The Israeli Privacy Protection Authority issued recommended guidelines to stakeholders in the transportation industry on privacy and data protection in smart transportation services. The guidelines provide practical recommendations on privacy and data protection compliance in transit-related Big-Data applications, surveillance and traffic cameras, fare payment applications, and cars.
Among other recommendations, the guidelines endorse conducting privacy impact assessments when designing and developing new smart transportation services and adopting privacy-by-design principles. The guidelines go on to highlight the importance of transparency to data subjects, data subject access rights, purpose-limitation for data use, data security, and de-identification and pseudonymization as privacy-enhancing measures in Big-Data processing.
Among other issues, the guidelines emphasize the importance of offering passengers means to pay for transit fares anonymously – such as by unnamed fare cards or cash payment – rather than allowing payment only through apps that require identification.
CLICK HERE to read the guidance on data protection in transportation services (in Hebrew).