Out-Law News 1 min. read
GDPR guidance for automated driving systems provided in Germany
22 Feb 2023, 3:51 pm
Automotive manufacturers can implement sophisticated technological driving aids in a way that does not breach EU data protection law, a German state authority has said.
In its recently published annual report for 2022, the Baden Württemberg data protection authority considered how the use of sensors and camera technology might involve the processing of personal data when the technology is used to enable vehicles to detect and avoid objects, and the extent to which any personal data is subsequently disclosed to the vehicle drivers.
The Baden Württemberg data protection authority said it had visited Mercedes-Benz and inspected an automated driving system it has developed that uses a range of technologies – from light detection and ranging (LiDAR) to radar, ultrasound and wetness sensors, and cameras – to detect objects in the vehicle’s environment.
Munich-based data protection law expert Daniel Widmann of Pinsent Masons said that the authority’s comments in its annual report provide an insight to its current position regarding data processing in the context of assistive or self-driving systems.
“In respect of the Mercedes-Benz system, the Baden Württemberg data protection authority highlighted positively the fact that the data displayed on the digital cockpit screen is reduced to the information which is relevant for the driver and is not a simple unfiltered summary of everything that the car ‘sees’ around itself,” Widmann said.
“Even though personal data may initially be processed at the moment of recording, the authority was unable to identify any indicators of identifiers in the metadata that is processed onboard or displayed in the cockpit. If the data is immediately converted into metadata and the original video sequences are irreversibly deleted without any technical possibility of accessing it, the authority said it is doubtful whether processing of personal data within the meaning of the GDPR takes place and therefore whether the GDPR applies to the data at all. It said that even if the GDPR is applicable, the legitimate interests in processing this data outweigh any minor intrusion there may be to the privacy of the data subjects,” he said.
Widmann said, however, that the Baden Württemberg data protection authority had suggested that the position might be different with other automated driving systems depending on the technologies they rely upon.
“In the report, authority states that its assessment is likely to be different for vehicles which are equipped solely with sensors for the visual observation of the environment and rely heavily on more cameras to compensate the absence of other sensor types, especially if this type of more intrusive processing is chosen on cost grounds,” Widmann said. “It said whether the use of certain cameras is permissible under the GDPR depends heavily on the purposes of their use and individual technical characteristics.”
Contact an adviser
Dr. Stephan Appt, LL.M.
Rechtsanwalt, Partner, Head of Diversified Industrial and German TMT
View ProfileLatest News
Editor's Pick
Out-Law Analysis
06 Oct 2022
