49. The expert from CITA presented GRVA-12-14/Rev.1, giving an overview of the content in GRVA-12-11/Rev.1 and GRVA-12-40, regarding remote access to in-vehicle data. He recalled various models and technical solutions presented to WP.29 and GRVA to enable such access, e.g. to third parties and for sovereign use cases such as Periodic Technical Inspection or Market Surveillance. He proposed a role for GRVA in that field, i.e. to prepare the design of vehicles so as to enable data collection, transmission and guaranty authenticity (no repudiation) of the data. He called on for the establishment of an ad hoc group that would perform a full assessment, possibly using the assessment template proposed in GRVA-12-40.

50. The expert from FIA explained that he was more in favour to have this matter addressed in Brussels by the European Commission. He explained that GRVA should not negatively influence the access to in-vehicle data because of UN Regulations Nos. 155 and 156.

51. The expert from ITU explained that all models listed in the document would create an unnecessary cyber security risk. He claimed that the role of regulations was to create the conditions under which the vehicle manufacturers should make data available as per the terms of that regulation.

52. The expert from OICA felt that this topic was relevant to national or regional levels and was not sure if the United Nations had a role to play in this. He explained, even though OICA was not fundamentally against a new group, the current workload associated with GRVA activities was already high and therefore explaining the defensive position expressed.

53. The expert from AAPC echoed the positions expressed by ITU and OICA.

54. The expert from CLEPA stated that there was a value for GRVA to host this conversation.

55. The expert from the United States of America supported the position expressed by AAPC. He felt that it was premature to create a group on this matter.

56. The expert from Germany proposed to distinguish two aspects of this matter: (a) the technical aspects related to data transmission and cyber security and (b) the national and regional laws on data privacy.

57. The expert from United Kingdom of Great Britain and Northern Ireland agreed that there were challenges related to national laws, but he also supported a harmonized approach on how to share data, as data would not only benefit the vehicle owner but also the whole transport system.

58. The expert from Austria supported a discussion at GRVA on this matter.

59. The expert from CITA welcomed the comments received and stated the importance of cyber security, of national and regional laws but also the need for harmonization activities at GRVA level to avoid the situation where potential national laws would lead to different technical solutions that would impair the aim of data sharing.

60. GRVA agreed to further discuss the role of GRVA with regards to remote access to in-vehicle data at its May 2022 session and consider approaching AC.2 and WP.29 in June 2022 for further guidance regarding future proceedings concerning that matter.