Privacy policy｜TIER IV, Inc.

Date last revised: November 1, 2026

This Privacy Policy (this “Policy”) explains how TIER IV, Inc., Tier IV North America Inc. and Human Dataware Lab. Co., Ltd. (collectively, the “TIER IV Group”) process personal data. Depending on your relationship with us, your place of residence, the products and services you use and the specific processing concerned, one or more TIER IV Group companies are responsible under applicable law for the processing of your personal data. In this Policy, “we”, “us” and “our” refer to the TIER IV Group company or companies that, for a particular processing activity, determine its purposes and essential means or are otherwise responsible for that processing under applicable law.
In this Policy, “personal data” means any information relating to an identified or identifiable natural person. Where the Act on the Protection of Personal Information of Japan or any other law defines “personal data” or an equivalent term differently, that term has the meaning given to it under that law with respect to processing to which that law applies.

Scope

This Policy applies where we process personal data as a controller that determines the purposes and essential means of the processing, or in an equivalent capacity under applicable law. Where a TIER IV Group company processes personal data on the instructions of a customer or other third party as a processor, service provider or in an equivalent capacity, that third party’s privacy notice and the contract with that third party will, in principle, apply. Where US law or other applicable law uses different terms equivalent to controller or processor, those terms in this Policy include the equivalent capacities under that law.

About the TIER IV Group

The TIER IV Group develops and provides, among other things, autonomous driving systems, in-vehicle software, hardware and cloud-based DevOps platforms built on Autoware, open-source software for autonomous driving. TIER IV, Inc. has its head office in Japan, Tier IV North America Inc. is located in California, United States (2445 Augustine Dr Suite 150, Santa Clara, CA 95054), and Human Dataware Lab. Co., Ltd. is a TIER IV Group company located in Japan.
The company responsible for a particular processing activity is determined by reference to its relationship with you, the business or operations it conducts, the purposes and essential means of collecting and using the personal data, the instruction relationships between group companies and other actual circumstances. Several TIER IV Group companies may each be responsible under applicable law.

Relationship with Local Deviations and Specific Notices

In addition to this Policy, Local Deviations or Specific Notices apply depending on your place of residence and the applicable law. For processing by TIER IV, Inc. and Human Dataware Lab. Co., Ltd. to which the Act on the Protection of Personal Information of Japan applies, please refer to “Local Deviations - Japan”, and for processing by TIER IV, Inc. and Tier IV North America Inc. to which US state law applies, please refer to “Local Deviations - US”. For California residents, the “California Privacy Notice” also applies, depending on their relationship with us. In addition, for the processing of video, driving data and sensor data on public roads, private land, test sites and other locations for which TIER IV, Inc. is responsible in Japan as a business operator handling personal information, please also refer to the separately published “Notice on the Recording and Use of Video and Driving Data on Public Roads and Other Locations”. In the event of any inconsistency or conflict between this Policy and a Local Deviation or Specific Notice, the Local Deviation or Specific Notice prevails to the extent required by applicable law.

Personal Data We Collect

We collect personal data directly from you, automatically, or indirectly from customers, business partners, other TIER IV Group companies and other third parties. The personal data we collect varies depending on your relationship with us, the products and services you use and the context in which the personal data is processed. The following describes the types of personal data we collect; in any particular context, we collect only those that are necessary.

Information about Customers, Business Partners, Alliance Partners and Service Users

Contact and affiliation information: name, address, telephone number, email address, signature, company name, department, job title and other contact and workplace information
Account and authentication information: user name, account ID, subject ID, password and other authentication information, access rights, project permissions, settings and preferences
Transaction and contract information: business negotiations, proposals, quotations, contracts, orders, invoices, payments, licenses, subscription plans, maintenance, support, inquiries, complaints and records of responses
Sales, public relations and event information: business cards, newsletter subscriptions, participation in seminars, trade shows and webinars, downloads of materials or catalogs, surveys, leads, media lists, and information relating to interviews and press conferences
Service usage information: information relating to access, operations, searches, uploads and downloads, API usage, evaluation results, errors, support and communications in Web.Auto and other products and services that is linked to a user’s account or to the user
Technical identifiers and metadata: subject IDs, user identifiers, IP addresses, device IDs, vehicle IDs linked to individuals, file author names, upload dates and times, and other identifiers and metadata
Inquiry and rights request information: inquiries, consultations, complaints, exercise of rights, identity verification, verification of the authority of agents, and records of responses

