Retain all sensor data forever: absolutely not, and the storage requirements would be insane anyway, especially in a harsh automotive environment (think industrial SSD pricing)

Push back e.g. updated model data to help with updating routes, real-time construction developments, new driveways, ways humans make mistakes on the road, etc? I believe that every AV company will be doing this, and hopefully this data is useless to law enforcement.

OTA updates? Tesla already does. It won’t even be a choice, and that’s probably a good thing. Many people who don’t work with computers professionally don’t see the importance of updating things. In a situation where software updates could literally prevent deaths, I’m pretty sure that it will be mandatory to have vehicles receive OTA updates that can’t be disabled.