Digital Transformation and Data Protectionin Automotive Industry

Av. Özlem Kurt Karayürek, LL.M. – Av. Serter Öztürk, MCSE, MCT

The Digital Enterprise Wave

• Big Data & Ana lyt ics • In ternet o f Th ings • Art ific ia l In te l l igence

• 3D Pr inters • Indust ry 4 .0 . .

«..the "car of the future" will be intelligent, inter-connected and instrumented and will communicate , soc ia l i ze and co l laborate with other vehicles, traffic lights, parking bays, billboards, (self-tailored ads) and retailers..»

Title and Content Layout with List• Add your first bullet point here• Add your second bullet point here• Add your third bullet point here

• Adopt ing a new mindset @ • adding value means considering

customer experience, connectivity & mobility benefits.

• Age o f Do ing More w i th Less

Less Time + Less Cost + Less Error

= More . .

How the «Auto» Digitally Transforms• Digital Service Planning - Remote Diagnostics

• Digital Showroom Experience – «Showrooming»• Customers are using smart apps & gadgets when visiting

• «Info-tainment» : Customers expect their car to be an extension of their home, office, club etc.

• «..the fear of OEMs is that a car will become a smartphone on

wheels, with cars built around their entertainment value rather than their hardware value.. P. Fielden – IBM»

• Augmented Reality glasses create new driving experience:• New Gadgets create a «Want to have and «Want to Use»

feeling!

Today Connected World Presents New Security Issues

• significant new opportunities vs a set of security issues• requires new ways of thinking that can defend the customers against

attackers and privacy abuses• Executives list cyber-attack vulnerability as their most important privacy

concern  • Previously closed & secure dosed systems now offer remote access and

control• Press reports indicate hackers have already breached everything from

major corporate databases to thousands of everyday consumer devices

« . . Fo r the indust ry to succeed th i s t rans fo rmat ion , o rgan i za t ions and consumers need to be l ieve that i t s benefits ou twe igh i t s r i sks . . »

OEMs and dealers need to offer new consumer services

« . . t h e f e a r o f O E M s i s t h a t a c a r w i l l b e c o m e a s m a r t p h o n e o n w h e e l s , w i t h c a r s b u i l t a r o u n d t h e i r e n t e r t a i n m e n t v a l u e r a t h e r t h a n t h e i r h a r d w a r e v a l u e . . »

P. Fielden, IBM

You are already connected !

3 yet reported cases – OEMs have to adequetaly be prepared• Fiat Chrysler Automobiles recalled 1.4 million vehicles in US over

a vulnerability in dashboard computers that allowed hackers to disable the vehicle• White hat hackers broke into General Motor's Onstar system• White hat hackers plugged into a Tesla Model S to implant

malware into the car's central computer« . . es t imat ions t ransp i res that 104 mi l l i on cars w i l l have some form o f connec t i v i ty by 2025 . .»

LAW : Updates are needed to secure the risks coming

with the new revolution• This expedited timeline has created vehicles with advanced capabilities but few

protections!

• Governments are very sensitive about car safety and cyber security issues. For 2017, connectivity is already prioritized on lawmakers’ agendas. It is obvious that the automotive industry’s growth trajectory does not leave much time for reflection.

 •  Data privacy and cybersecurity will become a strong selling point for car buyers.

The key will be providing a smooth communication in an easy to understand way despite such protective features .

New categor ies o f fi les w i l l f o rm in l eg i s la t ions ; D r i ve r less /Autonomous Veh ic les and Crash Avo idance Techno log ies - i n case o f an acc ident - who w i l l be the fau l t y, who w i l l be pun ished: )

Five Principles of Data Protection in-the-car to which the Industry will Adhere

• Transparency• Customer Choice • ‘Privacy by Design’• Data Security • Proportionate Use of Data

« . .Eu ropean Automob i le Manufac tu rers ’ Assoc ia t ion (ACEA) has jus t pub l i shed the   industry ’s  st rategy paper on connect iv i ty , wh i ch addresses i s sues such as data pro tec t ion and access to  veh ic le data  by th i rd par t ies . . »

Automobile LawData Protection in the Car

• Geolocation Information, must be in the form of a warrant or court order or applicable statutory authority;

• Data Minimization, De-Identıification & Retention (..Covered Information should retain no longer than they determine necessary for legitimate business purposes..)

• Data security (.. commit to implementing reasonable measures to protect Covered Information against loss and unauthorized access or use..)

DATA: New Currency or New Headache ? -I

• COMPANIES ARE NOT TRANSPARENT OR RESPONSIVE• Over half of the organizations surveyed (57%) are not transparent about what they

do with personal information collected.• Most (%61) say they are not quick to respond to customer privacy complaints.

• COMPANIES ARE LAX ON REGULATORY COMPLIANCE• Many companies struggle to comply with increasing and evolving regulatory requirements

around the globe.• 6 out of 10 companies (61%) do not strictly enforce compliance regulations

DATA: New Currency or New Headache ? -II

• COMPANIES FAIL TO ENGAGE EMPLOYEES• The ePRl found a majority of companies fail to address the potential risk presented by

poor employee education. • Over half (57%) of companies think their employees do not understand the importance

of security and privacy. • 2 out of 3 companies surveyed do not proactively educate employees on privacy and

security issues

• COMPANIES FAIL TO PRIORITIZE• 53% Believe a data breach would not adversely impact company reputation • 60% Do not consider privacy and protection of personal information a corporate priority • 61% Don't have a high level executive managing privacy programs

The Current Situation in Turkey -I

The Current Situation in Turkey -II

Questions Answers

Thank You !