[chang2]

Hello,

this info is from bmw:


========
Avoidance of data protection breaches


Dear Sir/Madam,

In light of recent events, we are writing to inform you of potential data protection breaches.
We are receiving a rising number of customer complaints, in which a potentially unauthorised release of vehicle data to third parties, particularly service history and repair history, is being cited. The background is information on vehicle data that is being released to unauthorised persons without any proof of legitimacy. Legally, this vehicle data is to be qualified as personal data and subject to the legal data protection requirements. Vehicle data may therefore only be passed onto third parties if there is a legal basis for doing so or if the vehicle owner has provided his express permission to do so. This also applies for the evaluation of accidental damage.
We are obligated by our responsible data protection supervisory authority, the Bavarian Board for Data Protection Supervision, to document every request for vehicle data in order to prevent any data protection breaches such as the unauthorised release of vehicle data, and to clarify and sanction any such cases. Such a data protection breach may also result in official measures including the imposition of penalties or fines.
Please ensure that vehicle data is only passed onto legitimate persons in accordance with the legislation.

======