Overview
ISO 16461:2018 - "Intelligent transport systems - Criteria for privacy and integrity protection in probe vehicle information systems" - defines basic rules and evaluation criteria for protecting privacy and data integrity in systems that collect and process vehicle probe data. The standard targets probe vehicle systems (PVS) that gather sensor and location-derived probe data from private vehicles, process them statistically, and deliver traffic or mobility information to third‑party services and end users. ISO 16461:2018 emphasizes protecting the intrinsic rights and interests of data subjects referenced in ISO 24100:2010.
Key Topics and Technical Requirements
- Reference architecture & context model: extends the ISO 22837:2009 probe message model to include the full probe package (payload + communication/authentication data) and the functional elements in vehicle and land‑based centres required for privacy and integrity protection.
- Privacy evaluation framework: organized into families of privacy-relevant requirements (FPR), including:
- Anonymity (FPR_ANO)
- Pseudonymity (FPR_PSE)
- Unlinkability (FPR_UNL)
- Unobservability (FPR_UNO)
- Integrity requirements: covers protection of exported target-of-evaluation security functionality (FPT_ITI) and data integrity across probe creation, transfer and processing.
- Lifecycle requirements for probe data:
- Raw sensor data processing (RSDP) - conversion of sensor outputs to probe data.
- Probe data retention and processed data retention - rules for storing and protecting intermediate and final datasets.
- Probe message / package creation, reception and processing - requirements for correct, anonymous generation and handling of messages and packages.
- Security criteria: authentication, integrity protection, and interfaces that enable privacy-preserving acquisition and statistical processing of probe data.
Applications and Who Uses It
ISO 16461:2018 is practical for:
- ITS architects and system integrators designing privacy-aware probe vehicle information systems
- Vehicle OEMs and telematics providers implementing onboard data collection and anonymization
- Mobility service providers and traffic data aggregators handling probe data transfer, storage and analytics
- IT/security teams specifying integrity and authentication controls for probe pipelines
- Regulators and privacy officers assessing compliance with privacy principles in transport data services
Related Standards
- ISO 22837:2009 - Vehicle probe data for wide area communications (reference architecture for probe messages)
- ISO 24100:2010 - Vocabulary for ITS (data subject rights and terminology)
- Other ITS and data protection standards (refer to normative references in ISO 16461:2018)
This standard helps organizations implement privacy-preserving probe data flows and robust data integrity controls across intelligent transport systems.