In march 2018, french CNIL will publish the final version of the Compliance Package for the Connected Vehicles and Personal Data.
NEXYAD appears in the list of Bodies consulted by the CNIL (p.3). An interesting article about the collected data shows that SafetyNex is fully compliant with french law and recommendations for European Union (p.25).
The data control shall only collect personal data that are strictly necessary for the processing. In the case of a contract for the provision of services, the only data that can be collected are those that are essential for the provision of service.
Concerning data relating to criminal offences:
For purpose 1 (model optimisation and product improvement) and 3 (commercial use of the vehicle’s data): except in the case of specific legal provision, data that are likely to reveal criminal offences shall not be processed by legal persons who do not administer a public service,
except to defend their rights in court. However, that data can be processed locally, directly in the vehicle, in accordance with scenario No. 1, in order to give the user control over that particularly sensitive data and limit as much as possible the consequences on privacy.
strong caracters are made by Nexyad
Reminder: onboard systems, telematics devices or smartphone Apps, which collect speed and location data, allow easily to make reconstruction of criminal offences.