GM fined $12.75M for selling OnStar data in California

• GM to pay $12.75 million in record California privacy settlement
• Five-year ban imposed on selling California drivers’ personal location data
• State investigation found OnStar users’ information was sold without consent

According to Reuters on May 8, 2026 (UTC), General Motors (GM) has agreed to pay $12.75 million to settle a California investigation into allegations that it sold location and driving data from OnStar users to data brokers without the explicit consent of those users. This settlement, a record under the California Consumer Privacy Act, puts strict requirements on GM’s data handling and consumer privacy practices in the state.

California authorities alleged that GM provided sensitive information about drivers’ locations and driving habits to Verisk Analytics and LexisNexis Risk Solutions. Under the settlement, GM must permanently delete any retained driver data within 180 days unless customers provide clear consent to continued retention. Additionally, GM is required to request both data brokers delete the previously sold consumer data.

The agreement prohibits GM from selling California drivers’ personal data for five years. The California Privacy Protection Agency and several district attorneys led the enforcement action against the automaker.

Separately, the U.S. Federal Trade Commission imposed its own five-year restriction in January 2025, barring GM from sharing or selling driver data to consumer reporting agencies.

The California settlement is subject to court approval, according to Reuters.