Information about Shareholders, Investors, Analysts, Officers and Related Persons

Shareholder and share information: shareholders’ names, addresses (including places for receiving notices and information on standing proxies), number of shares held, shareholder register, attendance at general meetings of shareholders, exercise of voting rights, and other information relating to shareholder status and the exercise of shareholder rights
IR and investor communications information: names, company names, departments, job titles, telephone numbers and email addresses of individual investors, institutional investors, equity analysts and others, and information relating to inquiries, meetings, participation in briefings and other communications
Information about officers, major shareholders, etc.: name, address, date of birth, career history, position, remuneration, number of shares held, identification documents, family members, information relating to affiliated companies and related parties, and other information necessary for purposes of the Companies Act, the Financial Instruments and Exchange Act, stock exchange rules, tax, commercial registration, licenses and permits, and internal control

Information about Job Applicants and Related Persons

Recruitment information: resumes, work history documents, educational background, employment history, qualifications, abilities and skills, preferred conditions, desired salary, available start date, side-job status, portfolio, LinkedIn, GitHub and other public profiles, affiliated laboratory and research topics, technical test results, recommendation and reference information, interview and evaluation records, residence status, work authorization and other selection information (only to the extent that collection and use are permitted by applicable law)
Recruitment and employment eligibility information: to the extent that collection and use are permitted by applicable law, residence status, period of stay and other information relating to eligibility for selection and employment

Information Collected through Vehicles, Sensors, Cameras and Other Devices

Images and video: visual information relating to individuals, such as the appearance, behavior and clothing of pedestrians, drivers, passengers and others, and vehicle license plates, recorded by cameras inside and outside vehicles and other devices
Location, operation and vehicle usage information: location information, driving routes, times, vehicle IDs, device IDs, operation history and other information relating to location, operation and vehicle usage that is linked to drivers, operators, vehicle occupants or others
Personal data contained in sensor data and logs: the appearance, location and behavior of individuals, subject IDs, IP addresses and other information linked to individuals or to their use or operations, contained in data from cameras, LiDAR or other sensors or in system logs
Audio: in-vehicle audio and other audio information linked to individuals, recorded through devices installed in vehicles or other devices in remote monitoring, remote assistance and other contexts
Processed and derived information: annotations, labels, detection and tracking results, evaluation results and other derived information generated from the above personal data and linked to an identified or identifiable individual

This section describes only those data collected from vehicles, sensors, cameras and other devices that relate to or are linked to individuals. In recording and measuring on public roads and other locations, we do not ordinarily aim to identify specific individuals as such. For details of such processing for which TIER IV, Inc. is responsible in Japan as a business operator handling personal information, please refer to the separately published “Notice on the Recording and Use of Video and Driving Data on Public Roads and Other Locations”.

Personal Data Requiring Special Treatment under Applicable Law

Only where necessary in accordance with applicable law, we may process information relating to health, medical matters and disabilities, social security numbers, citizenship and immigration/residence status, passport, driver’s license and other government identification numbers, precise location information linked to individuals, financial account information, account credentials, information relating to whistleblowing reports and labor disputes, and other personal data requiring special treatment under applicable law. We process such information after securing the legal basis required according to its nature and applicable law, and subject to access restrictions and other appropriate additional safeguards.

Automatically Collected Personal Data

Subject to the requirements of local law, we may automatically collect information about how you use our websites, apps, Web.Auto and other products and services, as well as electronic identification data. This includes cookie IDs and cookie content linked to users or their devices or accounts, IP addresses, device identifiers, User-Agent, Referer, device, browser, OS and other information and settings, language settings, approximate location estimated from IP addresses, pages viewed, clicks, searches, access dates and times, time spent, access, authentication, operation, communication, monitoring and error logs, information about email opens and link clicks, and other online usage information.
For details of cookies, pixel tags, local storage, log files and other technologies, and the choices available to you, please see our “Cookie Policy”.

Sources of Information

In addition to collecting personal data directly from you, we may collect personal data from the products and services you use, customers, business partners, sales and development partners, local governments, universities and research institutions, recruitment agencies, referrers, former employers, medical institutions, occupational physicians, insurance and benefits providers, financial institutions, shareholder register administrators, trust banks, shareholders, investors, equity analysts, securities companies, stock exchanges, government agencies, other TIER IV Group companies, vehicles, sensors, cameras and other devices, company facilities, devices and networks, social media, publicly available information and other lawful sources.

