undefined | Better HN

0 pointsK0balt1y ago0 comments

I don’t know how that would work, since that data is the personal information of whoever is in the car at the time of collection, so I would guess that the applicant to get the info would have to substantiate that they were in the car at the time, regardless of the ownership of the car.

Or maybe just ownership of the car is enough? I kind of suspect it might not be though.

0 comments

2 comments · 2 top-level

robin_reala1y ago

Other way around. The person processing the data has a duty to make sure that they have a legal basis.

Rygian1y ago

The car belongs to the individual named Koen Van Hove (as stated in the blog). He holds GDPR rights to any location data that gets sent out.

Before that, if the system allowed for any correlation of location data to who was driving at that point, the exact same rights apply too for each involved driver.

Only if the data controller (the entity who made the choice to put a gps tracker on the car) took specific steps to ensure the location data could not be correlated to an individual (and can prove those steps were taken), is the data safe from GDPR.

j / k navigate · click thread line to collapse