Data privacy and security trade-off survey

What type of organisation do you work for?

Single option

• Public Transport Authority: ministries, municipalities, regions, metropolitan areas
• Public Transport Operators: buses, tramways, metro, regional trains
• Micro-mobility operators: bikes, e-bikes, mopeds, scooters
• Car sharing operators
• Car pooling operators
• Public or private investor
• Mobility Consultancy
• Automotive Original Equipment Manufacturer (OEM)
• Mobility service company
• Other

What is your job title?

Single option

• CEO/General Management/Elected
• Communication Director/Manager
• HR Director/Manager
• Innovation Director/Manager
• Mobility Expert/Advisor
• Chief Technical Officier / Head of IT
• Mission or Project Director/Manager/Consultant
• Procurement/Supplier Management
• Sales
• Corporate Social Responsibility Manager
• Student
• Other

How many years have you worked in this position or in this sector?

Single option

• Up to 5 years
• Between 6 and 10 years
• More than 10 years

In which area are you mostly active?

Single option

• At country level
• At regional level
• At city / community level
• You don't know
• Not concerned

What is the size of your urban area?

Single option

• Population of 500 000 or less
• Population between 500 000 and 1 million
• Population between 1 and 5 million
• Population between 5 and 10 million
• You don’t know
• Not concerned

What is the number of employees in your company or organisation (all sites combined)?

Single option

• Between 1 and 9 employees
• Between 10 and 49 employees
• Between 50 and 249 employees
• 250 employees or more
• You don't know

As part of your job, how central is the theme of cybersecurity?

Single option

• It is central in your position
• It is part of your role but not central
• You would not say it is part of your role, but you are regularly exposed / educated to this topic
• You know about it, but from a previous position
• You have limited or inexistent knowledge on the topic
• You don't know

And as part of your job, how central is the theme of connected automated mobility?

Single option

• It is central in your position
• It is part of your role but not central
• You would not say it is part of your role, but you are regularly exposed / educated to this topic
• You know about it, but from a previous position
• You have limited or inexistant knowledge on the topic
• You don’t know

In which of the following situations would you consider it acceptable for a CAV to access personal data for security purposes?

Single option

• To prevent unauthorized access to the vehicle
• To detect potential threats in real-time (e.g., intrusions)
• Only in emergency situations (e.g., accident detection)
• I do not find it acceptable in any situation

Which type of data do you believe should be given the highest level of protection against cyber threats in CAVs?

Multiple option

• Location and trip data
• Driver identity information
• Biometric or health data (e.g., driver heart rate)
• Driving behavior patterns

How comfortable would you be with real-time monitoring of vehicle data if it enhances security?

Single option

• Very comfortable
• Somewhat comfortable
• Uncomfortable
• Very uncomfortable

What personal information would you most want limited access to by CAV systems?

Single option

• Trip history
• Biometric or health data
• Location and movement data
• I am equally concerned about all of the above

In what type of scenarios would you consider data collection by a CAV invasive?

Single option

• When data is collected without clear consent
• When data is shared with third parties
• When data is used for non-driving-related purposes
• I would not consider any of these scenarios invasive

If you could control data sharing in CAVs, what restriction would be your top priority?

Single option

• Limit data collection to driving safety only
• Limit data access to the driver and vehicle manufacturer
• Allow data sharing only with my explicit approval
• No restrictions needed

If you had to prioritize, would you prefer a CAV that emphasizes security or privacy?

Single option

• Stronger security with some privacy tradeoffs
• Stronger privacy with some security tradeoffs
• A balanced approach, even if it’s less efficient
• Unsure

In which scenario would you support prioritizing security over privacy in CAVs?

Single option

• To prevent accidents or detect threats in real-time
• For emergency response or rescue situations
• For protecting the driver’s and passengers' identity
• I don’t support prioritizing security over privacy

How much transparency would you expect from CAV providers about how they balance security and privacy?

Single option

• Detailed, with full explanations of data use
• Summary information on what data is collected and why
• Minimal transparency is needed; I trust the provider
• I do not expect transparency as long as security is prioritized

If data is anonymized, would you be willing to share your data with autonomous vehicle manufacturers?

Single option

• Yes
• No

If CAVs could anonymize data effectively without compromising security, would you find this an acceptable solution?

Single option

• Yes, fully acceptable
• Yes, somewhat acceptable
• No, I have concerns about effective anonymization
• No, anonymization does not address my privacy concerns

How confident are you in the ability of autonomous vehicle manufacturers to protect your personal data?

Single option

• Very confident
• Moderately confident
• Slightly confident
• Not confident

Would knowing that a CAV has strong data encryption and intrusion detection systems impact your trust in the vehicle?

Single option

• Yes, it would significantly increase my trust
• Yes, it would somewhat increase my trust
• No, it would not impact my trust
• No, it would make me question privacy

Would you still use a CAV if you had limited control over your personal data?

Single option

• Yes, if it significantly improves security
• Yes, but only with basic control over data sharing
• No, I would need full control over data access
• No, I would not use it without control

If you were assured that your personal data would remain within the CAV and not be shared with the manufacturer, would you be willing to share your personal data with the CAV?

Single option

• Yes, I would be willing to share my data
• No, I would not be willing to share my data
• I’m unsure and would need more information
• It depends on the specific use case for the data