this is especially funny when juxtaposed against the TikTok ban and its supposed "data privacy" rationale.
if a Chinese company spies on you - we try to ban their app entirely, or force it to be sold to an American company.
if an American company spies on you - we tell them they have to wait 5 years before they can do it again. they don't even pay a fine.
also, GM sold this data to data brokers rather than directly to the insurance companies that supposedly wanted the data. these brokers are a completely unregulated industry, there are no limits on who they can sell the data to.
everyone is saying we need to ban TikTok because "what if the Chinese government gets data on US citizens". here's the fun part. if they want that data, all they need to do is set up a shell company and buy it from these data brokers. they don't need TikTok.
comprehensive data privacy legislation, along the lines of the GDPR, is the only thing that has any chance at being effective here.