UK: Second-hand connected car data drama could be a GDPR minefield

What are the implications under GDPR of a previous owner retaining access to data and control of a connected car after it is sold on?

Although El Reg‘s initial story on the topic focused on the experience of two Jaguar Land Rover owners and the car maker’s response, it has become clear this is an industry-wide issue and cars from BMW, Mercedes-Benz and Nissan are also affected. Previous owners still have access to data and controls even after the car has been sold on.

Connected cars have remote-control climate systems and doors, can call breakdown services, record destination details, and much more. This information is typically available through an online account and associated mobile apps.