Summary

• California's settlement with General Motors is the dominant current event, with regulators alleging unlawful collection and broker sales of OnStar driving and location data.
• The enforcement theory emphasizes notice, affirmative consent, purpose limitation, and data minimization rather than a classic breach scenario.
• The settlement imposes operational limits: a five-year pause on certain data sales, shorter retention, broker deletion requests, and a privacy risk program.
• General Motors, OnStar, Verisk Analytics, and LexisNexis Risk Solutions are the most important recurring entities in the current snapshot.
• A related Iowa lawsuit indicates the issue is not isolated to California and may reflect broader scrutiny of connected-vehicle telematics practices.
• The topic is coherent and fairly dense, with current signal concentrated on one high-salience enforcement pattern rather than many unrelated privacy issues.