The Interface of Privacy and Data Security in Automated City Shuttles: The GDPR Analysis
Open accessAbstract
The fast evolution and prevalence of driverless technologies has facilitated the testing and deployment of automated city shuttles (ACSs) as a means of public transportation in smart cities. For their efficient functioning, ACSs require a real-time data compilation and exchange of information with their internal components and external environment. However, that nexus of data exchange comes with privacy concerns and data protection challenges. In particular, the technical realization of stringent data protection laws on data collection and processing are key issues to be tackled within the ACSs ecosystem. Our work provides an in-depth analysis of the GDPR requirements that should be considered by the ACSs’ stakeholders during the collection, storage, use, and transmission of data to and from the vehicles. First, an analysis is performed on the data processing principles, the rights of data subjects, and the subsequent obligations for the data controllers where we highlight the mixed roles that can be assigned to the ACSs stakeholders. Secondly, the compatibility of privacy laws with security technologies focusing on the gap between the legal definitions and the technological implementation of privacy-preserving techniques are discussed. In face of the GDPR pitfalls, our work recommends a further strengthening of the data protection law. The interdisciplinary approach will ensure that the overlapping stakeholder roles and the blurring implementation of data privacy-preserving techniques within the ACSs landscape are efficiently addressed.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
GDPR compliance and data privacy are critical considerations in deploying passenger counting systems.
“GDPR compliance and data privacy are critical considerations in deploying passenger counting systems [84,86].”
From A Review of Passenger Counting in Public Transport Concepts with Solution Proposal Based on Image Processing and Machine Learning (2024) · cites this paper as [84]
GDPR mandates strict guidelines on data handling practices to safeguard individuals' privacy rights and prevent unauthorized access or misuse of personal data.
“This regulation mandates strict guidelines on data handling practices to safeguard individuals' privacy rights and prevent unauthorized access or misuse of personal data [84].”
From A Review of Passenger Counting in Public Transport Concepts with Solution Proposal Based on Image Processing and Machine Learning (2024) · cites this paper as [84]
Cites
Unique in the Crowd: The privacy bounds of human mobility
de Montjoye, Y.-A., Hidalgo, C. A., Verleysen, M., & Blondel, V. D. (2013) · Scientific Reports · doi:10.1038/srep01376 · Cited by 1,645 · see citing works
A Survey on Recent Advances in Vehicular Network Security, Trust, and Privacy
Lu, Z., Qu, G., & Liu, Z. (2019) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2018.2818888 · Cited by 608 · see citing works
Taeihagh, A., & Lim, H. S. M. (2019) · Transport Reviews · doi:10.1080/01441647.2018.1494640 · Cited by 601 · see citing works
Recent advances in connected and automated vehicles
Elliott, D., Keen, W., & Miao, L. (2019) · Journal of Traffic and Transportation Engineering (English Edition) · doi:10.1016/j.jtte.2018.09.005 · Cited by 256 · see citing works
Attacks and defences on intelligent connected vehicles: a survey
Dibaei, M., Zheng, X., Jiang, K., Abbas, H., Liu, S., Zhang, Y., Xiang, Y., & Yu, S. (2020) · Digital Communications and Networks · doi:10.1016/j.dcan.2020.04.007 · Cited by 221 · see citing works
Secure authentication and privacy-preserving techniques in Vehicular Ad-hoc NETworks (VANETs)
Manivannan, D., Moni, S. S., & Zeadally, S. (2020) · Vehicular Communications · doi:10.1016/j.vehcom.2020.100247 · Cited by 210 · see citing works
Lim, H. S. M., & Taeihagh, A. (2018) · Energies · doi:10.3390/en11051062 · Cited by 200 · see citing works
Gabay, D., Akkaya, K., & Cebe, M. (2020) · IEEE Transactions on Vehicular Technology · doi:10.1109/tvt.2020.2977361 · Cited by 155 · see citing works
Differential Privacy in Practice: Expose your Epsilons!
