# GM Settles Driver Data Privacy Lawsuit for $220 Million General Motors resolves allegations regarding unauthorized driver data sharing with insurance brokers. - **Source:** [www.theregister.com - Articles (theregister.co.uk)](https://brifing.si/source/e6d4ec13-4d0e-407a-b96d-39609d76c3b1) - **Published:** 2026-10-30 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/3e905a11-4974-49f1-9440-bef6421752ea ## Multi-State Settlement Agreement General Motors reached a $220 million settlement with 35 states and the District of Columbia. The agreement resolves allegations that the automaker collected and sold precise driver data without informed consent. This resolution follows investigations into how vehicle metrics were shared with data brokers and subsequently utilized by insurance companies for premiums. ## Unauthorized Data Monetization Investigators found that GM sold driving metrics, including speed, location, and seatbelt usage, to brokers. These brokers supplied the information to insurers, impacting customer premium calculations. The practice continued despite GM claims that it would not share such sensitive information with insurance providers without obtaining the express consent of vehicle owners. ## Deceptive Enrollment Practices The Washington Attorney General’s office revealed that GM incentivized dealership employees to enroll customers in the Smart Driver program. In some instances, employees accepted terms on behalf of customers without their knowledge. Furthermore, the OnStar app incorrectly informed over 370,000 drivers that they were not enrolled while data collection remained active. ## Financial Impact Analysis The $220 million penalty represents less than 7 percent of GM’s $3.3 billion net income reported for the third quarter ending September 30, 2026. This financial figure is distributed among the participating jurisdictions. The settlement follows a 2024 New York Times investigation that initially exposed the company's controversial data-sharing practices. ## Program Termination and Reform GM officially terminated the Smart Driver program in April 2024, shortly after public exposure of its data practices. As part of the new settlement, the company must limit data collection, enhance protection of personally identifiable information, and establish a comprehensive privacy program. These measures aim to prevent future unauthorized sharing of vehicle metrics. ## Regulatory and Legal Context This state-level settlement follows a January 2026 agreement with the Federal Trade Commission regarding similar allegations. The FTC order mandates that GM obtain express consent before collecting or sharing driving data. Additionally, California secured a separate $12.75 million settlement in May, while litigation involving the state of Texas remains currently ongoing. ## Corporate Stance on Data Despite the settlement, a GM spokesperson maintained that driver data collection remains a best practice for vehicle safety. The company asserts that connected vehicle data enables personalized experiences for users. GM claims it is now committed to providing clearer information regarding how customer data is protected and what choices are available. ## Future Privacy Implications The Washington Attorney General described this resolution as significantly stronger than previous attempts to address GM's conduct. By forcing the company to implement stricter data handling protocols, the settlement sets a precedent for how automotive manufacturers manage connected vehicle information. Future compliance will be critical to avoiding further legal and financial repercussions. ## Sources covering this story - https://www.theregister.com/security/2026/10/30/gm-cracks-the-petty-cash-box-for-multistate-driver-tracking-settlement/5306721 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._