OnStar Smart Driver program
Largest CCPA fine on record. GM collected driving behavior and precise geolocation from OnStar-equipped vehicles and shared it with data brokers including Verisk Analytics and LexisNexis Risk Solutions without obtaining meaningful consumer consent. Settlement requires GM to stop selling consumer driving data to credit reporting agencies for five years, delete driving data collected within the last 180 days, and request deletion from downstream data brokers.