Working Party on Automated and Connected Vehicles
← GRVA 24
GRVA 26 →
18-22 May  · Montreal
Agenda All Documents Formal Informal Report
Originally scheduled for 1-5 June in Geneva.
GRVA/25 Automated/Connected Vehicles: Report of the 25th (May 2026) session
UNECE: .pdf | .docx GAR: .pdf | .docx
← Agenda Item 5. (a) Agenda Item 5. (c) →
5. (b) Data protection and privacy-by-design

35. During the consultations:

  1. The expert of FIA presented information (GRVA-25-12) on its activities regarding on-board authentication and authorization in the context of this agenda item. The expert from China recalled a proposal to address those aspects of on-board data access and data security that fall within the remit of WP.29 and volunteered to support activities in that field. The expert from ITU proposed bringing the topic to ITC in order to determine where vehicle connectivity issues should be addressed within ITC. The experts recalled that WP.29 was responsible for the programme of work and proposed continuing to hear updates from FIA on its activities. The expert from CLEPA commented that the issue was fundamentally one of trust and encouraged experts to identify ways to establish trust worldwide in this context. The expert from FIA confirmed that trust was indeed a central issue and volunteered to provide an interim report to GRVA in September 2026. The expert from the United Kingdom of Great Britain and Northern Ireland proposed continuing discussions on this topic, focusing on how to establish an appropriate mechanism to address it.
  2. The expert from China presented a status report (GRVA-25-39) on China’s Vehicle Data Security Standard and proposals for further GRVA initiatives. The presentation focused on Chinese vehicle data security requirements, provided an overview of the main differences between cyber security under UN Regulation No. 155 and data security, listed the principal regulations and their relationship to data security, showcased DSSAD as a relevant example, highlighted recent developments in vehicle data security, and provided suggestions for GRVA’s consideration. The expert from Canada noted that the proposal would have implications for customer privacy and that WP.29 might not be the only appropriate forum for discussing the matter. He suggested presenting the topic to WP.29. He stated that he would support further work only if it focused on vehicle security issues rather than national security issues. The expert from France inquired about possible interactions with FIA’s activities. GRVA invited the experts to present the topic to WP.29.

36. GRVA noted the presentation by FIA (GRVA-25-12) on the status of discussion on onboard authentication/authorization to access vehicle data.

37. GRVA noted the presentation by China on Vehicle Data Security Standard and proposal for further GRVA initiatives (GRVA-25-39).