American Honda Motor Co., Inc. × California Privacy Protection Agency (CPPA)
American Honda Motor Co. agreed to pay a $632,500 fine and change its business practices to settle claims brought by the California Privacy Protection Agency (CPPA). [32, 49] The investigation, part of a broader review of connected vehicle manufacturers, found Honda violated the CCPA by making it difficult for consumers to opt out of data sales, requiring excessive information for privacy requests, and sharing data without proper contractual safeguards. [47, 59] The settlement was announced in March 2025 and requires Honda to simplify its privacy processes for consumers. [32]
The asset
A settlement payment to resolve claims of violating the California Consumer Privacy Act (CCPA) related to the handling of consumer personal and location data.
The record
- Seller status
- Going concern
- Sector
- Government regulatory agency
- Modalities
- telematics data, location data, personal information
- Jurisdiction
- US
- Personal data
- The settlement was reached due to allegations of improper PII handling, including sharing consumer data with ad tech companies without proper contracts and making it difficult for consumers to opt-out of data sales. [32, 48, 59]
What it means if you hold data
This enforcement action highlights the significant financial and operational risks for automotive companies in managing telematics and location data. It serves as a major precedent, signaling that regulators are actively enforcing consumer privacy laws with substantial fines, impacting how data is collected, used, and shared in the connected vehicle ecosystem.