Canada

The collection, use, and disclosure of personal information must be limited to reasonable purposes, which organizations must identify to individuals at the time of collection ... Organizations must limit their collection of personal information to that which is necessary for the purpose identified to the individual.

That's what Canada's Vehicle Cyber Security Guidance says is required by Canadian privacy law. Maybe start enforcing that law, then? If that principle were adhered to in reality, cars wouldn't collect any sensitive data at all. It would not have intelligence value for friends or adversaries if it didn't exist.

Sure, let's go with this angle. If we collect all this data an enemy could gain access and use it to target Americans.

You know, any enemy could do this... foreign or domestic...

Every time I see something about sppooooky nefarious Chinese gonna use their hypnotizing baubles to trick Canadians into feeding their data into the gaping maw of CCP.. it is describing an already widely-deployed mechanism.

If there were effective privacy regulations in place that applied to everybody we wouldnt need to do this every time.

"The risk that Canadian data collected by connected vehicles are accessed and exploited increases when these data are sent to — or transit through — foreign jurisdictions with more permissive data management frameworks."

So... the USA?

This has already been reported on, and it's actually Israel that currently hacks the cars onboard e-sim to geo-locate. Also cars systems don't have robust cyber security and can also get hacked through that e-sim.

But now it's scary because China is sending cars over.

it's so embarassing that this is framed directly at Chinese vehicles and not the ones already widely sold around Canada that are already doing this and owned by hostile nation(s)