Consumers Affected
1,500,000
Texas Attorney General Ken Paxton filed a lawsuit against General Motors for unlawfully collecting private driving data from over 1.5 million Texas drivers without consent and selling the data to third parties including insurance companies. GM allegedly deceived customers into enrolling in products like OnStar Smart Driver by falsely claiming enrollment was required to retain vehicle safety features, while concealing that enrollment authorized systematic collection and sale of detailed driving data. The action follows an investigation launched in June 2024 as part of the Texas AG’s data privacy initiative, and seeks to hold GM accountable for violating state privacy laws.
In-house legal teams should review all vendor and partner agreements with automotive manufacturers, telematics providers, insurance companies, and data analytics firms to ensure explicit, informed consumer consent is obtained for any collection, use, or sale of driving, location, or vehicle telematics data. Clauses governing data sharing, third-party sales, and consumer notice must be updated to prohibit deceptive or coercive enrollment practices (such as threatening deactivation of vehicle safety features to compel consent), require clear and conspicuous disclosure of all data collection and sale activities, and ban the use of dark patterns in onboarding processes. Contracts with data buyers should include restrictions on downstream use of driving data, require verification of valid consumer consent prior to purchase, and mandate compliance with all applicable state privacy laws. Additionally, agreements involving generation of driving scores or consumer profiling should be audited to confirm they align with consent and notice requirements, and include provisions for consumer opt-out of data collection and sale.
Entity
General Motors
Industry
AutomotiveOfficial Press Release
https://www.texasattorneygeneral.gov/news/releases/attorney-general-ken-paxton-sues-general-motors-unlawfully-collecting-drivers-private-data-and
General Motors Original Petition Filestamped
https://www.texasattorneygeneral.gov/sites/default/files/images/press/General%20Motors%20Original%20Petition%20Filestamped.pdf
Texas Attorney General Enforcement Page
https://www.texasattorneygeneral.gov/consumer-protection/privacy
"General Motors"
"August 13, 2024"
"Texas Attorney General Ken Paxton"
"without their knowledge or consent"
"despite lengthy and convoluted disclosures, General Motors never informed its customers of its actual conduct—the systematic collection and sale of their highly detailed driving data."
"sold this information to several other companies, including to at least two companies for the purpose of generating “Driving Scores” about GM’s customers and selling these scores to insurance companies."
$12.8M
California Attorney General Rob Bonta, along with multiple district attorneys and the California Privacy Protection Agency, announced a $12.75 million settlement with General Motors for illegally selling hundreds of thousands of Californians' location and driving data to data brokers Verisk and LexisNexis without notice or consent. The settlement includes the largest CCPA penalty to date, a five-year ban on selling driving data to consumer reporting agencies, and requirements to delete retained data and implement a robust privacy program.
$12.8M
CalPrivacy and the California Attorney General secured a $12.75 million settlement from General Motors for data sharing practices from connected vehicles. The settlement includes injunctive terms to change business practices.
$7.5M
Texas Attorney General Ken Paxton announced a $7.5 million settlement with Tris Pharmaceuticals over alleged misrepresentations about the efficacy of Dyanavel XR, an ADHD drug marketed for children. The release says the company overstated the drug’s efficacy and directed sales representatives to make misleading claims to doctors, including Medicaid providers.
Texas Attorney General Ken Paxton announced an agreement with Plum Organics requiring stronger testing and limits for heavy metals in covered baby food products, along with publicly accessible testing results. The release does not state a monetary penalty; the agreement follows an ongoing investigation into baby food manufacturers.
Texas Attorney General Ken Paxton opened an investigation into Blue Cross and Blue Shield of Texas, its parent Health Care Service Corporation, and related entities over alleged denials or delays of urgent and medically necessary care and potentially burdensome prior authorization requirements. The investigation is ongoing; the Attorney General issued a Civil Investigative Demand to obtain information and assess potential violations of Texas law.
Texas Attorney General Ken Paxton issued a consumer alert warning Texas businesses and nonprofits about a surge of demand letters alleging California Invasion of Privacy Act (CIPA) violations based on common website technologies such as cookies, pixels, and analytics tools. The AG cautions that some letters may exaggerate or misrepresent violations and may be fraudulent, noting serial CIPA plaintiff Vivek Shah has been declared a vexatious litigant. Recipients are advised not to pay or respond directly, to consult privacy counsel, and to report suspected fraud to the Consumer Protection Division.