To be fair… Currently the law also states that the data processing needs to happen locally and no data may leave the car. The new law certainly introduces potential for abuse, especially since auto makers have proven themselves in recent years to be willing to break laws if it benefits them (Dieselgate anyone?). But as of now your fears are mostly unfounded.