GM Settles Driver Data Privacy Lawsuit for $220 Million
General Motors resolves allegations regarding unauthorized driver data sharing with insurance brokers.
1Multi-State Settlement Agreement
General Motors reached a $220 million settlement with 35 states and the District of Columbia. The agreement resolves allegations that the automaker collected and sold precise driver data without informed consent. This resolution follows investigations into how vehicle metrics were shared with data brokers and subsequently utilized by insurance companies for premiums.
2Unauthorized Data Monetization
Investigators found that GM sold driving metrics, including speed, location, and seatbelt usage, to brokers. These brokers supplied the information to insurers, impacting customer premium calculations. The practice continued despite GM claims that it would not share such sensitive information with insurance providers without obtaining the express consent of vehicle owners.
3Deceptive Enrollment Practices
The Washington Attorney General’s office revealed that GM incentivized dealership employees to enroll customers in the Smart Driver program. In some instances, employees accepted terms on behalf of customers without their knowledge. Furthermore, the OnStar app incorrectly informed over 370,000 drivers that they were not enrolled while data collection remained active.
4Financial Impact Analysis
The $220 million penalty represents less than 7 percent of GM’s $3.3 billion net income reported for the third quarter ending September 30, 2026. This financial figure is distributed among the participating jurisdictions. The settlement follows a 2024 New York Times investigation that initially exposed the company's controversial data-sharing practices.
5Program Termination and Reform
GM officially terminated the Smart Driver program in April 2024, shortly after public exposure of its data practices. As part of the new settlement, the company must limit data collection, enhance protection of personally identifiable information, and establish a comprehensive privacy program. These measures aim to prevent future unauthorized sharing of vehicle metrics.
6Regulatory and Legal Context
This state-level settlement follows a January 2026 agreement with the Federal Trade Commission regarding similar allegations. The FTC order mandates that GM obtain express consent before collecting or sharing driving data. Additionally, California secured a separate $12.75 million settlement in May, while litigation involving the state of Texas remains currently ongoing.
7Corporate Stance on Data
Despite the settlement, a GM spokesperson maintained that driver data collection remains a best practice for vehicle safety. The company asserts that connected vehicle data enables personalized experiences for users. GM claims it is now committed to providing clearer information regarding how customer data is protected and what choices are available.
8Future Privacy Implications
The Washington Attorney General described this resolution as significantly stronger than previous attempts to address GM's conduct. By forcing the company to implement stricter data handling protocols, the settlement sets a precedent for how automotive manufacturers manage connected vehicle information. Future compliance will be critical to avoiding further legal and financial repercussions.