On June 7, 2024, Texas Attorney General Ken Paxton announced an investigation into several car manufacturers over reports of secret data siphoning and selling. The investigation is being conducted under the Texas Deceptive Trade Practices Consumer Protection Act. Preliminary investigations have been opened into the data collection and sharing methods of connected car manufacturers, and Kia, General Motors, Subaru, and Mitsubishi have received 'civil investigative demand' letters [fe603e77].
This investigation comes as part of Paxton's efforts to enforce the state's comprehensive data privacy law, which is set to take effect on July 1. The newly established data-privacy team in Paxton's office will be responsible for enforcing this law. The team aims to uncover any false, misleading, or deceptive acts or practices related to data collection and sale without consumer consent [fe603e77] [34a81ff4].
The Texas Data Privacy and Security Act, which grants individuals the right to know what personal data is being collected about them, the right to delete their personal data, and the right to opt out of the sale of their personal data, will play a crucial role in this investigation. The law also imposes obligations on businesses to implement reasonable security measures, provide clear privacy notices, and refrain from discriminating against consumers who exercise their privacy rights. However, unlike some other state laws, the Texas Data Privacy and Security Act does not include a private right of action, meaning that individuals cannot sue businesses for violations of the law. Instead, enforcement will be handled by the Texas Attorney General [77e40e2e] [fe603e77].
The investigation aims to uncover any false, misleading, or deceptive acts or practices related to data collection and sale without consumer consent. By holding connected car manufacturers accountable for their data collection and sharing methods, the Texas Attorney General's office seeks to protect the privacy and security of individuals in Texas. This development further highlights the importance of data privacy and security in today's digital age [fe603e77].