[JPLeRouzic]

I do not know for cars, but some major news websites in France and Germany are still not GDPR compliant (no cookie consent), yet nothing happens.

[closewith]

There's definitely a decided lack of enforcement across the bloc. Location data collected via vehicle telemetry would be a significant breach, though.