FLEETDRIVE terms. Identify the types of data collected, where it is stored, who can access it and whether third-party providers are involved.
Assess cybersecurity before procurement. Ask manufacturers about their approach to software updates, vulnerability reporting, access controls and security support over the vehicle ' s working life. Consider whether connected features can be disabled or restricted where they are not required.
Control access to vehicle accounts. Use strong, unique passwords and multi-factor authentication where available. Regularly review who has access to connected vehicle applications and remove permissions when employees change roles or leave the organisation.
Keep software and applications updated. Apply vehicle software updates and mobile application updates in line with manufacturer guidance. Establish a process for reviewing security notices and responding to identified vulnerabilities.
Set clear employee privacy policies. Explain what vehicle information is collected, why it is needed and how it will be used. Be transparent about telematics and driver monitoring, and ensure any collection and use of personal information complies with applicable privacy obligations.
Manage vehicles throughout their lifecycle. When vehicles are sold, returned or reassigned, remove previous users ' access to connected services. Unlink mobile applications and restore factory settings where appropriate. A factory reset may not remove information already transmitted to external servers, so fleet managers should also check account and data-deletion procedures.
Plan for cybersecurity incidents. Establish a process for reporting suspected unauthorised access, contacting manufacturers and service providers, protecting affected accounts and assessing any operational or privacy impacts.
The ACSC ' s connected vehicle guidance provides further practical advice for Australian vehicle owners and operators, including reviewing data-sharing settings, securing connected accounts and removing access when a vehicle changes ownership.