Purposes of and Legal Bases for Processing Personal Data

We process the personal data described in “Personal Data We Collect” above to the extent necessary for the following purposes. The following indicates the types of information principally involved in each processing activity. The same information may be used for more than one purpose, and we do not always process every type of information for each purpose. The specific purposes and legal bases vary depending on your relationship with us, the products and services you use, the processing context and applicable law.

Processing for the Performance of a Contract or Pre-contractual Measures

To perform a contract with you, or to take steps at your request prior to entering into a contract, we process, as necessary, principally contact and affiliation information, account and authentication information, transaction and contract information, service usage information, technical identifiers and metadata, inquiry and rights request information, recruitment information and similar information, for the following purposes:

Provision, operation, maintenance and support of, and responding to inquiries regarding, Web.Auto and other products and services, contract development, field trials, joint research and customer projects
Creation and management of accounts, authentication, management of access rights and project permissions, and management of contracts, orders, invoicing, payments, licenses and relationships with customers and business partners
Vehicle and operation management, scheduling, tracking, remote monitoring and remote assistance, emergency response and OTA updates
Selection, communications, interviews, technical tests, offers, verification of work authorization and onboarding procedures at the request of job applicants

Where we request personal data as a statutory or contractual requirement, or as information necessary to enter into a contract, we will inform you of this, and of the possible consequences of not providing such information, in a notice at the time of collection or by other appropriate means.

Processing for Compliance with Legal Obligations

To comply with applicable legal obligations, we process, as necessary, principally contact and affiliation information, transaction and contract information, information about shareholders, investors, analysts, officers and related persons, recruitment and employment eligibility information, images and video, audio, location, operation and vehicle usage information, personal data contained in sensor data and logs, and personal data requiring special treatment under applicable law. This includes the following purposes:

Accounting, tax, social insurance, labor, occupational health and safety, employment, export control, economic sanctions, internal control, audit, and the preparation and retention of statutory records
Applications, reports, inspections and audits relating to subsidies, grants, national or local government projects and other public support
Responding to lawful requests from courts, supervisory authorities, law enforcement authorities and other public authorities
Compliance with traffic safety, product safety, approval, type certification, trial operation and other laws and regulatory requirements relating to autonomous driving
Management of the shareholder register, general meetings of shareholders, dividends, exercise of shareholder rights and other corporate administration, and records, filings, disclosures and reports under the Companies Act, the Financial Instruments and Exchange Act, stock exchange rules, tax, commercial registration, licensing and other laws and regulations

Processing for Our or Third Parties’ Legitimate Interests

We may process personal data for our legitimate interests or those of third parties, provided that this does not unduly infringe your rights and interests. The types of information principally involved in each purpose are as follows:

Improvement of products, services and operations: using principally contact and affiliation information, account and authentication information, transaction and contract information, sales, public relations and event information, service usage information, technical identifiers and metadata, automatically collected personal data, and processed and derived information, we analyze usage, compile statistics, gauge customer satisfaction and feedback, develop new features, conduct quality control and improve the user experience.
Research and development and safety improvement: using principally service usage information, technical identifiers and metadata, images and video, audio, location, operation and vehicle usage information, personal data contained in sensor data and logs, and processed and derived information, we collect, search, analyze, convert, annotate and quality-check driving data, create datasets for training and evaluation, and research, train, evaluate, validate, deploy and track autonomous driving, AI and ML models.
Accident, failure and security response: using principally account and authentication information, service usage information, technical identifiers and metadata, images and video, audio, location, operation and vehicle usage information, personal data contained in sensor data and logs, automatically collected personal data, and processed and derived information, we reproduce, investigate, analyze the causes of and remediate accidents, near misses, anomalies, malfunctions, false positives and false negatives, and incidents, and prevent, detect and respond to unauthorized access and misconduct.
Sales, business development, public relations and relationship management: using principally contact and affiliation information, transaction and contract information, sales, public relations and event information, inquiry and rights request information and automatically collected personal data, we identify and contact prospective partners and customers, conduct business negotiations, make proposals and quotations, manage leads and sales opportunities, maintain relationships with customers and business partners, plan and run seminars, trade shows, webinars and other events, and handle public relations and media relations.
Shareholder, investor and IR matters: using principally shareholder and share information, IR and investor communications information, and information about officers, major shareholders, etc., we manage the shareholder register, hold general meetings of shareholders, send notices and communications to shareholders, respond to inquiries, send invitations to briefings for institutional investors and equity analysts, conduct IR activities and make disclosures under laws and regulations and stock exchange rules.
Recruitment: using principally recruitment information and recruitment and employment eligibility information, we make hiring decisions and job assignments.
Safety, security and business continuity: using principally contact and affiliation information, location, operation and vehicle usage information, personal data contained in sensor data and logs, and automatically collected personal data, we ensure the safety and security of facilities, vehicles, devices, networks and communications, confirm the safety of personnel in the event of a disaster, make emergency contacts, manage access rights and ensure business continuity.
Legal rights and business activities: using principally contact and affiliation information, transaction and contract information, inquiry and rights request information, and relevant images and video, audio, location, operation and vehicle usage information and personal data contained in sensor data and logs, we respond to inquiries and complaints, enforce contracts and internal rules, establish, exercise and defend legal claims, and discuss and carry out matters relating to insurance, due diligence, mergers, business transfers, reorganizations and asset transfers.

