A method of filtering personally identifiable information, PII, objects from vehicle data, the method comprising: determining (402, 502) by an in-vehicle processor in a vehicle, a location of the vehicle; retrieving (404, 506), by the in-vehicle processor from among different enforcement policies, an enforcement policy associated with the determined location of the vehicle, the retrieved enforcement policy defining one or more PII objects to be filtered from vehicle data collected at the vehicle, wherein the different enforcement policies defining PII objects to be filtered correspond to different vehicle locations, and each respective enforcement policy of the different enforcement policies contains: location information that defines a corresponding geographic region to which the respective enforcement policy is applicable, PII object information defining respective one or more PII objects to be filtered, and key information of an encryption key; retrieving, by the in-vehicle processor, an encryption key defined by the key information contained in the retrieved enforcement policy; filtering (406, 514), by the in-vehicle processor, the vehicle data to mask a PII object contained within the vehicle data, the PII object that is masked being a PII object defined by the PII object information in the retrieved enforcement policy; wherein the filtering produces filtered vehicle data based on encrypting the PII object contained within the vehicle data using the encryption key defined by the key information contained in the retrieved enforcement policy; and sending, from the vehicle, the filtered vehicle data to a device external of the vehicle. determining (402, 502) by an in-vehicle processor in a vehicle, a location of the vehicle; retrieving (404, 506), by the in-vehicle processor from among different enforcement policies, an enforcement policy associated with the determined location of the vehicle, the retrieved enforcement policy defining one or more PII objects to be filtered from vehicle data collected at the vehicle, wherein the different enforcement policies defining PII objects to be filtered correspond to different vehicle locations, and each respective enforcement policy of the different enforcement policies contains: location information that defines a corresponding geographic region to which the respective enforcement policy is applicable, PII object information defining respective one or more PII objects to be filtered, and key information of an encryption key; location information that defines a corresponding geographic region to which the respective enforcement policy is applicable, PII object information defining respective one or more PII objects to be filtered, and key information of an encryption key; retrieving, by the in-vehicle processor, an encryption key defined by the key information contained in the retrieved enforcement policy; filtering (406, 514), by the in-vehicle processor, the vehicle data to mask a PII object contained within the vehicle data, the PII object that is masked being a PII object defined by the PII object information in the retrieved enforcement policy; wherein the filtering produces filtered vehicle data based on encrypting the PII object contained within the vehicle data using the encryption key defined by the key information contained in the retrieved enforcement policy; and sending, from the vehicle, the filtered vehicle data to a device external of the vehicle.