Dwork, C., Kohli, N., & Mulligan, D. K. (2019) · Journal of Privacy and Confidentiality · doi:10.29012/jpc.689 · Cited by 147 · see citing works
Privacy implications and liability issues of autonomous vehicles
Collingwood, L. (2017) · Information & Communications Technology Law · doi:10.1080/13600834.2017.1269871 · Cited by 129 · see citing works
State of the Art of Automated Buses
Ainsalu, J., Arffman, V., Bellone, M., Ellner, M., Haapamäki, T., Haavisto, N., Josefson, E., Ismailogullari, A., Lee, B., Madland, O., et al. (2018) · Sustainability · doi:10.3390/su10093118 · Cited by 127 · see citing works
A Comparative Study of Data Anonymization Techniques
Murthy, S., Bakar, A. A., Rahim, F. A., & Ramli, R. (2019) · IEEE International Conference on Big Data Security on Cloud, IEEE International Conference on High Performance and Smart Computing, and IEEE International Conference on Intelligent Data and Security (BigDataSecurity/HPSC/IDS) · doi:10.1109/bigdatasecurity-hpsc-ids.2019.00063 · Cited by 103 · see citing works
Achieving Personalized $k$-Anonymity-Based Content Privacy for Autonomous Vehicles in CPS
Wang, J., Cai, Z., & Yu, J. (2019) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2019.2950057 · Cited by 101 · see citing works
Privacy and Integrity Considerations in Hyperconnected Autonomous Vehicles
Karnouskos, S., & Kerschbaum, F. (2017) · Proceedings of the IEEE · doi:10.1109/jproc.2017.2725339 · Cited by 82 · see citing works
Differential Privacy in Deep Learning: An Overview
Ha, T., Dang, T. K., Dang, T. T., Truong, T. A., & Nguyen, M. T. (2019) · International Conference on Advanced Computing and Applications (ACOMP) · doi:10.1109/acomp.2019.00022 · Cited by 60 · see citing works
Pattinson, J.-A., Chen, H., & Basu, S. (2020) · Humanities and Social Sciences Communications · doi:10.1057/s41599-020-00644-2 · Cited by 49 · see citing works
Vokinger, K. N., Stekhoven, D. J., & Krauthammer, M. O. (2020) · The Journal of Law Medicine & Ethics · doi:10.1177/1073110520917025 · Cited by 44 · see citing works
Preserving Location Privacy of Connected Vehicles With Highly Accurate Location Updates
Lim, J., Yu, H., Kim, K., Kim, M., & Lee, S.-B. (2016) · IEEE Communications Letters · doi:10.1109/lcomm.2016.2637902 · Cited by 44 · see citing works
Exploring data protection challenges of automated driving
Mulder, T., & Vellinga, N. (2021) · Computer law & security review · doi:10.1016/j.clsr.2021.105530 · Cited by 39 · see citing works
Limits of location privacy under anonymization and obfuscation
Takbiri, N., Houmansadr, A., Goeckel, D., & Pishro-Nik, H. (2017) · IEEE International Symposium on Information Theory (ISIT) · doi:10.1109/isit.2017.8006631 · Cited by 36 · see citing works
Autonomous Vehicles: Data Protection and Ethical Considerations
Krontiris, I., Grammenou, K., Terzidou, K., Zacharopoulou, M., Tsikintikou, M., Baladima, F., Sakellari, C., & Kaouras, K. (2020) · ACM Computer Science in Cars Symposium (CSCS) · doi:10.1145/3385958.3430481 · Cited by 35 · see citing works
GDPR bypass by design? Transient processing of data under the GDPR
George, D., Reutimann, K., & Tamò‐Larrieux, A. (2019) · International Data Privacy Law · doi:10.1093/idpl/ipz017 · Cited by 31 · see citing works
Ribeiro, S. L., & Nakamura, E. T. (2019) · IEEE International Conference on Bioinformatics and Bioengineering (BIBE) · doi:10.1109/bibe.2019.00169 · Cited by 30 · see citing works
Autonomous vehicles in a GDPR era: An international comparison
Costantini, F., Thomopoulos, N., Steibel, F., Curl, A., Lugano, G., & Kováčiková, T. (2020) · Advances in transport policy and planning · doi:10.1016/bs.atpp.2020.02.005 · Cited by 29 · see citing works
Sangeetha, S., & Sadasivam, G. S. (2019) · Springer eBooks · doi:10.1007/978-3-030-10543-3_2 · Cited by 26 · see citing works
zk-AuthFeed: How to Feed Authenticated Data into Smart Contract with Zero Knowledge
Wan, Z., Guan, Z., Zhou, Y., & Ren, K. (2019) · IEEE International Conference on Blockchain (Blockchain) · doi:10.1109/blockchain.2019.00020 · Cited by 23 · see citing works
