Svensk version

Use of Trusted Execution Environment

In the present project, the Swedish Authority for Privacy Protection (IMY), together with the participants, has analysed how trusted execution environments (TEE) can be used to protect information processed outside a vehicle’s local computing environment.

Within the framework of the project, Volvo Group (Volvo) intends to collect data via cameras and sensors installed in Volvo’s trucks. These data will be transferred to and processed in a trusted execution environment. The environment is provided by a mobile network operator as a technical service within its infrastructure.

The questions examined by IMY in the project are which security measures may be
appropriate when using trusted execution environments, whether the GDPR applies to the processing in the project, and what potential role, if any, the provider of a trusted execution environment may have under the GDPR.