Comment by danieldk
That is about a data leak. How do you know if the data wasn't collected with(out) consent?
If VW collected this data without consent, the data protection authorities or the EC are going to have a field day.
(By the way, the GDPR also has ramifications for data leaks of legally collected data. E.g. there is a requirement to report this to the authorities within 72 hours after becoming aware of the breach: https://gdpr-info.eu/art-33-gdpr/ )
Apparently it was disclosed well enough for it to not come as a surprise to people, including German politicians (https://www.spiegel.de/netzwelt/web/volkswagen-konzern-daten...)
But fair, it's probably disclosed somewhere in a 80 page EULA for the app.