Panel Highlight: Data Collection in EVs, Charging Infrastructure, and the New Cyber Risk

Описание: Modern vehicles—especially EVs—collect significantly more data than most drivers are aware of. What begins as telemetry for performance, diagnostics, and predictive maintenance quickly extends into GDPR-relevant areas such as geolocation, driving behavior, usage patterns, and even biometric data through in-cabin driver-monitoring cameras. Although manufacturers argue this data is needed for safety, optimization, and AI model training, the real concern is governance: whether drivers genuinely understand what is being collected, whether consent is truly optional, and how far this data travels beyond the vehicle. The issue is less about technology and more about integrity, transparency, and user control.

EVs also introduce a new cyber-physical attack surface through charging infrastructure. Charging stations are connected systems that exchange data with vehicles and backend platforms, making them potential targets for malware, data interception, or man-in-the-middle attacks. While modern battery management systems are designed to isolate critical functions and limit damage, the charging ecosystem still represents a new vector of risk—both for information security and operational safety. The question is not whether EVs are inherently less safe than combustion vehicles, but whether security-by-design, data minimization, and infrastructure resilience are being enforced strongly enough to justify the trust placed in connected mobility.

Damir Avdić, Embedded Software Engineer, HTEC Group

Miroslav Ilić, Cyber Security Engineer, Rimac Technology

Moderator: Marko Gulan, Cybersecurity Advisor to the Boards, vCISO, Risk Management, Astera Advisory