What they're not telling you: # GM Just Paid a Record Penalty for Breaking California privacy-law.html" title="GM just paid a record penalty for breaking California privacy law" style="color:#1a1a1a;text-decoration:underline;text-decoration-style:dotted;font-weight:500;">Privacy Law General Motors monetized the intimate driving habits of hundreds of thousands of Californians without their knowledge, raking in approximately $20 million before regulators caught up. The automaker agreed to pay $12.75 million in civil penalties for selling detailed driving data to data brokers, allegedly without genuine consent from the vehicle owners who subscribed to GM's OnStar service. The scheme worked like this: drivers paid for emergency roadside assistance and navigation features, never realizing their real-time location data, speed, acceleration patterns, and driving routes were being extracted and sold to third parties.
What the Documents Show
GM's settlement with California authorities reveals a systematic practice of treating customer data as a separate revenue stream distinct from the services customers believed they were purchasing. What makes this case particularly egregious is the deception embedded in how GM obtained consent. The company presented privacy terms to OnStar subscribers in ways that obscured the fact that their driving data would be commercialized. Drivers checking a box to activate OnStar features weren't explicitly told their behavioral data had market value—and that GM intended to profit from it. The $20 million gross revenue from these unlawful sales dwarfs the $12.75 million penalty, meaning the financial incentive for violating privacy laws remained positive even after enforcement action.
Follow the Money
This case exposes a gap in how tech-enabled companies extract value from consumers. While the mainstream narrative often focuses on social media platforms and their data practices, automotive manufacturers have quietly industrialized the monetization of driving data with minimal public scrutiny. Cars are essentially mobile sensors, continuously collecting information about where people go, when they travel, how fast they drive, and whether they accelerate aggressively or brake suddenly. That behavioral fingerprint reveals far more about someone's life than a social media profile—it shows routines, health conditions, financial status, and personal relationships. Yet most car owners remain unaware their vehicles are data collection devices. The timing matters too.
What Else We Know
California's enforcement action suggests the practice went on for years before consequences arrived. During that window, GM weaponized information asymmetry—the company understood the value and practice, while customers did not. Other automakers have faced similar scrutiny, indicating this isn't isolated misconduct but an industry-wide business model awaiting exposure. The question now is whether other manufacturers face comparable investigations and whether this penalty establishes sufficient deterrence. For ordinary people, the implications are stark. Your car knows where you work, where you sleep, which doctors you visit, and which bars you frequent.
Primary Sources
- Source: r/privacy
- Category: Corporate Watchdog
- Cross-reference independently — don't take our word for it.
Disclosure: NewsAnarchist aggregates from public records, API feeds (Federal Register, CourtListener, MuckRock, Hacker News), and independent media. AI-assisted synthesis. Always verify primary sources linked above.

