What is the best way to address privacy risks in the context of connected cars? Is data minimization compatible with assisted driving? What is the meaning of “Core Vehicle Data”?

Mark Jaffe leads the Rivian ethics, compliance and privacy program. This includes ethical culture, compliance oversight, privacy, and investigations. 

Prior to joining Rivian, Mark was Senior Vice President for Privacy at Teleperformance, a global business process outsourcer with over 400,000 employees operating in over 80 countries, spending almost two years in Singapore managing privacy issues in the Asia Pacific region. He has also dealt with data protection compliance in Europe, Middle East, and Africa.  Prior to that, Mark spent 17 years at AT&T in global privacy roles as well as global compliance and ethics roles.

Our guest is a frequent speaker on a variety of topics related to privacy compliance and data ethics. Mark earned his B.A., cum laude, from Duke University and his J.D., cum laude, from Northwestern University. 

References:

• Mark Jaffe on LinkedIn
• Rivian’s Privacy Hub
• FTC bans General Motors from selling driving data without permission, adding to case for CarPlay 2 (9to5Mac, January 2025)
• 800,000 EV drivers’ data exposed in Volkswagen breach (The Register, January 2025)
• Privacy Not Included, a Mozilla Report about connected cars and privacy (“It’s Official: Cars Are the Worst Product Category We Have Ever Reviewed for Privacy”, September 2023)
• Investigation by Netherlands' DPA prompts changes to Tesla security cameras (IAPP, 2023)
• Tesla workers shared sensitive images recorded by customer cars (Reuters, 2022)
• Privacy4Cars