This Practice Note considers the key data protection, privacy and security issues arising in connection with the use of autonomous and connected vehicle technology in the EU. It covers the Declaration of Amsterdam, the platform for the deployment of Cooperative Intelligent Transport Systems (C-ITS), data protection implications, privacy and cybersecurity regulations, as well as data accessibility issues.