General Motors Settles Driver Data Privacy Claims for $220 Million
GM resolves multistate allegations regarding unauthorized vehicle data sharing with insurance brokers.
1Multistate Settlement Reached
General Motors agreed to a $220 million settlement with 36 attorneys general, including the District of Columbia. The agreement resolves allegations that the automaker collected and sold driver data without informed consent. This resolution follows investigations into how GM shared precise location, speed, and seatbelt usage metrics with third-party data brokers.
2Data Brokerage Mechanism
GM sold collected driving data to brokers who subsequently supplied it to insurance companies. These insurers utilized the information to adjust customer premiums without the drivers' knowledge. This practice occurred despite GM’s public claims that it would not share such sensitive information with insurers without obtaining express consent from vehicle owners.
3Smart Driver Program Issues
The controversy centered on the OnStar Smart Driver program, which tracked driving habits under the guise of providing feedback. Investigations revealed that GM incentivized dealership employees to enroll customers, sometimes accepting terms on their behalf. Furthermore, the OnStar app incorrectly informed over 370,000 drivers that they were not enrolled in the program.
4Financial Impact Analysis
The $220 million penalty represents less than 7 percent of GM’s $3.3 billion net income reported for the third quarter of 2026. This financial figure is distributed among the participating jurisdictions. The settlement follows a 2024 New York Times investigation that first exposed the company's data-sharing practices with insurance industry entities.
5Program Termination and Compliance
GM officially terminated the Smart Driver program in April 2024, shortly after public exposure of its practices. Beyond the monetary payment, the company must now limit data collection and implement a comprehensive privacy program. These requirements aim to better protect customer personally identifiable information and ensure transparency regarding future data usage.
6Regulatory Precedents and Context
This state-level settlement follows a separate agreement with the Federal Trade Commission finalized in January 2026. The FTC order mandated that GM obtain express consent before collecting or sharing driving data. Additionally, California reached a distinct $12.75 million settlement in May, while legal proceedings regarding these practices remain ongoing in Texas.
7Operational Privacy Shifts
The new mandates require GM to provide drivers with simple mechanisms to request data copies, request deletion, and disable precise geolocation tracking. These operational changes are designed to align with the terms set by the 36 attorneys general, which officials described as significantly stronger than previous resolutions reached regarding this specific conduct.
8Corporate Stance on Connectivity
Despite the settlement, a GM spokesperson maintained that driver data collection remains a best practice for enabling personalized vehicle experiences. The company asserts its commitment to clarifying what information is protected and what choices customers possess. GM continues to emphasize that connected vehicle data is essential for safer and more helpful driving.