General Motors Sued Due to Invasive Data Privacy Practices

Your car may be collecting highly detailed driving data about you—data like your driving speed, braking habits, and even private driving data linked to where you go and when. And it doesn’t stop there. Recently, an investigation revealed that General Motors has engaged in egregious business practices that violated consumer privacy, breaking the law in the process.

In this article, we'll dive into how automakers like GM collect data on drivers, why this data is so valuable, and how these practices might be breaking consumer protection laws like the Texas Deceptive Trade Practices Act. 

We'll also take a closer look at the two recent GM lawsuits and discuss how you can protect yourself from this type of invasive technology. Whether you share the desire to protect your privacy or want to know how to hold them accountable, this article will provide crucial insights into data privacy and the deceptive business practices that may be exploiting American drivers.

Modern cars collect a surprising amount of information. A study by Mozilla Foundation looked at 25 major car brands and found that automakers collect far more than just your name and address. Here’s a look at what they gather:

• Personal Information: Name, age, and address.
  
• Biometric Data: Things like fingerprints, facial recognition, and even heart rate.
  
• Driving Habits: Details about your speed, braking, and where you go.
  
• Inferred Data: Automakers can make guesses about you, like your shopping habits, based on your driving data.
  

1. Infotainment Systems: When you connect your smartphone to the car, it can access your contacts, messages, and call history.
   
2. Mobile Apps: Apps like OnStar or SiriusXM collect data about where you drive and your behavior.
   
3. Sensors: Sensors in your car monitor things like the weather, your stress level, and your surroundings.
   
4. Cameras: Some cars, like Toyota models, use cameras to recognize your face, storing this data for security.
   
5. Microphones: Cars from Tesla, Audi, and BMW have microphones that can record conversations.
   

Most car brands are collecting data. Companies like Tesla, Volkswagen, and Subaru have been involved in controversies about privacy. Many other brands—Kia, Dodge, Ford, GM, and more—also gather and share driver data, which affects nearly everyone who drives a modern car.

1. Profit: Selling driver data is big business, worth billions of dollars. Companies sell this data to advertisers, insurers, and others who benefit from knowing more about drivers.
   
2. Product Improvement: Data helps car companies develop new features, like self-driving technology, and improve vehicle safety.
   
3. Legal Requirements: Automakers sometimes have to provide data to law enforcement when required by law.

General Motors Lawsuits: Data Collection Gone Too Far

Romeo Chicco, a driver from Florida, found out his car data was being shared without his consent. When he applied for insurance, he was rejected because of a report from LexisNexis, a data broker that had detailed information about his driving. This data—like his speed, braking habits, and routes—came from OnStar, GM’s in-car assistance program, even though Romeo says he never agreed to it.

This lawsuit questions whether GM and OnStar violated privacy laws by sharing driver data without permission. In response, GM has stopped sharing data with brokers like LexisNexis. This case is ongoing and could lead to important changes in how car companies handle our data.

Just after GM decided to stop sharing driver data, a second lawsuit was filed by Larry Reed and Darnell McCoy. They claim GM collected and shared their data without their consent and are seeking $5 million in damages. This lawsuit could become a class action, allowing other affected drivers to join, which would have a bigger impact on GM.

These lawsuits show that drivers are starting to push back against the ways carmakers collect and use their data. If GM loses, it could force other car companies to be more transparent and let drivers decide if they want their data collected.

David Vladeck, a privacy expert, predicts that these cases are just the beginning and that more lawsuits will come. A recent survey also showed that most drivers aren’t aware of how much data their cars collect and share. This lack of awareness means it’s more important than ever for car companies to be honest about their data practices.

California Consumer Privacy Act (CCPA) (2018)

• • Gives California residents the right to know what personal data is collected, request it be deleted, and opt out of its sale.
    
  • Helps car owners control their data.

New Jersey Bill A3950

• • Prevents employers from using vehicle tracking devices without workers’ consent.
    
  • Limits how much companies can monitor employee driving.

• New Hampshire Bill 255
  
  • Takes effect in 2025, adds limits on what data can be collected and requires strong data security.
    
  • Aims to protect consumer privacy across the state.

General Data Protection Regulation (GDPR)

• • Considered the "gold standard" for privacy.
    
  • Requires companies to clearly explain data collection, and gives people rights to access, change, or delete their data.
    
  • European drivers have stronger privacy protections than most U.S. drivers.
    

Senator Edward Markey’s Actions

• • Sent letters to automakers asking for transparency on data practices.
    