Löbner, S., Tronnier, F., Pape, S., & Rannenberg, K. (2021) · ACM Computer Science in Cars Symposium (CSCS) · doi:10.1145/3488904.3493380 · Cited by 17 · see citing works
A Data Masking Guideline for Optimizing Insights and Privacy Under GDPR Compliance
Tachepun, C., & Thammaboosadee, S. (2020) · doi:10.1145/3406601.3406627 · Cited by 16 · see citing works
Analyzing and Preventing Data Privacy Leakage in Connected Vehicle Services
Li, H., Ma, D., Medjahed, B., Kim, Y. S., & Mitra, P. (2019) · SAE International Journal of Advances and Current Practices in Mobility · doi:10.4271/2019-01-0478 · Cited by 10 · see citing works
Addressing the Failure of Anonymization
Brasher, E. (2019) · Columbia Business Law Review · doi:10.7916/cblr.v2018i1.1217 · Cited by 10 · see citing works
The Robomobility Revolution of Urban Public Transport
Mira-Bonnardel, S., Antonialli, F., & Attias, D. (2021) · Transportation research, economics and policy · doi:10.1007/978-3-030-72976-9 · Cited by 9 · see citing works
A Classification of non-Cryptographic Anonymization Techniques Ensuring Privacy in Big Data
Ouazzani, Z. E., & Bakkali, H. E. (2020) · International Journal of Communication Networks and Information Security (IJCNIS) · doi:10.54039/ijcnis.v12i1.4401 · Cited by 7 · see citing works
Balboni, P., Botsi, A., Francis, K., & Taborda Barata, M. (2020) · Zenodo (CERN European Organization for Nuclear Research) · doi:10.5281/zenodo.7291692 · Cited by 7 · see citing works
The GDPR and Its Application in Connected Vehicles—Compliance and Good Practices
Vallet, F. (2019) · Lecture notes in mobility · doi:10.1007/978-3-030-14156-1_21 · Cited by 6 · see citing works
On the Anonymization of Differentially Private Location Obfuscation
Kawamoto, Y., & Murakami, T. (2018) · International Symposium on Information Theory and its Applications · doi:10.23919/isita.2018.8664351 · Cited by 6 · see citing works
Location Data, Personal Data Protection and Privacy in Mobile Device Usage : An EU Law Perspective
Bu‐Pasha, S. (2018) · Työväentutkimus Vuosikirja · Cited by 6 · see citing works
A Succinct Model for Re-identification of Mobility Traces Based on Small Training Data
Murakami, T. (2018) · International Symposium on Information Theory and its Applications · doi:10.23919/isita.2018.8664346 · Cited by 4 · see citing works
Handing Over the Wheel, Giving Up Your Privacy?
Mulder, T., & Vellinga, N. (2019) · University of Groningen research database (University of Groningen / Centre for Information Technology) · Cited by 1 · see citing works
Flagged first, then by citations
2 of the 41 references couldn’t be matched to a known paper.
Cited by
Sorted by citations
Identity-Based Authentication in VANETs: A Review
Manasrah, A. M., Yaseen, Q. M., Al-Aqrabi, H., & Liu, L. (2025) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2025.3528932 · Cited by 49 · see citing works
Applications of Deep Reinforcement Learning for Home Energy Management Systems: A Review
Latoń, D., Grela, J., & Ożadowicz, A. (2024) · Energies · doi:10.3390/en17246420 · Cited by 44 · see citing works
Benyahya, M., Collen, A., & Nijdam, N. A. (2023) · Transportation Engineering · doi:10.1016/j.treng.2023.100205 · Cited by 20 · see citing works
Self-citationBenyahya, M., Lenard, T., Collen, A., & Nijdam, N. A. (2023) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3600160.3605084 · Cited by 19 · see citing works
Self-citationRadovan, A., Mršić, L., Đambić, G., & Mihaljević, B. (2024) · Eng · doi:10.3390/eng5040172 · Cited by 24 · see citing works
Diba, D. S., Gore, N., & Pulugurtha, S. S. (2025) · Future Transportation · doi:10.3390/futuretransp5010009 · Cited by 15 · see citing works
Autonomous and Electric Vehicles in Urban Living Labs: Smart Mobility Strategies for the Future
Mendoza-Armenta, A. A., Felix-Herran, L. C., Silvestri, B., Solano, A. C. V., Tudón-Martínez, J. C., Roccotelli, M., & Lozoya-Santos, J. D. J. (2024) · Energies · doi:10.3390/en17215399 · Cited by 12 · see citing works
