California’s Ford settlement focused on the friction in opting out

On March 5, 2026, California’s privacy agency announced that Ford would pay $375,703 and change practices around requests to opt out of selling or sharing personal information. The case included information collected through connected-vehicle services. ^[1]

The order describes a form that asked consumers to confirm their email before Ford processed an opt-out. Requests without that extra confirmation expired; Ford later processed the affected requests during the investigation. ^[2]

An extra verification step matters because someone can submit a form and believe the request is complete even though it has not taken effect. The agency said California rules prohibit requiring a verifiable consumer request for this kind of opt-out. ^[2]

The settlement requires easier opt-out methods and an audit of website tracking technology. The agency also said Ford must honor opt-out preference signals, including Global Privacy Control. ^[1]

The order distinguishes an opt-out of sale or sharing from deletion and other privacy rights. Drivers should check which request they are making and retain their confirmation; this action was about the request process, not a vehicle recall. ^[2]

No first-hand reporting, independent testing or interviews are claimed. Editorial standards · Corrections policy.