GDPR, to the extent that this data collection also occurs with European vehicles
Are you sure there aren't local data privacy rules elsewhere that this also violates? GDPR itself basically just unified the existing privacy laws across ~EU member states.
I was thinking about the USA in my post, but if the GDPR protects against this then that's great. I've also seen mention that in e.g. Germany the standard EULA is basically illegal (or at least unenforceable) because you can't reasonably agree to it.