News, 16 April 2025
The French data protection authority (CNIL) has released a draft recommendation regarding the use of location data from connected vehicles, which is open for public consultation until May 20, 2025.
Scope: The recommendation aims to assist stakeholders in the vehicle industry, such as manufacturers and fleet managers, in complying with French privacy rules.
General Recommendations: The CNIL provides general recommendations applicable to all in-scope processing activities. These include understanding French data protection rules, identifying legal bases for processing, informing data subjects and facilitating their rights (including easy data deletion), and implementing security measures like encryption and access logs
Specific Recommendations: The recommendation covers anonymization of location data, offering practical advice and considerations for assessing re-identification risks. It also provides detailed guidance for using location data in commercial fleet management, personal vehicle use, theft prevention, accident assistance, and product improvement, with insights on stakeholder roles and lawful data processing conditions. Additionally, the CNIL highlights security considerations for telematic boxes and data aggregators, particularly concerning APIs
For further information: French CNIL Issues Draft Guidance On The Use of Location Data From Connected Vehicles
