{'fraction_non_alphanumeric': 0.015355086372360844, 'fraction_numerical': 0.0047984644913627635, 'mean_word_length': 5.51875, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
The Crossroads of Automotive Security and GDPR

Both cybersecurity and data protection are a mandatory requirement to be fulfilled in the automotive domain. Due to their nature, there is a tight relation between both disciplines. But while cybersecurity can build on well-defined engineering framework with the upcoming ISO/SAE 21434, data protection engineering is not yet well-established in the automotive industry and lacks processes tailored towards the automotive domain. With this paper, we analyse real world data protection incidents to identify common misconceptions in vehicles and systems critical for data protection in modern vehicles. From this foundation, we derive a concept to define technical-organizational measure for the automotive domain following established data protection from concepts of GDPR and SDM. To enable a successful application in the automotive industry, we depict two approaches for a cybersecurity and data-protection engineering approach to benefit from the close relation between the two disciplines.