European Data Protection Board

Abstract

• The Guideline ́s perspective on processing personal data in context of connected vehicles seems to be based on consent alone. This seems to ignore the possibility of legitimate interest of a 3rd party, such as the seller or importer. For example, the seller/importer could have responsibilities under the product liability law or have given a guarantee, which necessitates access to the vehicle ́s maintenance history and technical data.