What's Happening?
General Motors (GM) has agreed to a $12.75 million settlement with California authorities over allegations of privacy violations involving driver data. The settlement, led by California Attorney General Rob Bonta, addresses claims that GM sold personal
data, including names, contact information, geolocation, and driving behavior of hundreds of thousands of Californians to data brokers Verisk Analytics and LexisNexis Risk Solutions. This data was reportedly collected through GM's OnStar program, generating approximately $20 million in revenue for the company. Despite these sales, the data did not affect insurance rates in California due to state laws prohibiting the use of driving data in setting insurance prices. As part of the settlement, GM will cease selling driving data to consumer reporting agencies for five years and will delete any retained driver data within 180 days unless customer consent is obtained.
Why It's Important?
This settlement underscores the growing scrutiny and regulatory actions surrounding data privacy, particularly in the automotive industry. The case highlights the tension between technological advancements in vehicle connectivity and consumer privacy rights. For GM, this settlement not only involves financial penalties but also mandates changes in data handling practices, reflecting a broader industry trend towards increased transparency and consumer protection. The outcome serves as a warning to other companies about the legal and reputational risks of mishandling consumer data. It also reinforces California's position as a leader in privacy legislation, potentially influencing similar actions in other states or at the federal level.
What's Next?
Following the settlement, GM is required to implement stricter data privacy measures and halt the sale of driving data to consumer reporting agencies for a specified period. The company must also ensure the deletion of existing data unless explicit consent is obtained from customers. This case may prompt other automakers to review and possibly revise their data collection and sharing practices to avoid similar legal challenges. Additionally, the settlement could lead to increased legislative efforts to strengthen data privacy laws across the United States, potentially impacting how companies across various sectors handle consumer data.
