:

GM PAYS $12.75M OVER ILLEGAL DATA SALES

AI DESK1 MIN READ
SAT, MAY 9, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

General Motors agreed to a $12.75 million settlement with California to resolve allegations that it illegally sold OnStar subscribers' location and driving data to third-party brokers.

The settlement concludes an investigation into GM's practice of monetizing personal vehicle data without proper consumer consent. OnStar, GM's connected vehicle service, collected location and driving information from millions of subscribers. California authorities found that GM sold this data to insurance companies, financial institutions, and other brokers—activities not adequately disclosed to customers. The automaker's terms of service allowed data sharing for "business purposes," but regulators determined this language was insufficient for such sales. The $12.75 million penalty reflects growing regulatory scrutiny of automakers' data practices. Regulators across multiple states have examined how car manufacturers handle vehicle and driver information as connected cars become more prevalent. GM did not admit wrongdoing in the settlement. The agreement includes restrictions on future data sales and requires enhanced transparency for OnStar subscribers about how their information is used and shared. The case underscores ongoing tensions between automakers' revenue opportunities and consumer privacy expectations in the connected vehicle era.

■ SOURCES

Techmeme

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

A security breach of Instructure's Canvas learning platform locked out students across US schools and universities during finals period. Several colleges postponed exams in response to the outage.

1H AGOSecurity Desk

A security breach of Canvas, a widely-used learning management platform, has disrupted classes and postponed final exams at numerous colleges and primary schools during the academic year's critical closing weeks.

1H AGOSecurity Desk

The European Union is pushing to close what it calls a "loophole" by restricting VPN use in age verification systems. The move aims to prevent minors from circumventing content restrictions on platforms.

1H AGOIndustry Desk

Age verification requirements for online platforms are becoming a defining regulatory issue. Tech communities are debating the practice's necessity and implications.

3H AGOIndustry Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.