Vehicle Security Info Access in Canada
Background
The CASIS agreement acknowledged that access to vehicle security-related information was not within the scope of the agreement and would require a separate project. In 2012, a Canadian screening process was launched to ensure compliance with Canadian privacy laws and criminal background check procedures. Approved registrants that were vetted through the Canadian VSP system were provided with credentials to access security-related information through the US Secure Data Release Model (SDRM) system.
In 2018, the National Automotive Service Task Force (NASTF), the US authority administering the SDRM, decided to vet Canadian applicants directly, and the Canadian VSP program was subsequently terminated.
Is it required that a Secure Screening Process Complies with Canadian Law?
The criminal record check is a vital component of the vetting process, and we do know that in Canada, a third party cannot obtain a criminal record check on an individual, as they can in the United States. Furthermore, sensitive information of this nature and other information we assume would be collected in the process should not be transmitted across the border, according to Canadian privacy law.
At the moment, automotive professionals wishing to access key codes, immobilizer reset data, and any other vehicle security-related information (from participating automakers) must apply to NASTF’s VSP registration process.
This is a topic of discussion at the table with CASIS Task Force and with the Government of Canada.