GM agrees to $12.75M California settlement over sale of drivers’ data
Summary
General Motors has agreed to a proposed $12.75 million settlement with California over allegations of violating the California Consumer Privacy Act (CCPA). The lawsuit claimed that GM illegally sold drivers' data without proper consent. This settlement addresses concerns about how personal data is collected, shared, and protected.
IFF Assessment
This settlement imposes penalties on a company for mishandling consumer data, which is a positive development for data privacy and security defenders.
Defender Context
This case highlights the significant financial and reputational risks companies face for non-compliance with data privacy regulations like the CCPA. Defenders should be aware of the evolving legal landscape around data usage and ensure their organizations have robust data governance and consent management practices.