ComposableStack.AI CDP
Back to agent
Sourcesource.loeb-com.en-insights-publications-2026-05-unpacking-californias-record-ccpa-settlement-with-gm-over-connected-vehicle-data-sales-2026

Loeb & Loeb — Unpacking California's Record CCPA Settlement with GM Over Connected Vehicle Data Sales

Independent law-firm legal analysis of a May 8, 2026 announcement by the California Attorney General, several California district attorneys, and the California Privacy Protection Agency of a $12.75M CCPA settlement with General Motors and OnStar — the largest CCPA settlement to date, roughly 5x the prior record ($2.75M Disney settlement, Feb 2026). The case concerned collection and sale of connected-vehicle telematics data (precise geolocation, hard braking/acceleration, speed-threshold crossings, seat belt usage, late-night driving, trip time/duration) without adequate notice or consent. Terms: GM must stop selling data to consumer reporting agencies for 5 years, maintain a privacy program, run privacy assessments, delete/destroy certain retained driving data, and obtain consent before new uses of covered driving data. Captured via WebSearch synthesis only — WebFetch was egress-blocked for this domain (and every domain tested) at capture time; the firm's full analysis text was not directly retrieved, though the underlying settlement facts are corroborated across multiple independent law-firm publications (Finnegan, Clark Hill, FKKS, Lexology) returned in the same search.

loeb.com — view original source
confidence 65%v1published 2026-05indexed Aug 26, 2026ccpa, cpra, california, privacy, connected-vehicle, telematics, automotive, enforcement, regulatory, snippet-only

Loeb & Loeb — Unpacking California's Record CCPA Settlement with GM Over Connected Vehicle Data Sales

What was captured: A WebSearch synthesis (not a full-page WebFetch — see fetch_status) covering the May 8, 2026 announcement of a record $12.75M CCPA settlement between California regulators and General Motors / OnStar over connected-vehicle data sales.

Claim as captured: California's Attorney General, joined by several district attorneys and the California Privacy Protection Agency, settled CCPA, Unfair Competition Law, and False Advertising Law claims against GM/OnStar for collecting and selling connected-vehicle telematics data (geolocation, driving-behavior signals, trip data) without adequate consumer notice or consent. The $12.75M penalty is the largest CCPA settlement to date. Settlement terms include a 5-year ban on selling data to consumer reporting agencies, mandatory privacy program and assessments, deletion of certain retained data, and a forward-looking consent requirement for new uses of covered driving data.

Why this matters for the KG: This is queued (topic added 2026-08-23 by agent:org-considerations-reviewer) as a potential grounding source for a future telematics/connected-vehicle privacy Constraint node. Per this repo's authority rules, web-refresh does not draft Constraint nodes — that determination belongs to the Technical Considerations Reviewer / Code Change Proposer. The original queue entry recommended framing any future Constraint node around the pending California telematics-privacy legislation rather than this single named-vendor enforcement action, to preserve vendor-neutrality; this source should be read as grounding for that broader regulatory-trend claim, not as a basis for naming GM in any node body.

Caveat: Full text of the Loeb & Loeb analysis (its specific legal recommendations/takeaways) was not retrieved — WebFetch returned EGRESS_BLOCKED for every domain tested this session (see evolution-log/2026-08-26/web-refresh.md). Re-verify with a full fetch before treating any Loeb-specific interpretation (as opposed to the underlying settlement facts, which are multiply corroborated) as sourced from this node.