In-vehicle data protection

25.10.2023

Question for written answer  E-003142/2023
to the Commission
Rule 138
Ciarán Cuffe (Verts/ALE)

A recent study by the Mozilla Foundation[1] reported that European car brands, as well as international companies operating in the EU, are collecting and selling their customers’ personal data without their consent. In addition, data leaks and breaches are common. These actions and oversights appear to violate the General Data Protection Regulation (GDPR) principles of integrity, confidentiality, the right to erasure, and the right to object.

• 1.In the light of these reports, does the Commission agree that there is a problem when it comes to data protection for consumers in this sector?
• 2.When does the Commission expect to propose legislation on in-vehicle data?
• 3.Will such a proposal enshrine at a minimum the same rights to vehicle users that are afforded to citizens under the GDPR framework?

Submitted: 25.10.2023

• [1] https://foundation.mozilla.org/en/privacynotincluded/articles/its-official-cars-are-the-worst-product-category-we-have-ever-reviewed-for-privacy/.