What they're not telling you: # General Motors Paid $12.75 Million to Quietly Settle California's Probe Into Selling Driver Location and Behavior Data General Motors agreed to pay $12.75 million to resolve a California investigation into allegations that it illegally sold precise location data and driving behavioral information belonging to OnStar subscribers to data brokers—a practice that transformed intimate details about millions of drivers' movements into a commodity without explicit consent. The settlement emerged from California authorities' examination of how GM monetized OnStar's access to real-time GPS coordinates, speed records, acceleration patterns, and braking behavior of vehicle owners. According to the investigation, GM sold this granular tracking data to third-party data brokers who then packaged and resold it to insurance companies, employers, and other commercial entities.
What the Documents Show
This created a shadowy ecosystem where a driver's precise location at any given moment—whether outside a competitor's office, a medical facility, or a bar—became tradeable intelligence available to entities the driver never agreed to share with. The scale of this operation underscores a critical gap between what consumers believe they're consenting to and what actually happens with their data. Most OnStar subscribers likely understood they were signing up for roadside assistance and navigation services. Few would reasonably interpret those terms as permission to transform their real-time whereabouts into a revenue stream. Yet GM's business model treated location and driving data as extractable assets, analogous to minerals or timber.
Follow the Money
The California investigation specifically probed whether GM violated state law by selling this information without obtaining explicit, informed consent from subscribers—a legal threshold substantially higher than the fine-print terms of service most users never read. What distinguishes this case from routine corporate privacy breaches is the intentionality of the data monetization. This wasn't a security failure or accidental exposure. GM deliberately constructed and operated a system designed to harvest and commercialize subscriber data. The company identified a valuable commodity in the detailed driving records of millions of Americans and built infrastructure to extract and sell it. For years, this practice apparently generated significant revenue while subscribers remained unaware their movements were being tracked and sold.
What Else We Know
The $12.75 million penalty merits scrutiny as to whether it functions as genuine accountability or merely as a cost of doing business. For context, GM's annual revenue exceeds $120 billion. The settlement amount represents roughly one-hundredth of one percent of annual revenue—a figure that raises questions about whether financial penalties at this scale create sufficient incentive to change corporate behavior. If data monetization generates millions in profit while fines top out in the low millions, the calculus remains favorable to violations. This settlement also reveals how data intermediaries operate largely beyond public scrutiny. The investigation focused on GM's role, but the broader ecosystem of data brokers who purchased, repackaged, and resold this information remains largely unnamed and unexamined.
Primary Sources
- Source: r/privacy
- Category: True Crime
- Cross-reference independently — don't take our word for it.
Disclosure: NewsAnarchist aggregates from public records, API feeds (Federal Register, CourtListener, MuckRock, Hacker News), and independent media. AI-assisted synthesis. Always verify primary sources linked above.

