Autonomous and connected vehicles—data protection and privacy issues


Produced in partnership with James Boyle of Mishcon de Reya
Practice notes
Artificial Intelligence Guidance on Lexis+

Autonomous and connected vehicles—data protection and privacy issues


Produced in partnership with James Boyle of Mishcon de Reya

Practice notes
Artificial Intelligence Guidance on Lexis+
imgtext

STOP PRESS: On 20 May 2024, the Automated Vehicles Bill received Royal Assent, becoming the Automated Vehicles act 2024 (AVA 2024). See: LNB News 21/05/2024 13. The AVA 2024 affects the content referred to in this Practice Note. We are in the process of updating this Practice Note to reflect the new legislation.

This Practice Note considers the following data protection, privacy and security issues arising in connection with the use of autonomous and connected vehicle technology:

  1. •

    The technology

  2. •

    Declaration of Amsterdam

  3. •

    Cooperative Intelligent Transport Systems (C-ITS)

  4. •

    United Kingdom General Data Protection Regulation

  5. •

    Privacy and Electronic Communications Regulations 2003

  6. •

    Cybersecurity

  7. •

    The Product Security and Telecommunications Infrastructure Act 2022

  8. •

    Connected and autonomous vehicles in the EU

  9. •

    International

  10. •

    Practical issues

For more information about other key legal issues arising in connection with this technology in the UK, see Practice Notes: Autonomous vehicles—key legal issues and Autonomous vehicles and insurance, and for a summary of key dates and information, see:

James Boyle
James Boyle

Partner, Mishcon de Reya

James is a Partner in the Data Group of Mishcon's Innovation Department. He specialises in offering nuanced, strategic counsel in privacy and data protection matters. His clients are typically fast growth SaaS, AI and digital health businesses.  

His work extends to breached credentials compliance projects for cybersecurity firms that safeguard key industrial sectors. He has also consulted on data residency and hosting structures for fraud prevention networks that handle in excess of 300 million transactions annually, and designed and implemented global privacy training modules, delivered to over 100,000 staff members in publicly-listed companies. 

He leads the outsourced Data Protection Officer and EU Representative service lines.


Read moreRead more
Powered by Lexis+®
Jurisdiction(s):
United Kingdom
Related legal acts:
Key definition:
EC definition
What does EC mean?

1 European Commission 2 Emergency controller

Read more

Popular documents

Blockchain—key legal and regulatory issues

Blockchain—key legal and regulatory issuesSTOP PRESS—Impact of the Retained EU Law (Revocation and Reform) Act 2023: This document contains references to retained EU law (REUL) and associated terms introduced by the European Union (Withdrawal) Act 2018 in connection with Brexit. From 1 January 2024,

Smart legal contracts

Smart legal contractsSTOP PRESS—Impact of the Retained EU Law (Revocation and Reform) Act 2023: This document contains references to retained EU law (REUL) and associated terms introduced by the European Union (Withdrawal) Act 2018 in connection with Brexit. From 1 January 2024, REUL that remains in

Is there a definition of Robot?

Is there a definition of Robot?There is no statutory definition of ‘a robot’ in England and Wales and there is no recognised global legal definition of the term. Some jurisdictions have looked to introduce their own definition, for example, South Korean law defines a robot in the following way:‘An

Drones—the UK legal framework

Drones—the UK legal frameworkSTOP PRESS—Impact of the Retained EU Law (Revocation and Reform) Act 2023: This document contains references to retained EU law (REUL) and associated terms introduced by the European Union (Withdrawal) Act 2018 in connection with Brexit. From 1 January 2024, REUL that