To the extent we rely on our or a third party’s legitimate interests as the legal basis for processing your personal data, you may have the right to object to such processing. We will stop such processing unless we can demonstrate (1) compelling legitimate grounds for the processing which override your interests, rights and freedoms, or (2) that the processing is necessary for the establishment, exercise or defense of legal claims. For details, please refer to “Your Rights and How to Exercise Them” below.

Processing Based on Your Consent

Where consent is required by applicable law, we process those of the following to which you have consented: principally contact and affiliation information, sales, public relations and event information, automatically collected personal data, health, medical, location and other personal data requiring special treatment under applicable law, and information relating to audio and video recordings. This may include the following processing:

Direct marketing by email, SMS or other electronic means
Use of cookies, pixels and other electronic identification technologies for which consent is required under applicable law
Voluntary provision and use of health and medical information, precise location information and other information requiring special treatment under applicable law
Recording of calls, video or audio, and other processing for which we seek consent separately
Processing for specific purposes for which we have obtained your separate consent

You may withdraw your consent to processing based on consent at any time with future effect. If you withdraw your consent, we may be unable to provide the products, services or features that require such consent.

Processing Based on Vital Interests or Other Grounds Permitted by Applicable Law

Where necessary to protect the life, body or other vital interests of you or another person, we may process principally contact and affiliation information, location, operation and vehicle usage information, images and video, audio and other information necessary for emergency response. Where necessary in the public interest or otherwise permitted by applicable law, we also process the necessary personal data to the extent permitted under that law.

Sharing and Disclosure of Personal Data

To the extent necessary to achieve the above purposes and where there is a legal basis, we may share personal data with, provide personal data to, or entrust the processing of personal data to, the following:

Outsourcing Contractors and Other Service Providers

We may disclose personal data, to the extent necessary for the performance of their services, to providers of cloud, hosting, telecommunications, software, security, data analysis, annotation, blurring and masking, payment, recruitment, accounting, tax, training, logistics, shareholder register administration, IR, preparation and printing of disclosure documents and other services, as well as to lawyers, accountants, auditors, insurance companies, financial institutions, trust banks and other professional advisers. In accordance with applicable law, we require our outsourcing contractors to process personal data in accordance with our instructions and their contractual obligations and to implement appropriate security measures.

Other TIER IV Group Companies

We may share personal data with other TIER IV Group companies to the extent necessary for the provision of products and services, research and development, business development and customer acquisition, group management, recruitment, shareholder and IR matters, accounting, tax, legal, audit, compliance and other purposes described in this Policy. For example, Tier IV North America Inc. may provide business contact information obtained through communications with partners or prospective customers to TIER IV, Inc. for communications regarding products and solutions and for business development. The role of each company in a particular processing activity is determined by reference to the purposes and essential means of that processing, instruction relationships and other actual circumstances, and applicable law.

Joint Use

We may jointly use personal data with other business operators in accordance with this Policy and “Local Deviations - Japan”.

