Overview
- California’s attorney general and four county district attorneys announced a settlement with General Motors that requires a payment between $12.5 million and $12.75 million, pending court approval.
- Prosecutors say GM collected OnStar users’ names, contact details, GPS locations, and driving behaviors such as speed, rapid acceleration, and hard braking, then sold data from 2020 to 2024 to LexisNexis and Verisk.
- The agreement bars GM from selling Californians’ driving data to consumer reporting agencies for five years.
- GM must delete any retained driving data within 180 days unless a customer gives express consent, request that LexisNexis and Verisk purge the data, and build a privacy program with required reporting to state authorities.
- Officials called it the largest penalty to date under the California Consumer Privacy Act, and the terms follow a 2025 FTC order, a combination that could curb how car data reaches insurers even as California bans using driving data to set rates.