CNIL, the French DPA, published a new Compliance Pack called “Connected Vehicles: A Compliance Pack for Responsible Data Use” on October 17, 2017. CNIL broke its guidance into three scenarios:

  1. Personal data remains in the car
  2. Personal data is transmitted externally to provide a service to the individual
  3. Personal data is transmitted outside to trigger an automatic action in the vehicle

The Compliance Pack will be updated and become final after GDPR becomes effective on May 25, 2018.