All functions that a consumer could reasonably expect a car to perform without an internet connection must be operable without an internet connection. All features related to driving the vehicle, including but not limited to steering, braking, using traffic signals, starting/stopping, toggling locks or lights, opening or closing doors or compartments, and other standard features of a non-connected car must not require a network connection.

I think it’s probably OK if automakers want to onboard and support network features like maps or outsourced computation/diagnostics, but bricking everything because the company wants to collect user data and they want to opt out is obviously unethical. It’s important for these regulations to include the fact that they cannot be worked around or stapled on by the auto company post-hoc via firmware upgrades or the like.