User guide
E-scooter privacy and personal data protection engineering: cross-cutting privacy-preservation axis — GDPR Regulation (EU) 2016/679 + ePrivacy Directive 2002/58/EC + EU Data Act Regulation (EU) 2023/2854 + UK Data Protection Act 2018 + California CCPA/CPRA + ISO/IEC 27701:2019 PIMS + ISO/IEC 29100:2024 Privacy Framework + ISO/IEC 29134:2017 PIA + IEEE 7002-2022 + NIST Privacy Framework v1.0
Engineering deep-dive into e-scooter privacy and personal data protection as the tenth cross-cutting infrastructure axis (privacy-preservation axis) — parallel to [fastener engineering as joining axis](@/guide/fastener-and-bolted-joint-engineering.md), [thermal management as heat-dissipation axis](@/guide/thermal-management-engineering.md), [EMC/EMI as interference-mitigation axis](@/guide/emc-emi-engineering.md), [cybersecurity as interconnect-trust axis](@/guide/cybersecurity-engineering.md), [NVH as acoustic-vibration-emission axis](@/guide/nvh-engineering.md), [functional safety as safety-integrity axis](@/guide/functional-safety-engineering.md), [battery lifecycle as sustainability axis](@/guide/battery-lifecycle-recycling-engineering.md), [reparability as repairability axis](@/guide/repair-and-reparability-engineering.md) and [environmental robustness as environmental-conditioning axis](@/guide/environmental-robustness-engineering.md). Covers: 11-row standards matrix (GDPR 2016/679 + ePrivacy 2002/58/EC + Data Act 2023/2854 + UK DPA 2018 + California CCPA/CPRA + LGPD Brazil + PIPL China + nFADP Switzerland + PIPEDA Canada + ISO/IEC 27701/29100/29134 + IEEE 7002-2022 + NIST Privacy Framework v1.0); GDPR Article 6 lawful bases applied to e-scooter telematics; Article 35 DPIA trigger matrix; Article 25 privacy-by-design + Cavoukian 7 foundational principles; personal data inventory 9-row matrix (GPS/IMU telemetry/user identity/BLE pairing/biometrics/payment/IP/device-ID/app analytics); Article 12-22 data subject rights 8-row table; Article 33-34 breach notification 72h timeline; international transfer (SCC 2021/914 + EU-US Data Privacy Framework Schrems II); 10-event real incidents timeline 2018-2026 (Lime data leak + Bird CNIL fine + Voi GDPR action + Bolt Texas data breach + DJI Avata PIPL + Apollo SDK Onavo-style telemetry + Helbiz S-1 disclosure + Spin SOC 2 + Beam DPIA + Tier consent withdrawal); industry shift 2020→2026; 8-step DIY user privacy audit; 16 numbered sections.