California residents have specific legal rights to see, delete, correct, and opt out of the sale of their data, and GM states it will not discriminate against you for exercising these rights.
This analysis describes what General Motors's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These rights give California consumers meaningful control over a wide range of data GM holds about them, including vehicle location, driving behavior, and biometric data — but these rights must be actively exercised by submitting a request.
Interpretive note: The verbatim text of the California rights section was not available in the truncated document; rights enumerated are inferred from standard CCPA/CPRA compliance language and the document's disclosed California-specific section.
California residents can exercise six distinct privacy rights under this policy, including deletion and opt-out of data sale, but must proactively submit requests through GM's privacy portal; these rights do not apply automatically and require individual action.
How other platforms handle this
If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of t...
If you are a California resident, you have the right to know what personal information we collect, use, disclose, and sell about you. You have the right to request deletion of your personal information, subject to certain exceptions. You have the right to opt out of the sale or sharing of your perso...
If you are a California resident, you have the right to know what personal information we collect about you, the right to delete personal information we have collected from you, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of your personal informa...
Monitoring
General Motors has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a California resident, you have certain rights under California law, including the right to know what personal information we have collected about you, the right to delete your personal information, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of your personal information, the right to limit the use and disclosure of sensitive personal information, and the right to non-discrimination for exercising your privacy rights.— Excerpt from General Motors's GM Privacy Statement
REGULATORY LANDSCAPE: This provision implements rights required under CCPA as amended by CPRA (California Civil Code Section 1798.100 et seq.), enforced by the California Privacy Protection Agency and California AG. The non-discrimination provision reflects the CCPA's anti-retaliation requirement (Section 1798.125). The right to limit use of sensitive personal information is a CPRA-specific addition effective January 1, 2023. GOVERNANCE EXPOSURE: Medium. While the enumeration of rights is legally required and appropriate, compliance exposure arises from the operationalization of these rights — specifically, whether deletion requests are honored across all systems (including telematics and OnStar data), whether correction rights function for vehicle-generated data, and whether the 45-day response window is consistently met. JURISDICTION FLAGS: These rights apply specifically to California residents. Other states including Virginia, Colorado, Connecticut, Texas, and Oregon have enacted similar but not identical privacy rights frameworks, and GM's policy may need to address these separately. Failure to honor verified consumer requests within statutory timeframes creates direct regulatory exposure. CONTRACT AND VENDOR IMPLICATIONS: Service providers and data processors who hold GM consumer data must be contractually required to support consumer rights requests, including deletion and correction, within the regulatory timeframes. Gaps in vendor compliance can create GM liability for unmet consumer requests. COMPLIANCE CONSIDERATIONS: Compliance teams should audit the end-to-end consumer request intake and fulfillment process to confirm all data stores (including telematics, OnStar, dealer-shared data, and marketing databases) are covered by deletion and correction workflows. Response time logging should be implemented to demonstrate CCPA compliance. The policy should be updated to reflect any additional state privacy rights as new laws become effective.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
These rights give California consumers meaningful control over a wide range of data GM holds about them, including vehicle location, driving behavior, and biometric data — but these rights must be actively exercised by submitting a request.
California residents can exercise six distinct privacy rights under this policy, including deletion and opt-out of data sale, but must proactively submit requests through GM's privacy portal; these rights do not apply automatically and require individual action.
ConductAtlas has identified this type of provision across 11 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by General Motors.