- Company
- General Motors
- Regulator or court
- California Attorney General, four district attorneys and the California Privacy Protection Agency
- Law
- California Consumer Privacy Act (CCPA)
- Status
- Settlement
What happened
From 2020 to 2024 GM sold names, locations and driving-behaviour data collected through OnStar on hundreds of thousands of Californians to two data brokers building driver ratings for insurers. Officials said GM gave no notice of these sales, misled drivers about how the data would be used, and kept it longer than allowed. It was California's largest CCPA penalty and its first case on data minimisation; the court approved an amended judgment in June 2026.
Sources
California AG press release (8 May 2026)Court-approved amended judgment, People v. GM (30 June 2026)Summary in our own words. General information, not legal advice.