California Attorney General Rob Bonta announced a record $12.75 million settlement with General Motors over CCPA violations. GM allegedly collected and sold driving and location data of California residents to data brokers Verisk Analytics and LexisNexis Risk Solutions between 2020 and 2024, without proper consumer notification or consent. The data was gathered via GM's OnStar subsidiary and 'Smart Driver' system for insurance-related driver scoring. As part of the settlement, GM must stop selling driving data for five years, delete retained data within 180 days unless consumers consent, request deletion from the brokers, and implement a stronger privacy compliance program. This is the largest CCPA civil penalty in California history and the first enforcement action focused on data minimization rules. The FTC had previously banned GM from selling driver location data for five years.