  • Wants car companies to be clear and honest about what data they collect.
    

• American Data Privacy Protection Act
  
  • Proposed by Senators Maria Cantwell and Cathy McMorris Rodgers.
    
  • Aims to create a national privacy law for all Americans, giving everyone the same rights over their data.
    
  • Would make companies accountable nationwide.

• Current Situation: Privacy protections depend on where you live, creating confusion.
  
• A National Law: Would provide equal rights for everyone in the U.S. and make data handling by companies like GM more consistent and transparent.
  
• Key Question: Will Washington finally pass a law to protect everyone’s data?
  

With all the concerns about automakers collecting and sharing our personal data, it’s important to take action. Luckily, there is a simple tool you can use right now to understand and protect your car data. Let’s explore how you can use the Vehicle Privacy Report Tool by Privacy4Cars to safeguard your privacy.

The Vehicle Privacy Report Tool, created by Privacy4Cars, is a free and easy-to-use online resource that helps you understand what kind of information your car collects about you. Most modern cars collect data such as your driving habits, contact lists, and even personal preferences, but it's often unclear exactly what’s being gathered and who can access it. This tool gives you a detailed privacy report for your vehicle so you can take control of your data.

Using the Vehicle Privacy Report Tool is very straightforward. All you need is your car’s Vehicle Identification Number (VIN), which is a unique code for your car. You can usually find the VIN on the lower corner of your car’s windshield, on the driver’s side door, or on your car’s registration documents.

• Step 1: Go to the Privacy4Cars website and find the Vehicle Privacy Report tool.
• Step 2: Enter your VIN into the tool and click "Get the Report."
• Step 3: After a quick verification process, you’ll receive your privacy report.

The privacy report provides valuable information, such as:

• Data Your Car Collects: You’ll see exactly what kind of data your car is gathering, like location history, phone contacts, and even biometrics if your car has advanced features.
• Who Gets Your Data: The report will list which companies or third parties have access to your data. For example, it might show if your car manufacturer shares data with insurance companies, advertisers, or data brokers.
• Privacy Protections in Place: The report also tells you what measures are being used to protect your data and whether you can request the deletion of your information.
• Helpful Tips: It provides suggestions on what you can do to limit data sharing, like turning off certain features or adjusting privacy settings in your car.

1. Find Your VIN: Locate the VIN on your car or on your registration documents.
2. Visit the Tool Website: Go to the website: vehicleprivacyreport.com. It’s free and easy to access.
3. Enter the VIN: Once on the website, enter your VIN in the provided box and click on “Get the Report.”
4. Verify Your Identity: You might need to answer a couple of questions to verify that you’re the car owner.
5. View Your Report: Within a few seconds, you’ll see a detailed privacy report that shows you what data is being collected and by whom.

Using the Vehicle Privacy Report Tool has several benefits that help you protect your data:

• Awareness: By understanding what data your car collects, you can make informed decisions about what features you use and who you share your information with. For instance, if you discover that your car collects location data, you might choose to turn off location-sharing features.
  
• Control: The report can help you identify settings that can be changed to limit data collection. Many cars have options that let you disable certain data-gathering features, like sharing your driving habits with third parties.
  
• Peace of Mind: Knowing who has access to your data and what protections are in place can give you peace of mind. If you see that your car company shares data with too many parties, you can take action to protect yourself, like opting out or contacting the car company for more details.
  
• Prevention: This tool can help you avoid the negative consequences of unauthorized data sharing. If you discover that your data is being shared with insurance companies, you might decide to take steps to prevent this from affecting your rates.
  

General Motors has been sued for collecting and selling mass amounts of data about drivers without properly informing them. From private driving data to insurance companies to detailed records on how often a driver used their vehicle, GM sold this information as part of a broad data collection effort. 

The lawsuits, launched by Attorney General Ken Paxton, emphasize how General Motors never informed its customers that their user data and vehicle data were being collected and sold to third parties like insurers. This violates the fundamental desire to protect consumers’ privacy.

The attorney general's office has taken a stand to enforce privacy protection laws, demanding the destruction of improperly collected data. It's clear that automakers like GM need to respect Texans' privacy rights and comply with data privacy and security initiatives.

But what can you do today? One actionable step is to stay informed and use tools to protect your driving data. Whether you own a model year or newer GM vehicle or any connected car, understanding your rights is crucial.

If you want to dive deeper, we’ve also created a video on YouTube that covers this issue in more detail. Check it out to see how you can protect your data and stay ahead of privacy risks.