General Motors has agreed to pay $12.5 million to settle allegations that it illegally collected and sold California drivers’ location and driving data.
According to California prosecutors, GM sold drivers’ names, contact information, location data, and driving behavior records to data firms including Verisk Analytics and LexisNexis Risk Solutions between 2020 and 2024. Authorities said the information was gathered through the company’s OnStar vehicle services platform.
California Attorney General Rob Bonta said companies that illegally collect and sell consumer data “will be held accountable.” Officials described the settlement as the largest fine imposed under the California Consumer Privacy Act (CCPA) since the law took effect.
GM said it shut down the “OnStar Smart Driver” program in 2024 and ended its relationships with the data companies involved. If approved by the court, the settlement would require GM to delete the related driver data within 180 days and prohibit the company from selling driving data for the next five years.
Authorities also warned that vehicle data could be misused in determining insurance premiums and could pose serious privacy concerns for consumers.
