Privacy governance in the automotive sector