May 8, 2026: General Motors to Pay $12.75M to Settle California Consumer Protection Lawsuit Alleging Data Privacy Violations (Los Angeles County District Attorney's Office)
Under the settlement, subject to court approval, General Motors must pay civil penalties totaling $12.75 million. With respect to California OnStar customers, General Motors must:
● Stop selling driving data to any consumer reporting agencies for five years, including to data brokers like Lexis and Verisk;
● Delete any driving data retained by the company within 180 days, except for certain limited internal uses, absent affirmative, express consent from consumers;
● Request Lexis and Verisk delete driving data;
● Develop and maintain a robust privacy program that is required to assess, mitigate, and document the risks of collecting data through OnStar and ensure that General Motors complies with the California Consumer Privacy Act;
● Report its privacy assessments to the California Department of Justice, the California Privacy Protection Agency and the district attorneys offices of Los Angeles, Napa, San Francisco and Sonoma counties.
https://da.lacounty.gov/media/news/general-motors-pay-1275m-settle-california-consumer-protection-lawsuit-alleging-data