[PeterisP]

It's not a person requesting data about themselves under GDPR, it's the dutch prosecutors and courts requesting data from Tesla for a criminal investigation. "they" is not the driver but the dutch authorities; GDPR simply is not relevant at all for this case (e.g. GDPR article 2.d explicitly states that GDPR does not apply to activities like these), general rules of criminal process and court orders apply.

[ifjimelse]

Yes, that’s true. I was more thinking about the general research they were doing into establishing what data various Tesla models record. i.e. purchase a vehicle, drive it around (perhaps crash it if the research grant can stretch to that), submit a SAR. Any discrepancy between what personal data Tesla provide and what they found when they decrypted it themselves feels like the main story here to me.