A Camera Now Watches Every New Driver in the EU
Since July 7, 2026, every newly registered car, van, truck and bus sold in Italy and the rest of the European Union must ship with an Advanced Driver Distraction Warning (ADDW) system — an infrared, driver-facing camera tracking eye and head movement — alongside a mandatory Event Data Recorder (EDR), a crash "black box" logging speed, braking and safety-system activation. This is phase two of Regulation (EU) 2019/2144, the General Safety Regulation known as GSR2, whose first tranche of requirements (autonomous emergency braking, intelligent speed assistance) took effect on July 6, 2022. The camera mandate is the most invasive addition yet, and Italian outlets covering the rollout have zeroed in on a real gap: the regulation is far clearer about what the camera must do than about what happens to the data it generates.
The Safety Case Deserves a Fair Hearing
Regulators did not invent this requirement out of technophilia. Distraction — glancing at a phone, a console, a passenger — is a persistent and measurable contributor to crashes, and a camera that can detect a prolonged off-road glance and issue a warning addresses a failure mode that lane-keeping and automatic braking systems don't reach. The European Commission designed ADDW and the EDR together for a reason: aggregate, anonymized crash data is exactly the kind of evidence base regulators need to refine future safety rules, and manufacturers need to validate real-world performance of ADAS systems. A blanket objection to putting sensors in cars ignores that modern vehicles already carry dozens of cameras and radars for other functions; the marginal privacy cost of one more, purpose-limited to a safety warning, is not self-evidently unreasonable.
Closed-Loop, On Paper
The regulation's text tries to foreclose the surveillance concern directly. Article 6(3) of Regulation 2019/2144 requires that ADDW systems "not continuously record nor retain any data other than what is necessary" for the closed-loop function, with data "immediately deleted after processing" and never made accessible to third parties. Article 6(4) imposes similar anonymization and anti-manipulation requirements on the EDR, and both provisions explicitly disclaim any biometric identification of the driver — the car is meant to "see" a distraction pattern without "recognizing" a person. On paper, this is one of the more privacy-conscious mandates in EU vehicle safety law, and it invokes GDPR compliance directly.
Volvo's Admission Undercuts the Design Promise
The gap is between the text and its verification. Reporting this month found that Volvo has acknowledged its driver-monitoring architecture processes real-time data on secure external cloud servers to refine safety algorithms — a practice that sits uneasily against the "closed-loop," no-external-transmission spirit the regulation describes (Carscoops). Nothing in Article 6 bars cloud processing outright if a manufacturer can show the data stays anonymized and purpose-limited, but privacy advocates cited in that reporting make the more basic point: there is no independent EU auditing mechanism confirming that any manufacturer's implementation actually matches the closed-loop description on the compliance paperwork. The regulation sets a standard; it does not fund or staff anyone to check it.
Italy's Enforcement Vacuum
This is where Italy's experience is instructive rather than exceptional. Italian coverage of the July 7 rollout — including explainers from Motor1 Italia on what the camera and black box actually record (Motor1 Italia) — has repeatedly advised drivers to check their own vehicle's settings menu to find out which functions are active and how long data is kept, because the regulation itself does not specify a retention period, only a deletion obligation "after processing." That is a meaningful difference: "after processing" is a technical event a manufacturer defines internally, not a fixed number of hours or days a regulator can audit against. Italy's Garante per la protezione dei dati personali has an active track record on camera and biometric surveillance in other contexts, but has not yet issued GSR2-specific implementing guidance telling automakers what "immediately deleted" means in practice for a car sold in Italy. At the EU level, the European Data Protection Board flagged a related problem back in May 2025, telling a Member of the European Parliament that in-car cameras and dashcams remain subject to fragmented, inconsistent national rules that complicate any uniform standard (EDPB letter to MEP Körner). GSR2's rollout has not closed that fragmentation; it has just added a new category of camera to sit inside it.
What Proportionate Regulation Actually Requires
None of this is an argument for ripping the camera out. The underlying safety logic is sound, and the regulation's text — anonymization, no third-party access, no biometric ID — reflects genuine privacy-by-design thinking rather than an afterthought. The failure is downstream: Brussels wrote a strong data-minimization standard and then left verification to manufacturer self-attestation and national regulators who haven't yet been given (or haven't yet exercised) the tools to check compliance. A proportionate fix does not require new hardware restrictions or a retreat from ADDW; it requires the Commission to specify a concrete maximum retention window rather than the vaguer "after processing" language, and it requires national authorities like Italy's Garante to publish sector-specific guidance an ordinary buyer — not just a compliance lawyer — can actually read. Regulators asked the automotive industry to build privacy-protective hardware. They now owe drivers proof that the hardware does what the law says it does.
Key Facts
GSR2 phase two took effect July 7, 2026 for all newly registered EU vehicles, three years after phase one's July 2022 start date.
Article 6 of Regulation 2019/2144 requires closed-loop processing and immediate post-processing deletion — but does not specify a retention period in hours or days.