# Positioning Information Privacy in Intelligent Transportation Systems:
## 6 Discussion and Future Perspectives  
This section provides an overview of the future development of privacy strategies in positioning from EU regulations perspective in addition to conclusions of this work. Recently introduced General Data Protection Regulation (GDPR) policy broadly states that _profiling_ and processing the location information of an individual could be done concerning personal aspects which are naturally related to person's movement and location data. According to [117], it could be done only when EU law regulations or the Member States demands or allows it, or \"with the explicit consent of the data subject.\" Thus, tracking and monitoring the data of the user's vehicle also falls within this regulation. However, the definition of _personal location_ data should be treated more carefully especially for cases when the _identifiability_ of the said individual could be established. This way, the GDPR aspects related to the protection of personal data also should be taken into consideration while operating with personal location data. In the ITS case and focusing on conventional GNSS systems, all the supported systems are controlled by the authorities, namely military for GPS and GLONASS and, in contrast, civilian Galileo in EU, which makes the implementation of GDPR more complicated. In order to overcome this issue, European Telecommunications Institute (ETSI) is actively developing a standard EN 303 413 [118] aiming to overcome the interoperability of those systems. However, the corresponding questions remain unclear from the telecommunications side especially while speaking about 5G [119]. Moreover, location-related data may be stored in the environments potentially not controlled by the operators themselves [120]. Industrial giants, such as Huawei, already rise the question on how to address the challenges of private positioning in future networks [121]. One of the fundamental principles to be followed is by following the GDPR Article 25, i.e., to implement a privacy-by-design approach to achieve privacy from the commencement of the system perspective. Aiming to achieve the above-mentioned, we have shown different location estimation techniques for ITS scenario in this paper. We analyzed the existing protocols for the information exchange between the vehicle and the base station during the localization process. Subsequently, we presented an improved protocol for the data exchange, where much attention was paid to the security of signaling information transmission. Using the modified protocol, the vehicle can also rely on the location data without disclosing the identity, and thus the privacy could be generally improved. In real life, the selection of the protocol highly depends on the application needs. If the system architect wants to have maximum anonymity, it is recommended to utilize the modified protocol, but it is the most difficult one for implementation. The optimal option is to use a protocol with a property of anonymity but BS-based. The complexity is not much higher compared to others, and there are no complex operations. Conceptualization, S.B., V.D., P.M. and A.S.; methodology, S.B. and V.D. ; software, V.D. ; validation, A.O., P.M. and A.S.; formal analysis, E.S.L. ; investigation, A.S.; resources, A.O. ; writing--original draft preparation, S.B. and V.D. ; writing--review and editing, A.O., A.S., P.M. and E.S.L. ; visualization, A.O. ; supervision, S.B., E.S.L. and Y.K. ; project administration, S.B. and A.O. ; funding acquisition, S.B., E.S.L. and Y.K. This work was supported by the Academy of Finland (project #313039--PRISMA) and the work of the second author is supported by the Academy of Finland under a personal grant. The described research was also supported by the National Sustainability Program under grant LO1401. The described research was partially financed by the Ministry of Industry and Trade of Czech Republic project No. FV20487. For the research, the infrastructure of the SIX Center was used. The authors declare no conflict of interest.