Like the plastic industry, the auto industry is much too powerful for government to stand up to it. Could this be accomplished through regulation? That might be an easier bar to clear, but perhaps there is another target: the data carriers themselves. If a rule could be implemented that the carrier of personal data must insurer proper consent and notice, it might be a half measure.