🧠 Food for thought

Implications, context, and why it matters.

GM faces record privacy settlement over alleged data misuse

• California fined GM US$12.75 million, the largest penalty yet under the California Consumer Privacy Act (CCPA), a California privacy law. It is also the first case tied to the law’s data minimization rule 1.
• That rule limits how companies use, keep, or share personal data. Regulators said GM kept Californians’ driving and location records after OnStar no longer needed them, then sold the stored data 1.
• GM’s privacy policy said it did not sell driving or location data. Regulators said GM sold that information to LexisNexis Risk Solutions, a company that provides risk and data products 1. Regulators also named Verisk Analytics, Inc., a data analytics company 1.
• The case followed 2024 scrutiny of automakers sharing driving behavior data with insurers. It began when one person found their location data in a report they requested, said Nathan Hochman, Los Angeles County district attorney 2.

Automakers’ software push meets tougher privacy rules

• California also settled privacy cases with Honda and Ford during the past 14 months 2.
• GM expects software and services revenue to rise by about US$400 million in 2026 3.
• The automotive data monetization market could reach US$173.2 billion by 2030 4.
• The settlement adds pressure to carmakers that want revenue from connected-vehicle data as privacy enforcement picks up 4.