|
Work item:
|
X.piimaas-sec
|
|
Subject/title:
|
Security requirements and guidelines for the protection of personally identifiable information in mobility as a service
|
|
Status:
|
Under study
|
|
Approval process:
|
TAP
|
|
Type of work item:
|
Recommendation
|
|
Version:
|
New
|
|
Equivalent number:
|
-
|
|
Timing:
|
2028-09 (Medium priority)
|
|
Liaison:
|
ISO/IEC JTC 1/SC 44, CITS
|
|
Supporting members:
|
ETRI, Hyundai Motor Company
|
|
Summary:
|
Mobility as a service (MaaS) is an integrated service model that enables users to plan, book, pay for, and manage multimodal transport services through digital platforms. MaaS typically combines public transport, taxis, ride-hailing, car sharing, bike sharing, micro-mobility, parking, and other transport-related services into a unified user experience. To provide such integration, MaaS platforms process various types of personally identifiable information (PII), including user account information, payment data, location data, trip history, booking records, device identifiers, and user preferences.
As MaaS ecosystems become more data-driven and personalized, unauthorized PII exposures increase accordingly. These risks include excessive collection of user data, persistent tracking of travel behaviour, unauthorized linkage of identity and location, insufficient transparency in cross-provider data sharing, and inadequate deletion of PII when users terminate services. Such risks are intensified because MaaS involves multiple stakeholders, including MaaS platform providers, transport operators, payment service providers, map and navigation providers, and other third parties.
To address these security considerations, this Recommendation provides a security threat analysis and specifies security requirements for the protection of PII in MaaS. Furthermore, this Recommendation provides how to protect PII to fulfill the security requirements.
|
|
Comment:
|
-
|
|
Reference(s):
|
|
|
Historic references:
|
|
Contact(s):
|
|
| ITU-T A.5 justification(s): |
|
|
|
|
First registration in the WP:
2026-06-10 12:28:47
|
|
Last update:
2026-06-10 12:30:13
|
|
