The automaker must now obtain express consent before collecting or sharing driver data.