Legal Aspects, Public Interest, and Legitimate Interest in Processing Personal Data to Operate Autonomous Car

The UAE 2021 Data Protection Law (DPL) and the European Union’s GDPR are not just regulatory frameworks but groundbreaking attempts to regulate personal data management. They extend their scope to emerging technologies like autonomous vehicles, once a figment of science fiction but now a global reality. Just as the GDPR demands explanations for data controller algorithms under Article 22, the DPL must revolutionize its regulatory approach to address privacy concerns related to autonomous vehicles. This paper embarks on a journey through the legal intricacies of processing personal data in autonomous vehicle operations, specifically focusing on the distinction between processing data for public interests and legitimate interests. The analysis dives deep into the definitions of personal data and special categories of personal data as outlined in DPL Chapters 1 and 5 and Article 3, which exempts personal data processing related to state security, public safety, and national defense. By examining these provisions, the paper aims to shed light on how data protection laws apply differently depending on the purpose of data processing. This comprehensive analysis enriches understanding of current data protection frameworks. It provides insights for future legislative developments or modifications to the DPL, ensuring robust personal data protection in the era of advanced technologies.