Friend
Professional
- Messages
- 2,653
- Reaction score
- 850
- Points
- 113
The GDPR threatens millions in fines for data disclosure.
According to a new study, 4 out of 5 cars resold in Germany, the UK and Italy enter the secondary market with the personal data of the previous owners preserved, which is easy to access.
A study by Privacy4Cars found that 30% of customers can find saved location data and home addresses in resold cars, and about 50% can access call logs and text messages of previous owners. The report, based on an audit of hundreds of cars resold by dozens of dealers, cites a number of alarming findings.
Of the 46 dealers surveyed to whom the undercover buyer was sent, 35 claimed that they always delete personal data, but during 40 out of 70 test drives conducted at dealerships, the data of the previous owners was found in the cars.
The data was handed over to a UK judge earlier this year, leading to a finding that could alarm the automotive industry across the region. Lawyers note that dealers, car rental companies, and manufacturers are legally responsible for deleting data before selling or renting cars.
If dealers and other organizations continue to resell or rent cars without deleting the data, this may be considered a violation of data protection law. Such cases require notification in accordance with the UK General Data Protection Regulation (GDPR). Violation can result in fines of up to 4% of the company's global annual revenue.
To comply with the law, dealers need to implement system programs to ensure data deletion. It is noted that the use of documented procedures for cleaning on-board computer systems or software solutions significantly increases the chances of compliance with legal regulations.
In May, the Federal Trade Commission (FTC) warned automakers that it was closely monitoring their collection and sale of customer data. The Commission noted possible measures that could be applied to automakers for sharing sensitive data with advertisers.
The post was the first public comment by the FTC on connected cars since 2018. The statement came amid pressure from U.S. senators calling on the commission to take action against automakers for data privacy violations.
The issue of data privacy has become important for consumer advocates in recent years. For example, Privacy4Cars last year released a tool under the Vehicle Privacy Report, which shows what information about a particular car can be collected. By entering the VIN of a car, the user can see what automakers can know about it. It is estimated that cars can produce 25GB of data per hour.
At the same time, a WIRED report found that most major car brands collect data on location, speed, acceleration, braking, cornering, and other driving parameters. In addition, some automakers can access data from connected devices such as smartphones, tablets, or navigators.
Moreover, the U.S. Congress recently released the results of an investigation according to which most major automakers hand over drivers' location data to the police without a court warrant, despite public promises to refrain from doing so.
Source
According to a new study, 4 out of 5 cars resold in Germany, the UK and Italy enter the secondary market with the personal data of the previous owners preserved, which is easy to access.
A study by Privacy4Cars found that 30% of customers can find saved location data and home addresses in resold cars, and about 50% can access call logs and text messages of previous owners. The report, based on an audit of hundreds of cars resold by dozens of dealers, cites a number of alarming findings.
Of the 46 dealers surveyed to whom the undercover buyer was sent, 35 claimed that they always delete personal data, but during 40 out of 70 test drives conducted at dealerships, the data of the previous owners was found in the cars.
The data was handed over to a UK judge earlier this year, leading to a finding that could alarm the automotive industry across the region. Lawyers note that dealers, car rental companies, and manufacturers are legally responsible for deleting data before selling or renting cars.
If dealers and other organizations continue to resell or rent cars without deleting the data, this may be considered a violation of data protection law. Such cases require notification in accordance with the UK General Data Protection Regulation (GDPR). Violation can result in fines of up to 4% of the company's global annual revenue.
To comply with the law, dealers need to implement system programs to ensure data deletion. It is noted that the use of documented procedures for cleaning on-board computer systems or software solutions significantly increases the chances of compliance with legal regulations.
In May, the Federal Trade Commission (FTC) warned automakers that it was closely monitoring their collection and sale of customer data. The Commission noted possible measures that could be applied to automakers for sharing sensitive data with advertisers.
The post was the first public comment by the FTC on connected cars since 2018. The statement came amid pressure from U.S. senators calling on the commission to take action against automakers for data privacy violations.
The issue of data privacy has become important for consumer advocates in recent years. For example, Privacy4Cars last year released a tool under the Vehicle Privacy Report, which shows what information about a particular car can be collected. By entering the VIN of a car, the user can see what automakers can know about it. It is estimated that cars can produce 25GB of data per hour.
At the same time, a WIRED report found that most major car brands collect data on location, speed, acceleration, braking, cornering, and other driving parameters. In addition, some automakers can access data from connected devices such as smartphones, tablets, or navigators.
Moreover, the U.S. Congress recently released the results of an investigation according to which most major automakers hand over drivers' location data to the police without a court warrant, despite public promises to refrain from doing so.
Source
