California’s $12.75 million settlement with General Motors marks a watershed moment for the California Consumer Privacy Act (CCPA). According to BleepingComputer, the settlement addresses allegations that GM sold driver data—including location and driving behavior—to third-party insurers without explicit, informed consent. This enforcement action signals that regulators are moving beyond 'website cookies' to target the 'Internet of Moving Things.' The Cyber Tribune notes that this correlates with Texas's lawsuit against Netflix, suggesting a bipartisan, multi-state offensive against 'surveillance machinery' embedded in consumer products. For enterprises, the takeaway is clear: data monetization strategies must now undergo rigorous legal and ethical audits, as the cost of non-compliance is shifting from 'cost of doing business' to 'material financial event.'