

The collection, use, and disclosure of personal information must be limited to reasonable purposes, which organizations must identify to individuals at the time of collection … Organizations must limit their collection of personal information to that which is necessary for the purpose identified to the individual.
That’s what Canada’s Vehicle Cyber Security Guidance says is required by Canadian privacy law. Maybe start enforcing that law, then? If that principle were adhered to in reality, cars wouldn’t collect any sensitive data at all. It would not have intelligence value for friends or adversaries if it didn’t exist.







Federal and municipal social media bans are also unlikely to work. It’s best regulated at the household level.
Much as I would like to completely ban everyone in the world from visiting facebook and twitter, you can’t really do that and still pretend to have a free society that cares about human rights. What you could do instead is outlaw the surveillance capitalist business model they depend on — universally, through strong privacy laws not aimed specifically at social media or any other narrowly-defined type of application.