Major Automaker Reaches Settlement Agreement with California Privacy Protection Agency

The California Privacy Protection Agency issued a March 7 final order with an automotive manufacturer to resolve the company’s failure to comply with the California Consumer Privacy Act. The Agency initiated an investigation into the data collection practices of connected vehicles in July 2023. This is the first settlement agreement reached as a result of those investigations.

Claims against the company ranged from over-collecting personal data for the purpose of processing consumer rights requests, to a failure to provide symmetrical choice within a cookie management tool. The company was also unable to produce contracts with advertising companies to which it sold, shared, or disclosed consumers’ personal information. The focus of the final order aligns with concerns raised in two enforcement advisories the Agency published last year. 

Read the California Privacy Protection Agency announcement.