GM Agrees to $12.75M Settlement Over Driver Data Sales in California
California fines GM for selling driver data without consent, a record penalty.
General Motors (GM) has agreed to pay California $12.75 million over claims it breached the California Consumer Privacy Act (CCPA). Allegedly, GM collected and sold driver data without consent.
Allegations and Settlement
The focus is on GM's OnStar and 'Smart Driver' systems. These reportedly shared driving and location data with brokers like Verisk Analytics and LexisNexis Risk Solutions from 2020 to 2024. This is the largest CCPA-related penalty so far.
Attorney General Rob Bonta said GM sold data without drivers knowing, despite promises otherwise. The data included detailed location info, revealing personal habits.
Settlement Terms
GM must do several things beyond paying up:
- Stop selling driving data to consumer agencies and brokers for five years.
- Delete driving data within 180 days unless drivers say it's okay to keep it.
- Ask LexisNexis and Verisk to delete past data.
- Beef up its privacy program and check in with regulators regularly.
California officials noted that state laws probably kept drivers' insurance rates from spiking due to these data sales.
Auto Industry and Data Privacy
The auto industry faces more scrutiny over data privacy as cars get smarter. The Federal Trade Commission (FTC) had previously slammed GM for similar issues, resulting in a five-year data sales ban.
This GM case is key for enforcing data rules, warning companies to follow privacy laws.
What's Still Unclear:
- How will GM's compliance be monitored going forward?
- What exact steps will GM take in its privacy program?
- Could this spark more lawsuits against other car makers?
Why This Matters:
This settlement highlights the rising importance of data privacy, especially in industries handling tons of personal info. It sets a standard for enforcing privacy laws on big companies, particularly in tech-heavy fields like automotive. As cars get more connected, protecting consumer data is crucial.
More from Security
Checkmarx Jenkins Plugin Compromised by TeamPCP Malware
TeamPCP infiltrated Checkmarx's Jenkins AST plugin with credential-stealing malware. Users should rotate secrets and check for breaches.
iOS 26.5 Update Addresses Over 50 Security Vulnerabilities—Update Now
Apple's iOS 26.5 fixes over 50 security flaws. Update your iPhone now to stay secure.
Malware Disguised as OpenAI Found on Hugging Face
A fake OpenAI repo on Hugging Face pushed malware disguised as AI tools, targeting Windows users with info-stealing tactics.
US Men Sentenced for Assisting North Korean IT Espionage
Two Americans were sentenced for helping North Korean agents pretend to be IT workers in a massive espionage and financial scam.
Don’t miss these
OpenAI Launches Daybreak: A New AI Initiative for Cybersecurity
OpenAI rolls out Daybreak, an AI initiative to catch vulnerabilities before hackers do. It uses Codex and other models for better security.
James Webb Telescope Reveals New Insights into the Cosmic Web
Astronomers have used the James Webb Telescope to map the cosmic web, revealing intricate details of the universe's structure.
Anker Nano GaN Charger Now Just $22: Compact Power for All Devices
Anker's Nano GaN II charger packs 65W in a tiny form, now at $22—perfect for travel and versatile charging.
Vin Diesel Announces Four Fast & Furious Shows Coming to Peacock
Vin Diesel announces four Fast & Furious TV series on Peacock, marking a new venture for the franchise.
Apple Gets Court OK to Seek Samsung Docs in Antitrust Fight
A U.S. court has given Apple the green light to request documents from Samsung in South Korea for its DOJ antitrust case.
Lego Batman Game Leak Sparks Spoiler Fears
Early access to Lego Batman: Legacy of the Dark Knight on Xbox via Walmart codes raises spoiler concerns ahead of the official launch.