Autonomous Vehicles in a GDPR era: An International Comparison

Due to the extensive amount of data generated by an autonomous vehicle (AV) and the information flowing among AVs and through surrounding infrastructure, data governance legislation poses as a significant challenge especially in the perspective of their large-scale introduction. Regulation (EU) 2016/679, which is known as GDPR and entered into force in May 2018, has been a tipping point in personal data protection even in countries outside the European Union (EU). Although the majority of EU member States have already adapted their legal systems to its provisions, a few others are still on the process, and institutions and companies are challenged by the need to comply. This chapter conducts a mapping review of existing regulations in seven countries, namely Austria, Brazil, Greece, Italy, New Zealand, Slovakia and Switzerland, to assess policy challenges of AV testing and deployment focusing on the implications in terms of data protection. Potential areas of cooperation are identified, as well as evidence of divergent approaches, which are discussed in order to provide valuable suggestions for policy making at local, European and international level for AV testing and deployment.