Method of secure data export from an automotive ECU to a requesting entity (101; 102), comprising, at the automotive ECU : - receiving a data export request from the requesting entity (101; 102), the data export request including a first public key of a first public/private key pair, wherein the first public key is signed with a second private key of a second public/private key pair, the data export request further including a certificate indicating an expiry date or a time period of validity of the first public key, - verifying the signature of the received first public key using a copy of the second public key of the second public/private key pair that is stored in a memory of the automotive ECU , - authenticating the requesting entity (101; 102), the method further including, if the authentication and the verification are successful: - generate a random symmetric key, - reading data to be exported in accordance with the request from a first storage space of the automotive ECU's memory into a volatile memory of the automotive ECU, - encrypting the data read into the volatile memory of the automotive ECU using the symmetric key, generating a message authentication code using the symmetric key, storing the encrypted data and the message authentication code in the volatile memory of the automotive ECU, - encrypting the symmetric key using the first public key, - combine the encrypted symmetric key, the encrypted data and the message authentication code into an export data set, - delete the first public key, the unencrypted data, the message authentication code and the symmetric key from the volatile memory of the automotive ECU, - transmit the export data set, or grant read access to the memory space storing export data set, to the requesting entity, and - delete the export data set from the volatile memory of the automotive ECU. - receiving a data export request from the requesting entity (101; 102), the data export request including a first public key of a first public/private key pair, wherein the first public key is signed with a second private key of a second public/private key pair, the data export request further including a certificate indicating an expiry date or a time period of validity of the first public key, - verifying the signature of the received first public key using a copy of the second public key of the second public/private key pair that is stored in a memory of the automotive ECU , - authenticating the requesting entity (101; 102), - generate a random symmetric key, - reading data to be exported in accordance with the request from a first storage space of the automotive ECU's memory into a volatile memory of the automotive ECU, - encrypting the data read into the volatile memory of the automotive ECU using the symmetric key, generating a message authentication code using the symmetric key, storing the encrypted data and the message authentication code in the volatile memory of the automotive ECU, - encrypting the symmetric key using the first public key, - combine the encrypted symmetric key, the encrypted data and the message authentication code into an export data set, - delete the first public key, the unencrypted data, the message authentication code and the symmetric key from the volatile memory of the automotive ECU, - transmit the export data set, or grant read access to the memory space storing export data set, to the requesting entity, and - delete the export data set from the volatile memory of the automotive ECU. <EOS>