[cnorthwood]

would driving data/telemetry be categorised as personal data under GDPR? I assume cars could have multiple drivers so unless there's a clear way of deriving the person from the data itself it might be classed as anonymous and therefore not in scope

[ifjimelse]

Yes it likely would be, if it’s timestamped log data. Even if there are multiple drivers, the data recorded still relates “to an identified or identifiable individual”. Simply knowing who was driving the car when, which shouldn’t be difficult if it’s your car, makes the specific individual identifiable.

Not having individuals’ names / email addresses etc. in a dataset of multiple people, doesn’t mean that the data is anonymous. See for example https://www.nytimes.com/interactive/2019/12/19/opinion/locat...