Join our IOPD Privacy Engineering & Technology Education Discussion (PETed) Series! The goal will be a discussion on how to solve a specific privacy problem or privacy related resource topic and the latest implementation techniques for some of the biggest challenges like synthetic data, zero-knowledge proofs, homomorphic encryption, and translucent databases.
The participants will be asked to bring questions related to the topic. Come back every quarter for a new discussion, new speaker, and new insights on the most cutting-edge privacy challenges!
Date & Time:
August 15th, 2025 @ 11:00 AM – 12:00 PM EDT (8:00 AM PDT / 5:00 PM CEST)
*Note that the quarterly guest speaker discussion takes place during the normal Sip & Chat time. The introductory presentation will be recorded to maximize discussion time. Please watch this recording before attending, Merry will do a brief recap but will not go in depth.
Topic:
Cars — IoT “Endpoints-on-Wheels”
Synopsis:
Modern vehicles have evolved far beyond transportation—they’re now sophisticated IoT endpoints collecting vast amounts of personal data. We will discuss data security and privacy risks modern cars pose to individuals and companies — from data leakage to 4th amendment exception; device-centric universal opt out mechanisms; car-specific IoT recommendations from the IoT Advisory Board to the US Dept of Commerce; Louisiana’s new law to disable connected app tracking & the “Disconnect by Reset Protocol”; and more.
Problem Statement:
Modern vehicle systems are often unmanaged, unencrypted endpoints that collect, process, share, and retain sensitive information. For company leaders, when employees connect devices, authenticate to services, or utilize navigation and communication features, these systems create data repositories typically outside standard security controls and monitoring capabilities. Not including vehicles in your asset management policies is akin to handing unencrypted hard drives with chock-fulls of personal and corporate data to random third parties. Let’s discuss ways to better protect companies and individuals data privacy & security in this talk.
Related Privacy Enhancing Technologies (PETs):
Let’s discuss the administrative, technical, and physical safeguards we apply to other devices like laptops and smartphones…and how we can apply these in the vehicle context.
Pre-Discussion Resources:
- Recorded Introduction: https://instituteofprivacydesign.org/wp-content/uploads/2025/08/IOPD_MerryMarwig_08152025_Intro-Only.mp4
- Whitepaper: “Endpoints-on-Wheels: Protecting Company & Employee data in Cars”
- Whitepaper: “Deleting Personal Data from Vehicles: A GDPR Obligation for Auto Businesses“
- Whitepaper: FORTHCOMING (pls remind me after July 9th)…this one is going to be a page-turner!
- Report: Internet of Things (IoT) Advisory Board Report, Oct 2024 — particularly page 94 and 95 on car privacy labelling recommendations (note, the amazing, wonderful data-diva Debbie Reynolds served on this board!).
- Resource: vehicleprivacyreport.com <– check out a summary of your OEM’s data practices along with other auto providers
- Resource: Opt Out Code <– a universal opt out mechanism for devices…from smartphones, to laptops, tablets, routers, and cars!
- News article: Louisiana new law re: disabling vehicle tracking
- Documentation: Disconnect by Reset (page 13)
Speaker:
Merry Marwig
Merry Marwig is a pro-consumer, pro-business privacy advocate who is optimistic about what data privacy rights mean for everyday people—and for the companies they do business with. At Privacy4Cars — the world’s leading authority on vehicle privacy and data security — she helps protect driver and passengers’ personal data while creating business opportunities for automotive companies. Merry holds three IAPP certifications (FIP, CIPP/US, CIPM), is certified in Logical AI Governance, and earned a master’s degree from the University of Illinois at Urbana-Champaign.
Moderator:
Kimberly Lancaster
Trusted Privacy Advisor who Guides Data Protection, Drives Operational Excellence, and Leads with Integrity by aligning with InfoSec, Security, GRC, Compliance, and Data Governance. Board Member, Speaker, and Author.
The IOPD Privacy Engineering & Technology Education Discussion (PETed) Series is a members-only event, but we welcome first time attendees as our guests. Come check it out! If you are already a member, subscribe to our PETed Mailing List for announcements and monthly invitations!