As the automotive industry undergoes a transformative shift towards autonomous vehicles (AVs), the integration of advanced self-driving technologies presents new opportunities and challenges. [1] AVs, defined as systems capable of dynamic driving tasks with limited human intervention, are poised to revolutionize transportation. With governments, private firms, and research centers investing heavily in AV development, the realization of fully autonomous vehicles in everyday life appears imminent. The advent of self-driving cars brings forth novel prospects for passenger-centric services, including sophisticated information systems facilitating Passenger-AV interaction. [2] This interaction empowers passengers to supervise vehicle behavior, control destinations, and engage in high-level dialogue with AVs. However, as AV information systems collect and process sensitive passenger data, ensuring data privacy and security becomes paramount. To instill trust in self-driving technology and safeguard passenger privacy, stringent privacy and security measures must be implemented. Adhering to legislative mandates and organizational responsibilities is crucial to mitigate risks associated with data misuse and system compromise. [4, 5] Moreover, as AVs transition from Human-Computer Interaction (HCI) to Human-Robot Interaction (HRI), it is imperative to reassess information systems security risk management (ISSRM) procedures in the context of Passenger-AV interaction. This research focuses on investigating the applicability of ISSRM methods in HCI to ensure data privacy and security in Human-AV interaction scenarios, particularly Passenger-AV interaction. By scrutinizing the processing of sensitive personal data within AV information systems, the study aims to address emerging privacy and security challenges. [6] Emphasizing the legal imperative for information security and data privacy, this endeavor seeks to establish robust frameworks for protecting passenger data in the era of autonomous vehicles.