Challenges of Privacy Requirements Modelling in V2X Applications: A Telematic Insurance Case Study

There has been a surge in the deployment of Vehicle-to-Vehicle or Vehicle-to-Infrastucture (V2X) telematics in recent years. One of the promising revenue streams in the telematic ecosystem is the use of diagnostic data to provide insurance relevant information. The use of telematic insurance requires the collection of a vast amount of vehicular data. Some of this data is clearly indicated in the web sites of the insurance companies. However, most insurance companies do not inform users of the data being collected and the purpose of the collected data. In this paper, we report on the results of an exploratory study of the top 5 telematic insurance or black box insurance companies in the UK. We analyse the data collected by telematic insurance companies, compare the privacy policies given on the companies' website, model privacy requirements and give an insight into privacy requirements engineering in V2X telematic insurance applications.