{"id":245975,"date":"2026-05-14T13:02:00","date_gmt":"2026-05-14T17:02:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/05\/14\/five-lessons-from-californias-onstar-privacy-settlement-sheppard\/"},"modified":"2026-05-14T13:30:08","modified_gmt":"2026-05-14T17:30:08","slug":"five-lessons-from-californias-onstar-privacy-settlement-sheppard","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/05\/14\/five-lessons-from-californias-onstar-privacy-settlement-sheppard\/","title":{"rendered":"Five Lessons From California\u2019s OnStar Privacy Settlement | Sheppard"},"content":{"rendered":"

Five Lessons From California\u2019s OnStar Privacy Settlement | Sheppard<\/a><\/p>\n

https:\/\/www.jdsupra.com\/legalnews\/five-lessons-from-california-s-onstar-5223883\/<\/a><\/p>\n

Publish Date: 2026-05-14 13:02:00<\/a><\/p>\n

Source Domain: www.jdsupra.com<\/a><\/p>\n

Key Takeaways<\/h3>\n

California has reached a $12.75 million settlement with General Motors over the company\u2019s treatment of OnStar driving data. This case follows a similar settlement between the company and the Federal Trade Commission, finalized in January.<\/p>\n

According to CalPrivacy\u2019s press release, GM collected both contact information and geolocation and driving\u2011behavior data from OnStar users. The summary of facts from CalPrivacy aligns with the FTC\u2019s description of GM\u2019s OnStar program. According to the FTC\u2019s complaint, OnStar users could decline to accept the OnStar terms and privacy policy, but if they did, the FTC alleged the enrollment process was confusing and did not clearly explain which features would work and which would not work.<\/p>\n

Both California and the FTC allege that the OnStar data was sold to two data brokers: LexisNexis and Verisk. These entities, they argued, used the data for driver\u2011rating products marketed to auto insurers. This despite, according to CalPrivacy, the fact that this sharing was not disclosed in the GM privacy policy.<\/p>\n

GM has settled with CalPrivacy, as it did with the FTC. It has agreed to pay $12.75, the largest CCPA penalty to-date (subject to court approval). There are many lessons about regulatory expectations that companies can learn from the settlement terms. These are helpful in the connected device space \u2013 and beyond:<\/p>\n

    \n
  1. Assess how you will minimize data collection and retention<\/strong>: Regulators are concerned about the amount of information companies collect and retain. Here, in what CalPrivacy is stating is the first CCPA case about data minimization, GM agreed to delete previously-retained driving data (subject to limited exceptions) and to request that LexisNexis and Verisk delete the driving data they received from GM. For the next five years, GM has also agreed not sell driving data to consumer reporting agencies for 5 years.<\/li>\n
  2. Evaluate your process for obtaining consent<\/strong>: Providing notice and getting…<\/li>\n<\/ol>\n

    Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

    Five Lessons From California\u2019s OnStar Privacy Settlement | Sheppard https:\/\/www.jdsupra.com\/legalnews\/five-lessons-from-california-s-onstar-5223883\/ Publish Date: 2026-05-14 13:02:00 Source…<\/p>\n","protected":false},"author":1,"featured_media":245976,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/jdsupra-static.s3.amazonaws.com\/profile-images\/og.2105_3218.jpg","fifu_image_alt":"","footnotes":""},"categories":[16],"tags":[138],"class_list":["post-245975","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-privacy","tag-california-consumer-privacy-act"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/245975"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=245975"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/245975\/revisions"}],"predecessor-version":[{"id":245977,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/245975\/revisions\/245977"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/245976"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=245975"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=245975"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=245975"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}