The issue of data protection in the Internet of Things with particular regard to self-driving cars.

Autonomous vehicles are already on the market. As well as driving us, they will store and process large amounts of personal information. Users will be unaware of this, and the risks it generates. This information is personal data, and so is regulated by Reg. 679/2016/EU, commonly known as General Data Protection Regulation (GDPR). But is this European legislation sufficient to offer the necessary protection to users of self-driving cars? In particular, an important question is whether consent to the processing of personal data is really functional to achieve the objectives set out in the GDPR or whether further protection is required.