GM Reaches $220M Settlement Over Unauthorized Driver Data Sales
General Motors settles with 36 states regarding the illegal sale of private driving behavior data.
1Multistate Settlement Agreement
General Motors has agreed to pay $220 million to 36 states to resolve allegations of illegally selling private driver data. The lawsuit claimed the automaker shared precise geolocation and driving behavior information with data brokers. These brokers subsequently sold the sensitive data to insurance providers, potentially impacting consumer insurance rates without their knowledge.
2Smart Driver Program Termination
The settlement specifically addresses the Smart Driver program, which GM officially discontinued in 2024. This feature, integrated into connected car apps, tracked driving habits and seat belt usage. The program faced intense scrutiny after reports revealed how collected data was funneled to third-party brokers like LexisNexis and Verisk for commercial exploitation.
3Mandatory Compliance and Oversight
Under the new agreement, GM must obtain express consent from drivers before collecting or sharing any location or driving data. Furthermore, the company is now required to undergo third-party assessments to verify compliance with its internal privacy programs. These terms align with previous directives established by the Federal Trade Commission earlier this year.
4Shift in Privacy Policy
GM has updated its privacy policy and launched a consumer-facing Privacy Center to improve transparency. The company stated it will no longer sell vehicle information linked to specific individuals or their precise locations. While anonymized data may still be disclosed to partners, the firm claims it is prioritizing customer privacy protections moving forward.
5Technological Context and Risks
This legal action occurs as automakers increasingly integrate sensor-laden technology into modern vehicles. These software-centric cars now connect with digital apps like calendars and email, creating vast amounts of personal data. The industry faces a delicate balance between offering personalized user experiences and maintaining the strict data security standards required by regulators.
6OnStar AI Integration
Despite privacy concerns, GM continues to expand its software capabilities, including a new AI assistant for OnStar. The system utilizes vehicle cameras for crash recordings and voice-controlled climate functions. GM maintains that these recordings are encrypted and inaccessible to the company, though users who opt out of data sharing may face feature limitations.
7Regulatory and Legal Precedents
The $220 million payout follows a finalized FTC order from January that restricted GM and OnStar from sharing certain consumer information. These coordinated legal efforts by state attorneys general and federal regulators signal a tightening regulatory environment for automotive data practices. Automakers must now navigate stricter oversight regarding how connected vehicle data is monetized.
8Future of Connected Vehicles
The settlement marks a significant turning point for automotive data governance in the United States. As vehicles evolve into sophisticated computing platforms, the industry must reconcile aggressive software monetization with evolving privacy laws. Future success for automakers will depend on their ability to secure user trust while maintaining the functionality of connected services.
Original article: TechCrunch — GM Reaches $220M Settlement Over Unauthorized Driver Data Sales