The govt is selling our vehicle data – with no framework to protect our privacy