IT and legal background for the management and processing of online data extracted from road vehicles in the case of a preventive repair strategy

Abstract

The IT architecture of modern vehicles and the development of telecommunications infrastructure enable a range of comfort and functional services for drivers, operators and
manufacturers. There are two main influencer backgrounds for building and exploiting them. One of them is how online data (e.g. fuel level or battery level /SoC/ or measurement values from different control units) is stored: in the vehicle itself or outside it in a cloud / back end. The other is the legal background of the country in question. Within this, the main
factor is usually the direct regulation of personal (EU GDPR) and personal telecommunication data protection (German TTDSG) or indirectly producer obligations and risks related to product liability, including "market monitoring". This legal background influences and even limits the possibilities of using online data extracted from vehicles much more than today's "state of the art" technical possibilities. Thus, without clarifying them beforehand, no technical construction or data use process planning makes sense. From the point of view of data protection, it is important that personal data cannot generally be collected and processed without the consent of the vehicle user, however, legal regulations (GDPR) allow some exceptions.
During the authorisation process, the user
must be informed of the purpose of using
the information received from him or, in this
case, from his vehicle (TTDSG).
The Product Liability Act and its obligation
to monitor the market may pose risks to the
manufacturer in certain special cases.