Key Takeaways:

• CPPA launched its first major enforcement action in targeting connected vehicle-maker Honda.
• Connected vehicles often collect various kinds of sensitive driver information, including geolocation, biometric and behavioral data.
• After the CPPA found Honda in violation of several CCPA provisions, the company agreed to settle the enforcement action for approximately $650,000 while also agreeing to adopt certain remedial measures.
• Other Connected vehicle-makers have also experienced a spike in regulatory scrutiny, signaling rising enforcement pressure and growing expectations for privacy-by-design.