Customers, Partners and Other Third Parties

We may provide personal data to customers, OEMs, local governments, universities and research institutions, joint research partners, consortia, field trial participants and other project stakeholders to the extent necessary for contracts, at your request or with your consent, and for contract development, joint research, field trials, validation, provision of datasets and sharing of results. If you choose to link to a third party’s service or to provide information to a third party, that third party’s privacy notice applies.

Anonymized and De-identified Information

We may create information that has been anonymized or de-identified so that individuals cannot reasonably be identified, and use it or provide it to third parties for research and development, analysis, statistics, improvement of products and services, provision of datasets and other lawful purposes. Where required by applicable law, we maintain such information in de-identified form and take measures not to attempt to re-identify it.

Succession in Connection with Reorganizations, etc.

We may disclose personal data to, or have personal data succeeded to by, prospective counterparties, acquirers, investors, financial institutions, professional advisers and other relevant parties in connection with a merger, company split, business transfer, asset transfer, acquisition, financing, reorganization, bankruptcy or other transaction, or the consideration or negotiation thereof.

Disclosures Required by Law and Protection of Rights

We may disclose personal data where necessary to comply with laws, court orders, subpoenas, or lawful requests or disclosure rules of supervisory authorities, public authorities or stock exchanges; to prevent or investigate illegal activity, fraud or security threats; to protect the life, body or property of you or third parties; or to establish, exercise or defend our rights or those of third parties.

International Transfers of Personal Data

We may process personal data outside your country or region of residence by storing it on servers located abroad, providing it to TIER IV Group companies or outsourcing contractors located abroad, remote access from abroad or other means. Depending on the country or region to which personal data is transferred, the level of protection of personal data required by law may not be equivalent to that in your country or region of residence. We implement appropriate safeguards for personal data and comply with the laws applicable to transfers of personal data.
For transfers of personal data from the European Economic Area (the “EEA”) or the United Kingdom to countries that do not provide an adequate level of data protection, we use, where applicable, intra-group data transfer agreements based on the EU Standard Contractual Clauses adopted by the European Commission, the UK International Data Transfer Agreement or the International Data Transfer Addendum to the EU Standard Contractual Clauses, or other data transfer clauses approved under local law, or other appropriate transfer mechanisms. For transfers to parties other than us, we likewise ensure binding and enforceable obligations on recipients on the basis of standard contractual clauses, adequacy decisions, certifications or other appropriate safeguards. We assess each transfer and, where necessary, implement additional technical and organizational measures such as encryption, access controls and pseudonymization to ensure an appropriate level of protection.

Retention of Personal Data

We retain personal data for as long as necessary to fulfil the purposes for which it was collected and used. In determining retention periods, we take into account our relationship with you and the term of any contract, the nature of recruitment, shareholder, IR and other relationships, the type, volume and sensitivity of the information, the risks of the processing, needs relating to products, services and research and development, statutory retention obligations, including those relating to the shareholder register, under the Companies Act, the Financial Instruments and Exchange Act and labor, tax, social security, immigration, occupational health and safety and other laws, and the need to respond to audits, security matters, accident investigations and legal claims.
Personal data whose retention period has expired or which is no longer needed for the purposes of use will be securely deleted, anonymized or rendered unusable in accordance with applicable law and our procedures. However, we may need to retain it for a certain period for backup purposes, to comply with legal obligations or in connection with legal claims.

Information Security

To protect the personal data we collect against unauthorized or unlawful use or alteration, unauthorized access or disclosure, and accidental or intentional destruction and loss, we implement organizational, human, physical and technical security measures appropriate to the nature of the personal data and the purposes, scale and risks of the processing. While we strive to protect personal data, no security measure is absolute or can guarantee complete security. If you use an account, we ask that you also take the precautions within your control, such as not sharing your password with others, not reusing the same password across multiple services, and contacting us promptly if you notice any suspicious use or unauthorized access.

