Citizen surveillance and corruption was the reason I started disliking cameras on public places.
As it stands today, the only privacy that you have today in a vehicle is the amount of money it takes to get information from someone who runs a tow truck.
The police are mum, as the ever present LPR makes it trivial to track anyone. My buddy owns a local pizza place and has a bunch of cameras with LPR. He routinely provides data to the local PD. There’s no rule about it - he can give that info to me.
You can be sure that this information is collected and aggregated by many commercial entities and used to correlate where shoppers shop, where fleet cars go, etc.
Beyond individual camera data, there’s already huge amount of behavioral data you can legally buy (usually from tracking apps the users either willingly chose to use as such, or didn’t fully understand it what it would do) and probably associate with other databases to get individual profiles.
Even full on data breaches associated with complete identifying data have had very little impact on the control we have on them. The companies leaking millions of records didn’t get much more than a stern look and a slap on the wrist from regulators around the globe, and the EU is the only entity starting to take it seriously at this point.