 (1) (e) of the Regulation 2016/679/EU of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, (hereinafter “GDPR”), Having regard to the EEA Agreement and in particular to A