Your Rights and How to Exercise Them

Subject to the limitations and exceptions under applicable law, you may have the following rights in relation to your personal data that we have collected:

Right of access: You may confirm whether we process your personal data and request access to, or a copy of, the personal data we hold and information about its processing.
Right to rectification: You may request that inaccurate or incomplete personal data be updated, corrected or supplemented, taking into account the nature of the personal data and the purposes of use.
Right to erasure: You may request the erasure of your personal data, except where statutory retention obligations, performance of a contract, security, legal claims or other exceptions under applicable law apply.
Right to restriction of processing: You may request the restriction of processing of your personal data where the requirements under applicable law are met, such as where the accuracy of the personal data is contested, the processing is unlawful, we no longer need the personal data but you require it for legal claims, or an objection is under consideration.
Right to object: You may object, on grounds relating to your particular situation, to processing based on legitimate interests or the public interest. You may object at any time to processing for direct marketing purposes.
Right to withdraw consent: You may withdraw your consent to processing based on consent at any time with future effect, without affecting the lawfulness of processing before its withdrawal.
Right to data portability: You may request to receive personal data that you have provided and that is processed by automated means on the basis of consent or contract in a structured, commonly used and machine-readable format, or to have it transmitted to a third party where technically feasible.
Rights relating to automated decision-making: Where applicable, you have the right not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you, and you may request human intervention and other measures permitted under applicable law.

To exercise your rights, please contact us through “Contact Us” below. We will respond to requests concerning your privacy rights in accordance with applicable law. To protect you and third parties, we may request information necessary to verify your identity or the authority of an agent, depending on the type of request and the risks involved. Where permitted by applicable law, we may refuse a request in whole or in part, limit the number of requests, or charge a reasonable fee for manifestly unfounded or excessive requests. In such cases, we will explain the reasons in accordance with applicable law.
Regardless of our response, you may lodge a complaint with the data protection authority or other supervisory authority with jurisdiction over your place of residence, your place of work or the place where the alleged infringement occurred.

Individuals under the Age of 16

Where we need to process the personal data of individuals under the age of 16, we will obtain the consent of a parent or guardian or take other necessary measures in accordance with applicable law. For the handling of minors incidentally recorded in video, driving data and sensor data collected by TIER IV, Inc. on public roads, private land, test sites and other locations in Japan, please refer to the “Notice on the Recording and Use of Video and Driving Data on Public Roads and Other Locations”.

Third-Party Websites and Services

Our websites, products or services may contain links to, or integrations with, websites, platforms, applications or services operated by third parties. We do not control the collection and use of personal data by these third parties and are not responsible for their processing. Please review a third party’s privacy notice before providing personal data to that third party.

Changes to this Privacy Policy

We may amend this Policy from time to time in response to changes in laws, our business, our products and services or our processing of personal data. The revised version will be posted on our website or in another appropriate place. Where a change would materially affect the processing of personal data we already hold, we will endeavor to notify you in advance by a notice on our website, by email or by other appropriate means in accordance with applicable law. Please review this Policy periodically to check the latest version.

Contact Us

Inquiries regarding this Policy, our processing of personal data, safeguards for international transfers or the exercise of rights are received at the TIER IV, Inc. contact point below, which serves as the common contact point for the TIER IV Group. Depending on the nature of the inquiry, the TIER IV Group company responsible for the relevant processing will respond.

TIER IV, Inc. Personal Information Contact Desk
Jacom Building, 1-12-10 Kitashinagawa, Shinagawa-ku, Tokyo 140-0001, Japan
Email: personalinfo@tier4.jp

Appointment of Representatives under Data Protection Laws

EU and UK

Pursuant to Article 27 of the EU General Data Protection Regulation (GDPR) and Article 27 of the UK GDPR, we have appointed the following as our representatives in the European Union and the United Kingdom. Data subjects in the EEA or the UK may contact our representatives instead of us regarding matters under the GDPR or the UK GDPR.

EU representative: [Name] Enobyte GmbH / [Address] Augustenstr. 49, 80333 Munich, Germany / [Email] eurep-tier4@enobyte.com
UK representative: [Name] Enobyte GmbH / [Address] Enobyte c/o Spaces 98 Theobalds Rd WC1X 8WB, London United Kingdom / [Email] ukrep-tier4@enobyte.com

Additional Information for Specific Jurisdictions

Additional privacy rights or additional information may apply to individuals residing in specific jurisdictions or subject to specific processing. The Local Deviations and Specific Notices below provide additional information under the applicable personal information protection laws.

Local Deviations

Privacy and data protection laws in certain jurisdictions require that additional information be provided to individuals. For additional information on our handling of information and on your rights as required under applicable data protection laws, please refer to the Local Deviations for the relevant jurisdiction through the links below.

Japan
United States

Specific Notices

Notice on the Recording and Use of Video and Driving Data on Public Roads and Other Locations (Japan)
California Privacy Notice