You’re right, of course, but we shouldn’t really need a GDPR when we should already have an established reasonable expectation of privacy inside a car. Google search takes me to lawyers who agree, for what that’s worth… https://dworkenlaw.com/when-can-the-police-search-my-vehicle....
A person can give up their right to privacy to any officer of the law, and to a corporation just as easily.
US corporations now demand you give up all rights that the law permits you to give up, and they do so by shrinkwrap licenses that are “take it or leave it”, while denying the ability to deactivate a reasonable and small subset of functionality if the buyer disagrees.
This is typically where regulation steps in, and does so quite successfully in the EU but not the US, to say that consumers may not contractually give up their right to privacy without express, plainly-sought consent — so, not just shrinkwrap licenses — and that refusal or revocation of that consent shall not deny someone access to functionality that can be reasonably delivered without it. The US has its work cut out for it to catch up here.
