New privacy and data rules: implications for the auto industry

Cyber security is giving vehicle manufacturers and suppliers a headache this month as two of the three largest markets introduce new rules on privacy and data management. The EU’s General Data Protection Regulation (GDPR) entered into force on 25 May, and China’s Personal Information Security Specification (Specification) has been effective since 1 May.

Each regulation comes with distinct political and regulatory risks, underlining that automotive companies will need to spend more time, and money, ensuring their cyber security, data management and privacy policies meet regulatory requirements and enforcement trends.