General Motors has agreed to pay $12.75 million to resolve a two year legal dispute with California prosecutors over the alleged misuse of customer driving data. The settlement marks a significant development in consumer privacy enforcement within the automotive industry.
California Attorney General Rob Bonta led the case which accused the automaker of collecting and sharing detailed driving behavior data from millions of vehicles without proper customer consent. The lawsuit contended that GM gathered information such as speed, location, and braking patterns and then sold that data to third parties including insurance companies.
Details of the Settlement
The $12.75 million penalty includes $9.2 million in civil penalties and $3.55 million to cover the state’s legal costs and investigative expenses. GM has not admitted any wrongdoing as part of the settlement but has agreed to implement new data handling protocols.
The company will also be required to obtain explicit opt in consent from California customers before collecting or sharing their driving data. This consent mechanism must be clear and separate from other terms of service agreements.
Consumer Privacy Implications
This case highlights growing scrutiny around data collection practices in connected vehicles. Modern cars increasingly transmit real time telemetry data including driving habits, location history, and vehicle performance metrics to manufacturers and their partners.
Privacy advocates have raised concerns that such data can be used to adjust insurance premiums, target advertisements, or even monitor individual behavior without transparency. The settlement sets a precedent for how automakers must handle sensitive customer information particularly in states with strong privacy laws such as California.
The California Consumer Privacy Act grants residents the right to know what personal data is collected and to request its deletion. The GM case is one of the first major enforcement actions specifically targeting connected vehicle data practices under this law.
Industry Response and Future Outlook
General Motors stated that it has already changed its data collection and sharing procedures to align with the settlement terms. The company emphasized its commitment to customer privacy and said it will continue to cooperate with regulators.
Other automakers are now expected to review their own data practices to avoid similar legal challenges. Regulators in other states may also pursue investigations as consumer awareness of vehicle data privacy increases.
The settlement does not affect any separate class action lawsuits filed by private plaintiffs against GM over the same data sharing practices. Those cases remain pending in federal court.
California Attorney General Bonta said the resolution sends a clear message to the industry that deceptive data collection will not be tolerated. He called on consumers to remain vigilant about how their driving information is collected and used.
Moving forward, GM must submit regular compliance reports to the California Department of Justice for the next five years. The company also faces potential further penalties if it fails to adhere to the new consent and transparency requirements outlined in the settlement agreement.
