Self-driving truck startup TuSimple sent a trove of sensitive data to a Beijing-owned firm after committing to the U.S. government that it would cease such transfers under a national security agreement