Challenge
An autonomous vehicle is being tested on public roads. In operation, personal data is collected continuously. At the same time, regulators require in-service monitoring: performance, safety and reliability on public roads must be monitored and incidents reported to authorities.
Solution
Data protection
- Process and actor models of data collection in operation.
- Review and documentation of GDPR-relevant areas, advice at process and business level.
Monitoring and reporting duties
- Review of regulatory documents and requirements elicitation.
- Process flow for in-service monitoring and reporting, detailed processes for data recording in the vehicle project.
- Stakeholder identification and project coordination.
Result
- Clarity on what the regulation actually requires - and which internal processes it takes.
- GDPR-critical topics visible early instead of right before launch.
- Structured, up-to-date documentation and recommendations for data analysis and reporting.
High-risk AI systems need the same discipline: in-service monitoring, incident reporting, documentation.
* Case study: we did the concept work
