It is probably a privacy nightmare, like any modern car. Biggest difference is probably in which law sphere you reside and if it has any meaningful data protection legislation.