General Motors has reached a settlement with a group of law enforcement agencies led by California Attorney General Rob Bonta, agreeing to pay £9.3 million (approximately $12.75 million) to resolve allegations of inadequate data protection in the company's vehicles.
The settlement, announced on 4 May, stems from a probe into the car manufacturer's collection and storage of driver data, including location information and vehicle usage.
According to the California Attorney General's office, General Motors had been collecting and storing driver data without explicit consent, raising concerns over potential misuse and breaches of data protection laws.
The case serves as a reminder of the importance of robust data protection measures in the automotive industry, particularly in the context of connected and autonomous vehicles.
Dr Emma Draper, a data protection expert at the University of Cambridge, comments: 'This settlement highlights the need for automotive companies to prioritise transparency and consent when collecting and processing driver data. Failure to do so can have serious consequences, both financially and reputationally.'
The settlement comes as the UK government continues to grapple with regulatory frameworks for the use of artificial intelligence and data in the automotive sector. The EU's AI Act, set to come into force in 2024, will require companies to implement robust data protection measures and obtain explicit consent from users before collecting and processing personal data.
The Information Commissioner's Office (ICO) in the UK has also been working to update its guidance on data protection in the automotive sector, reflecting the changing landscape of connected and autonomous vehicles.