I think it may be theoretically possible, but I don't think it will be implemented in a way that will work when it's mandated by law. Betting against regulations fulfilling their advertised purpose is usually a good bet. I think the most likely outcome of this is that it will make no difference to any driver, but that cars will be a little more expensive and collect more data that can be used for harmful purposes. Regardless, if we shouldn't assume that it will be harmful, we also shouldn't assume that it will be helpful.
EDIT: I have now read the article and would like to retract my guess that it will make no difference. It says that this will "require that the system be 'open' to remote access by 'authorized' third parties at any time". That's absolutely catastrophic and will almost certainly kill people.