California Code, Vehicle Code - VEH § 28226

(a) If a covered provider terminated a person's access to connected vehicle service in response to a connected vehicle service request, the covered provider shall not provide to the person any data or information regarding the driver, the vehicle, or any new connected vehicle service account that was generated after that person's access to the connected vehicle service was terminated.

(b) A covered provider shall ensure that all personal information provided during the process to terminate a person's access to connected vehicle service is handled with appropriate security and privacy, adhering to relevant data protection laws and regulations.

(c) A covered provider and any officer, director, employee, vendor, or agent thereof shall treat any information submitted by a driver pursuant to this article as confidential and shall comply with applicable privacy laws.

(d) A covered provider shall not share information submitted by a driver pursuant to this article with any third party without the affirmative consent of the driver, unless sharing that information is required to effectuate a connected vehicle service request.

(e) Nothing in this section shall preclude a covered provider from responding to a court order or warrant.