Overview
ISO 24100:2010 - "Intelligent transport systems - Basic principles for personal data protection in probe vehicle information services" - defines the core privacy rules service providers must follow when collecting and processing probe data from vehicles. The standard is aimed at protecting personal data and the rights of probe data senders (vehicle owners and drivers) in probe vehicle information services, helping to build public trust and enable safe, interoperable intelligent transport systems (ITS).
Key topics and technical requirements
ISO 24100 focuses on privacy fundamentals rather than prescriptive technologies. Major technical topics and requirements explained in the standard include:
- Definitions and scope: Clear definitions for terms such as probe package, probe payload, probe message, probe data sender/collector, personal data, authentication data and encryption data.
- Reference architecture: Extends the probe-message architecture to cover entire probe packages (probe header + probe payload) transmitted from vehicles to land-based collectors, clarifying where personal data may appear in the data flow.
- Types of personal data: Covers direct personal data and contextual data that can become personally identifiable when combined with other sources; also addresses encryption and authentication data that can indirectly identify senders.
- Basic privacy principles: Adapts the OECD privacy framework into ITS-specific rules that service providers should observe:
- Collection limitation principle
- Data quality principle
- Purpose specification principle
- Use-limitation principle
- Security safeguards principle
- Openness principle
- Individual participation principle
- Accountability principle
- Threat awareness: Informative annex on threats to personal data in probe vehicle systems, emphasizing that technical measures alone cannot eliminate all risks and that policy is required.
Practical applications and who uses ISO 24100
ISO 24100 is practical guidance for organizations involved in ITS and vehicle probe data ecosystems, including:
- ITS service providers and probe data collectors implementing privacy-by-design for traffic monitoring, congestion analytics and travel-time services.
- Automotive OEMs and telematics vendors designing in-vehicle probe systems and probe headers/payload handling.
- System architects and integrators aligning probe data flows with privacy requirements and reference architectures (in conformity with ISO 22837).
- Data protection officers, regulators and policymakers assessing compliance and consumer transparency for probe-based services.
- Researchers and solution developers building interoperable, privacy-aware ITS applications.
Adopting ISO 24100 helps balance the value of probe vehicle data for transport analytics with strong personal data protection, improving public trust and facilitating wider deployment of intelligent transport systems.
Related standards
- ISO 22837 - Vehicle probe data for wide area communications (reference architecture for probe messages)
- ISO 21217 - Communications access for land mobiles (CALM) - Architecture
- OECD Guidelines - Protection of Privacy and Transborder Flows of Personal Data (privacy principles)
Open preview (PDF)Intelligent transport systems — Basic principles for personal data protection in probe vehicle information services
