# General Motors Settles Driver Data Privacy Claims for $220 Million GM resolves multistate allegations regarding unauthorized vehicle data sharing with insurance brokers. - **Source:** [www.theregister.com - Articles](https://brifing.si/source/2c34ea50-d341-4a10-925d-12c012a9ad10) - **Published:** 2026-10-30 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/0cbf5cdf-e068-4772-bc03-5b70afaa1a7c ## Multistate Settlement Reached General Motors agreed to a $220 million settlement with 36 attorneys general, including the District of Columbia. The agreement resolves allegations that the automaker collected and sold driver data without informed consent. This resolution follows investigations into how GM shared precise location, speed, and seatbelt usage metrics with third-party data brokers. ## Data Brokerage Mechanism GM sold collected driving data to brokers who subsequently supplied it to insurance companies. These insurers utilized the information to adjust customer premiums without the drivers' knowledge. This practice occurred despite GM’s public claims that it would not share such sensitive information with insurers without obtaining express consent from vehicle owners. ## Smart Driver Program Issues The controversy centered on the OnStar Smart Driver program, which tracked driving habits under the guise of providing feedback. Investigations revealed that GM incentivized dealership employees to enroll customers, sometimes accepting terms on their behalf. Furthermore, the OnStar app incorrectly informed over 370,000 drivers that they were not enrolled in the program. ## Financial Impact Analysis The $220 million penalty represents less than 7 percent of GM’s $3.3 billion net income reported for the third quarter of 2026. This financial figure is distributed among the participating jurisdictions. The settlement follows a 2024 New York Times investigation that first exposed the company's data-sharing practices with insurance industry entities. ## Program Termination and Compliance GM officially terminated the Smart Driver program in April 2024, shortly after public exposure of its practices. Beyond the monetary payment, the company must now limit data collection and implement a comprehensive privacy program. These requirements aim to better protect customer personally identifiable information and ensure transparency regarding future data usage. ## Regulatory Precedents and Context This state-level settlement follows a separate agreement with the Federal Trade Commission finalized in January 2026. The FTC order mandated that GM obtain express consent before collecting or sharing driving data. Additionally, California reached a distinct $12.75 million settlement in May, while legal proceedings regarding these practices remain ongoing in Texas. ## Operational Privacy Shifts The new mandates require GM to provide drivers with simple mechanisms to request data copies, request deletion, and disable precise geolocation tracking. These operational changes are designed to align with the terms set by the 36 attorneys general, which officials described as significantly stronger than previous resolutions reached regarding this specific conduct. ## Corporate Stance on Connectivity Despite the settlement, a GM spokesperson maintained that driver data collection remains a best practice for enabling personalized vehicle experiences. The company asserts its commitment to clarifying what information is protected and what choices customers possess. GM continues to emphasize that connected vehicle data is essential for safer and more helpful driving. ## Sources covering this story - https://www.theregister.com/security/2026/10/30/gm-cracks-the-petty-cash-box-for-multistate-driver-tracking-settlement/5306721 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._