MKB Juristen drafts custom legal documents
It is best not to cobble together or copy important contracts, terms and conditions, and other legal documents yourself. We help entrepreneurs on a budget with customized legal solutions, clear costs upfront, and practical explanations.
- Custom contracts, terms and conditions, and legal documents
- Budget-friendly and clear about the costs upfront
- Request a free consultation or a no-obligation quote
Modern lease cars store personal data — such as call, navigation, and app data — that falls under the GDPR. It is crucial to delete this data, particularly when returning or transferring a lease car, to ensure it does not fall into the wrong hands. Both the employer and the leasing company bear responsibility. Below, you can read how to properly manage data privacy regarding lease cars.
Personal data in the car
In modern cars, all kinds of data are stored: call history, navigation history, and even data from music apps. Much of this constitutes personal data and falls under the General Data Protection Regulation (GDPR). This means that it must be handled with care and may only be used for the purpose for which it was collected.
Both the employer and the leasing company bear responsibility in this regard. The employer would be well advised to inform themselves about how the leasing company handles this personal data and to intervene if necessary. Also, stipulate in the lease contract and the car policy how this data is handled.
Security: delete your data before submitting
As a driver, it is important to know what data is stored and how to secure it. Most cars offer the option to delete stored data. Do this before you return the car so that your data does not fall into the wrong hands.
The employer can mention this option in the user agreement or car policy. A checklist for returning the car, which includes the removal of personal data, is also useful.
Right to information and privacy by design
When buying or leasing a car, it is important to know what data the car or manufacturer collects. The GDPR gives you a right to information: manufacturers, importers, and dealers must inform you about which personal data is processed, for what purpose, how long it is retained, and with whom it is shared. You can often find this information on the manufacturer's website or in software updates.
In addition, the manufacturer must design and configure the vehicle in such a way that only necessary personal data is processed (privacy by design and by default). Be aware of what you share and be critical when manufacturers share data with others.
Transfer car to another employee
If a leased car is taken over by another employee, it is just as important to delete the personal data. In doing so, advise the following:
- to remove any linked app, including the account;
- to reset the vehicle to the default settings.
Frequently Asked Questions
Does the data in my lease car fall under the GDPR?
Yes, insofar as it concerns personal data (such as call and navigation data). This must be handled carefully and used only for the original purpose.
Do I need to delete my details before returning the lease car?
That is highly recommended. Delete the saved data and remove linked apps and accounts so that your data does not end up with the next user.
Who is responsible for privacy regarding lease cars?
Both the employer and the leasing company. The employer must inform themselves about the processing and intervene if necessary, and record this in the car policy.
Am I entitled to information about what my car collects?
Yes. Manufacturers, importers, and dealers must inform you about the personal data processed, the purpose, the retention period, and with whom it is shared.
Want to properly manage privacy regarding lease cars?
We help you with a GDPR-compliant car policy, user agreement, and checklist to ensure that personal data in lease cars is properly protected.
View our expertise in privacy and data protection or schedule a no-obligation consultation.
