GM is facing a California privacy settlement over OnStar data sales. This page breaks down what data was shared, who it went to, and what restrictions GM now faces—plus what this means for consumer privacy and car tech going forward. Read on for quick answers to the questions people are asking right now.
GM collected driver data via OnStar, including names, contact information, geolocation, and driving behavior. That data was sold to data brokers such as Verisk Analytics and LexisNexis Risk Solutions between 2020 and 2024. The California settlement imposes limits on how this data can be used and shared going forward, reflecting a push to tighten protections around location and driving data.
GM will face a five-year ban on selling driving data to data brokers and new usage restrictions on how OnStar data can be used. The settlement also requires court approval for the payout and outlines continued oversight under California privacy regulations, signaling heightened scrutiny of data sharing practices in the auto sector.
The settlement signals stronger privacy safeguards for drivers and tighter control over how car data is monetized. It could influence how automakers collect, store, and share location and driving-data. Expect more transparent disclosures, clearer opt-outs, and potential new standards for seller-broker relationships in the automotive industry.
California’s action focused on the sale of OnStar-collected data to data brokers between 2020 and 2024. The civil settlement, described as the largest under the California Consumer Privacy Act’s framework, reflects ongoing state enforcement and a broader push to curb data sales without consumer consent.
The $12.75 million settlement requires court approval for the payout. Details on how funds will be allocated are typically outlined in the settlement terms, including any restitution-like provisions or contributions to privacy programs. The arrangement emphasizes accountability and ongoing regulatory oversight.
While this settlement targets GM, it signals a broader attention to how car brands handle driver data. Other automakers may face increased scrutiny, possible investigations, or voluntary changes to data-sharing practices as privacy laws evolve and regulators monitor the auto-tech data ecosystem.
General Motors agreed to pay $12.75 million in civil penalties for selling driving data of hundreds of thousands of California motorists to data brokers, allegedly without their consent.