The automaker must now obtain express consent before collecting or sharing driver data.

— Summary