- Vehicle manufacturers have to observe GDPR when collecting and processing data. The customer's consent to the use of their data (e.g. on-board systems such as car apps) should always obtained when purchasing. 2/5
GDPR is a good foundation for ensuring data protection for data collected, processed and stored by modern vehicles. The legal requirements on "privacy by design" and "privacy by default" are important cornerstones to take into account when developing products. 3/5
The large amounts of data accumulating in modern vehicles and the developments in autonomous and networked driving, make further legal regulations necessary. For example, the planned EU regulations on data intermediaries in the Data Governance Act should be mentioned here. 4/5
Consumers must be able to decide individually whether and to whom they grant access to the data sets they have produced. In addition, consumers must be able to delete personal driving data at any time within the framework of the legal limits.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Back to the Grind-r. Long thread / deep dive on the @Datatilsynet opinion and why it is important for scope of consent, sensitive information, manifestly made public and more 1/20
Consent as the legal basis for targeted ads: As a rule, any extensive disclosure to third parties of personal data for advertising purposes should be based on the data subject’s consent, as the other legal bases in Article 6(1) would not seem fit or adequate in this context 2/20
The fact that few complaints have been filed by data subjects doesn't mean a low level of damage suffered. Few people have the initiative to sue and many don't understand the complex processing enough to sue 3/20
Storage and access includes: access to hardware device identifiers, advertising identification numbers, telephone numbers, SIM card serial numbers (IMSI), contacts, call lists, Bluetooth beacons or SMS communication, MAC addresses and browser fingerprinting. 2/11
You can get consent to store and access information and consent for further processing under GDPR 6(1)(a) at the same time if: you inform the users of all purposes (including of the subsequent processing), and it is clear to the user that several consents are given at once 3/11
I can feel something inside me say
I really don't think (your legitimate interest) is strong enough now
- says @Datatilsynet to Shinigami Eyes browser extension. (Thread while you hum the Cher song in your head) 1/6
The data subjects’ interests, rights and freedoms precedes Shinigami Eyes’ interest in providing their marking-application 2/6
The individuals had no knowledge of the processing and no way to expect that their messages or behavior on certain social media pages will be processed on the extension or communicated to all who download it 3/6