automakers have been caught selling that data to the detriment of owners, and it has drawn the investigative eye of Texas Attorney General Ken Paxton

Paxton is going after the companies under the state's Deceptive Trade Practices—Consumer Protection Act. It allows the attorney general to investigate companies for false, misleading, or deceptive acts. The office has already requested information from the involved carmakers and the third parties to whom they have sold data.

Paxton called the unauthorized collection of driver data "invasive" and "disturbing" and said that it requires "a thorough investigation and appropriate enforcement."

Paxton's office had sent "civil investigation demand" letters to at least four automakers in April—Kia, General Motors, Subaru, and Mitsubishi. The attorney general's office is seeking company documents about the "disclosures they made to customers about the extent of their data collection practices and subsequent sale of their customers's data."

The investigation arrives after The New York Times revealed in March that GM, Kia, Subaru, and Mitsubishi have all shared driver data to a portal for insurers, and some GM drivers saw their insurance rates rise as a result. US lawmakers this year have also accused Toyota, BMW, Nissan, Mazda, Mercedes-Benz, and others of sharing vehicle location data with police without a warrant or court order, raising even more privacy concerns.

https://www.motor1.com/news/722554/texas-investigates-automakers-collecting-selling-data/