Finding
Every production autonomy system already runs its driving decisions on board; data autonomy is now being decided by governments, which require car data to stay inside their borders
Waymo, Tesla FSD, Baidu Apollo Go, Pony.ai and every humanoid program run perception and planning on the vehicle or robot, because a car at 70 mph covers 8 feet in a typical cloud round trip and stops getting answers in an outage. The cloud handles training, fleet analytics and remote assistance, not the control loop.
The harder question is who controls the data and models. China has required vehicle data collected in China to be stored in China since its 2021 automotive data rules, which is why Tesla built a Shanghai data center. The US Commerce Department's January 2025 connected-vehicle rule bars Chinese and Russian vehicle software from model year 2027 and hardware from model year 2030. The EU AI Act phases in obligations for high-risk systems over 2026-27. Each rule pushes fleets toward in-region training, local storage and auditable models.
Open-weight models make local control practical for plants, hospitals and depots: Meta Llama, Alibaba Qwen, DeepSeek, Mistral and OpenAI's gpt-oss can run on owned hardware. Data sits fifth in the Six Foundation Domains, after materials, silicon, energy and thermal, because local inference needs local compute, power and cooling, and just before Operational Autonomy, because a site cannot run without people if its decisions belong to someone else.
Domains
What data autonomy covers
| Domain | What it includes | Named examples |
|---|---|---|
| Inference control | On-device, edge and on-premise inference for critical functions | Tesla AI4, Nvidia DRIVE Thor, Horizon Journey 6, Nvidia Jetson Thor in robots |
| Model sovereignty | Owned, open-weight or auditable models with known lineage | Meta Llama, Alibaba Qwen, DeepSeek, Mistral, OpenAI gpt-oss |
| Data-flow control | What leaves the site, under what retention and training terms | In-country storage (Tesla Shanghai); private cloud regions |
| Auditability | Logging, decision traceability, validation records | Event data recorders; safety cases under UL 4600 and ISO 21448 |
| Training-loop governance | Approved retraining, dataset provenance, staged OTA updates | Fleet OTA release gates; shadow-mode validation |
Rules
Data rules shaping autonomy
| Jurisdiction | Rule | Effect on fleets |
|---|---|---|
| China | Automotive data security provisions (2021); data export security reviews | Vehicle data stored and trained in China; foreign OEMs build local data centers |
| United States | Commerce connected-vehicle rule (January 2025) | Chinese and Russian vehicle software barred from MY2027, hardware from MY2030 |
| European Union | AI Act (in force August 2024); GDPR; Data Act | High-risk AI obligations phase in over 2026-27; data portability for connected products |
| United States | Export controls on advanced AI chips | Limits which compute China-based training can use |
Readiness
Data readiness bands
ElectronsX rating scale.
| Band | Primary inference | Characteristics |
|---|---|---|
| DA-0 Dependent | Cloud only | Proprietary remote models; operations stop without the vendor |
| DA-1 Aware | Cloud, some edge | Latency-critical functions local; risk mapped |
| DA-2 Hybrid | Critical functions local | Auditable models for sensitive work; data flows documented |
| DA-3 Autonomous | Local or federated | Owned weights, controlled training data; cloud only for auxiliary tasks |
Sources
Sources and scope
- Scope
- Data Autonomy
- Sources
- CAC automotive data provisions (2021); US Commerce BIS connected-vehicle rule (January 2025); EU AI Act; company disclosures
- Updated
- October 2026