TARA 2.0 for Connected and Automated Vehicles
Benyahya, M., Collen, A., Lenard, T., & Nijdam, N. A. (2025) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2025.3574638 · Cited by 11 · see citing works
Self-citationNolte, B., Stein, A., & Vietor, T. (2025) · Applied System Innovation · doi:10.3390/asi8020045 · Cited by 9 · see citing works
An Automotive Reference Testbed with Trusted Security Services
Lenard, T., Genge, B., Haller, P., Collen, A., & Nijdam, N. A. (2023) · Electronics · doi:10.3390/electronics12040888 · Cited by 5 · see citing works
Self-citationLegal Implications for Autonomous Vehicles Mobility in Future Smart Cities
Patel, A. R., Roscia, M., & Vučinić, D. (2023) · IEEE International Smart Cities Conference (ISC2) · doi:10.1109/isc257844.2023.10293522 · Cited by 5 · see citing works
Cybersecurity and Data Privacy Certification Gaps of Connected and Automated Vehicles
Benyahya, M., Collen, A., & Nijdam, N. A. (2023) · Transportation research procedia · doi:10.1016/j.trpro.2023.11.468 · Cited by 2 · see citing works
Self-citationWandenkolk, I. C., Winter, S. M., Stetten, N. E., & Classen, S. (2025) · World Electric Vehicle Journal · doi:10.3390/wevj16060293 · Cited by 2 · see citing works
Blockchain-Powered Airlines: Enhancing Security, Transparency, and Efficiency in Aviation
Bonkra, A., Dhiman, P., Kaur, A., Kaur, G., & Sharma, S. (2025) · Information systems engineering and management · doi:10.1007/978-3-031-95341-5_6 · Cited by 1 · see citing works
Bolzmacher, C., Panëels, S., Louison, C., Hidalgo, C., Marcano, M., Diaz, S. E., & Anastassova, M. (2026) · Frontiers in Mechanical Engineering · doi:10.3389/fmech.2025.1677376 · Cited by 1 · see citing works
Governance Impact Assessment, Regulatory Recommendations and Challenges
Binz, L. (2024) · Contributions to management science · doi:10.1007/978-3-031-61681-5_16
Cybersecurity and Data Privacy: Stakeholders’ Stand on Regulations and Standards
Nijdam, N. A., Benyahya, M., & Collen, A. (2024) · Contributions to management science · doi:10.1007/978-3-031-61681-5_6
Self-citationRaheman, F., Bhagat, T., & Batalla, A. (2024) · Journal of Transportation Technologies · doi:10.4236/jtts.2024.144027
Khan, B. A., Shariff, W., Coyne, R., Farooq, M. A., & Corcoran, P. (2025) · SSRN Electronic Journal · doi:10.2139/ssrn.5767228
Cybersecurity and Regulatory Compliance in Smart Cities: A Comprehensive Review
Παπαϊωάννου, Μ., Valcheva, M. G., Gelgi, M., Islami, L., & Sommer, L. W. (2026) · Smart Cities · doi:10.3390/smartcities9050076
- Authors
- Benyahya, M., Kechagia, S., Collen, A., & Nijdam, N. A.
- Affiliations
- University of Geneva (CH)
- École Polytechnique Fédérale de Lausanne (CH)
- Corresponding author
- Benyahya, Meriem
- Venue
- Applied Sciences
- Publisher
- MDPI AG
- Published
- 2022-04-27
- Volume
- 12
- Issue
- 9
- Pages
- 4413
- ISSN
- 2076-3417 (ISSN-L)
- OpenAlex
- W4224985615
- Cited by
- 20
- References
- 41
- Citations by year
- 2026: 2 · 2025: 7 · 2024: 6 · 2023: 5
- FWCI
- 27.80
- Type
- journal article
- Language
- en
- Open access
- gold
- doi.org
- Licence
- Locations
- Applied Sciences (publishedVersion, cc-by)
- Archive ouverte UNIGE (University of Geneva) (publishedVersion, other-oa)
- Zenodo (CERN European Organization for Nuclear Research) (submittedVersion, cc-by)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
- Archive ouverte UNIGE (University of Geneva) (submittedVersion, cc-by)
- Funders
- European Union’s Horizon 2020 Research and Innovation Programme through AVENUE project (No. 769033, No. 833742, No. 875530)
- Topics
- Social Sciences › Law › Digitalization, Law, and Regulation
- Social Sciences › Sociology and Political Science › Privacy, Security, and Data Protection
- Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
- Keywords
- autonomous vehicles, GDPR, data protection, privacy, smart cities, public transport, data processing principles, data subject rights, data controllers, privacy-preserving techniques, data security, stakeholder roles
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
