EU DATA ACT

The EU Data Act (Regulation (EU) 2023/2854) is a European regulation that sets harmonized rules
on how data generated by connected products and digital services can be accessed, shared and
used. Its purpose is to give the User greater control over the data produced by your vehicle, while
ensuring transparency, fairness and security in the way these data are managed.

Who is a User?

A User is who has a stable right to use the connected vehicle (e.g. the owner, or a person to whom
the right to use it has been contractually transferred, for example by a rent or lease contract, or a
person who has signed the connected service contract or activated the account in an official Stellantis brand app or web).

Your rights as a vehicle Use

When you use a connected Stellantis vehicle, data are generated and transmitted in real time.
Under the EU Data Act, you have the right to:
• access the data generated by your vehicle in a standard, usable format (such as JSON or other compatible formats);
• be informed about which data are collected, how they are used, and for what purposes;
• decide whether to share your data with third parties, such as workshops, insurers or digital service providers;
• manage your data access requests through Stellantis’ dedicated digital channels

Data generated by connected vehicles

Depending on your connected vehicle use, the onboard device may collect and transmit:
• diagnostic data: engine temperature, oil level, error codes;
• usage data: mileage, speed, driving time, use of ADAS systems;
• location data: when GPS is enabled;
• interaction data: navigation, voice requests, use of connected services;
• event data: detected collisions or malfunctions.
The volume of data varies depending on how the connected vehicle is used

Purposes of data processing 

Stellantis processes vehicle data exclusively in order to:
• deliver and manage the connected services you activate;
• comply with legal obligations;
• improve the quality and performance of vehicles and services;
• analyse aggregated and anonymised data for statistical or product development purposes.

How can you access your data?

• Consumers (B2C): Consumer users can access their data through the Stellantis Privacy Portal, in the “Right of Access” section;

•  Business customers (B2B): Business users (fleets, leasing companies, commercial clients) must submit their data access requests via the dedicated Mobilisights channel Mobilisights Contact Form.

Can third parties access your data?

Yes, but only if you authorise it. You may allow a third party (for example a workshop, insurer or service provider) to access your data, under the conditions set by the Data Act.

How long do you have access to your data?

• You can access the data stored on Stellantis servers according to Stellantis Group’s data retention policies.

Does the Data Act also apply to used vehicles?

Yes. Both new and second-hand connected vehicles are covered. 

Complaints

If you believe your rights under the Data Act are not respected, you can file a complaint with the competent authority, in line with Article 37 of the regulation