The proposed, nonbinding guidance stresses protection of critical vehicle controls and consumers’ personal data.