The EU Data Act (Regulation (EU) 2023/2854) is a regulation that ensures fair access to and use of data generated by connected products and related services. In the automotive context, this includes:
• Vehicle Data: Data generated by the operation and performance of the vehicle, listed in the categories below.
o Location data:
- Geolocation information (e.g., geolocation of your vehicle (longitude and latitude), planned destination, journeys, direction of travel), at precise times;
- Journey information (e.g., recent destinations, favourite destinations).
o Telematic data:
- Driving behaviour (e.g., driving logs, driving speed, acceleration, and brake speed);
- Technical vehicle data (e.g., mileage, fuel consumption, warnings) and diagnostic data (e.g., system failures and warning lights);
• Home Charger Data: Data generated using home chargers, listed in the categories below.
o Charging Session Data: Information about each charging session, including start and end times, duration, and energy consumed.
o Energy Consumption Data: Detailed records of the amount of electricity used during charging, often broken down by time intervals.
o Charging Efficiency: Data on the efficiency of the charging process, including any losses that occur during charging.
o Device Status: Real-time status updates of the home charger, such as operational status, error codes, and maintenance alerts.
• Related Service Data: Data representing your interactions with our services, including navigation history, vehicle and/or home charger control.
• Metadata: Data necessary to interpret the above categories, such as descriptions, timestamps. location and units of measurement.
The EU Data Act, grants significant rights to the users of connected products. These rights are designed to give you greater control, transparency, and flexibility over how your data is accessed and used.
More specifically:
1. Right to View and Receive Data
You have the right to access and receive the data generated by your connected product and its associated digital services. This includes:
• Real-time and historical data such as location, fuel consumption, tyre pressure, engine diagnostics, and driving behaviour.
• Both personal and non-personal data, depending on the context of use (e.g., individual driver vs. fleet operator).
• Data must be provided in a structured, commonly used, and machine-readable format, free of charge.
• This right ensures that you can understand what data is being collected and how it is used, and retrieve it for your own purposes — such as analysis, resale, or switching service providers.
2. Right to Share Data with Third Parties
You also have the right to instruct the vehicle manufacturer (or other data holders) to share your data with a third party of your choice. This could be:
• Independent repair shops or service providers for diagnostics and maintenance.
• Insurance companies for usage-based insurance policies.
• Fleet management platforms for logistics optimization.
• Digital service providers offering apps or tools that enhance your driving experience.
Manufacturers are legally obligated to make this data available to the third party you designate, under fair, reasonable, and non-discriminatory terms. This promotes competition and innovation, and prevents lock-in to a single service provider.
3. Transparency and Access by Design
Manufacturers must ensure that:
• You are clearly informed about what data is collected, how it is used, and your rights.
• Vehicles, home chargers and services are designed with “access by design”, meaning data must be easily and securely accessible to you and your chosen third parties.
Examples
Example 1: Independent Maintenance: You want to use a local garage instead of Toyota’s service center. You can request that your vehicle’s diagnostic and maintenance data be shared directly with the garage, enabling them to perform repairs without needing proprietary tools or data.
Example 2: Insurance: You opt for a usage-based insurance policy. You can authorize your insurer to receive driving behavior data (e.g., speed, braking patterns) directly from your vehicle to calculate a personalized premium.
Example 3: Fleet Management: As a fleet operator, you can access real-time data from all vehicles in your fleet and share it with a third-party logistics platform to optimize routes, monitor fuel efficiency, and schedule maintenance.
Example 4: Energy Consumption optimization. A third-party energy management company can combine data from a connected home charger, with that of other connected enrgy consuming devices, and provide reports and suggestions to optimize charging times, reduce electricity costs, and improve energy efficiency based on real-time grid conditions and user preferences.
1. Toyota Customer Portal (Data Sharing Platform)
Through the Toyota Customer Portal, you can:
• View and download vehicle and home charger data such as trip history, fuel consumption, maintenance records, charging records and system alerts.
• Grant access to third parties like insurers, repair shops, or fleet managers.
• Monitor your vehicle’s performance and receive proactive service notifications.
• Please note that in order to use the Data Sharing Platform, you need to have a Customer Portal account.
This platform is designed to ensure transparency, ease of access, and compliance with the EU Data Act’s “access by design” requirements.
2. Vehicle Interface and On-Board Diagnostics (OBD) Port
Your vehicle is equipped with an OBD port, which allows:
• Direct access to real-time diagnostic data (e.g., engine performance, fault codes).
• Use of third-party OBD tools and apps to retrieve and analyze data independently.
• Support for independent service providers to perform diagnostics and repairs without relying on proprietary systems.
This ensures that you — or a service provider of your choice — can access essential vehicle data without restrictions.
3. MyToyota App (Companion Mobile App)
The MyToyota app offers a mobile-friendly way to:
• Access your vehicle and home charger data anytime, anywhere.
• Receive real-time alerts, track your driving behavior, and monitor vehicle health.
The app complements the customer portal and OBD interface, giving you full control over your data in a convenient and user-friendly format.
Through the Data Sharing Platform in the Toyota Customer Portal, you can grant access to third parties like insurers, repair shops, or fleet managers.
This platform is designed to ensure transparency, ease of access, and compliance with the EU Data Act’s “access by design” requirements.
To support transparency and compliance with the EU Data Act, Toyota provides a comprehensive data catalogue that outlines the types of data generated by connected vehicles and available for access or sharing.
You can find the full list of available data — including technical, usage, and diagnostic data — through the Toyota Data Sharing Platform, accessible at:
https://eda.toyota-europe.com/
The catalogue contains:
Descriptions of each data type, including format, frequency, and source (e.g., GPS, sensors, ECUs).
Categories of data, such as:
• Vehicle health and diagnostics
• Driving behavior and usage
• Location and trip data
• Environmental and sensor data
• Home charger data
This catalogue helps users and third-party service providers understand what data is available,— ensuring fair, informed, and secure data use.
You can access vehicle or home charger data (on behalf of the product user):
Indicative examples:
- Perform remote diagnostics before a service appointment
- Offer predictive maintenance (e.g., alerting when vehicle components are worn)
- Provide charging support (e.g., program home chargers to initiate charging when tariffs are low)
Yes, provided that the product user has raised a request. Examples:
- An insurer accesses driving behavior data to offer a pay-how-you-drive policy
- A fleet manager retrieves charging logs from home chargeres to optimize
energy use
- A mobility app uses vehicle location and lock status to enable car sharing
Via:
- APIs (e.g., RESTful APIs for real-time vehicle telemetry)
- The Data sharing platform. You can access the platform via https://eda.toyota-europe.com/
- Standard formats (e.g., JSON, CSV)
Toyota Motor Europe (TME) ensures that data protected through robust technical and organizational safeguards, in compliance with legal and regulatory requirements.
- Security Governance: Company-wide policies and dedicated teams manage and oversee information security and privacy.
- Vulnerability & Patch Management: Regular updates and third-party assessments to identify and fix security weaknesses.
- System & Network Security: Use of encryption, antivirus, access controls, and monitoring to protect IT infrastructure.
- Cloud & Vehicle Security: Specialized controls for cloud environments and vehicle systems, aligned with international standards (e.g., ISO 21434, UNR155).
- Incident Response: Structured processes to detect, report, and respond to security and privacy incidents.
- Data Privacy Compliance: Adherence to GDPR, including data subject rights and vendor compliance checks.
- Training & Awareness: Ongoing education for employees on data protection responsibilities.
- Confidentiality & Access Control: Strict rules for handling sensitive information and limiting access based on roles.
- Risk Management: Regular assessments and mitigation planning for data protection risks.