Brifing

GM Settles Driver Data Privacy Claims for $220 Million

General Motors reaches a multi-state agreement regarding unauthorized sharing of vehicle telematics data.

The Verge (theverge.com)2 min

1Multi-State Settlement Reached

General Motors has agreed to a $220 million settlement following allegations of illegally selling driver and location data. A coalition of 36 state attorneys general led the investigation into the automaker's practices. This agreement resolves claims that the company shared sensitive information with third-party data brokers without obtaining proper consumer consent.

2Smart Driver Program Controversy

The legal action centered on the now-discontinued Smart Driver program, which tracked acceleration, braking, and trip duration. Allegations suggest GM failed to notify drivers of their enrollment in this data-collection initiative. Consequently, insurance companies reportedly purchased this behavioral data, leading to increased premium costs for many unsuspecting vehicle owners across the country.

3Mandatory Privacy Policy Changes

Beyond the financial penalty, the settlement mandates that GM significantly restrict its data collection activities. The company must now secure express consent from drivers before gathering any personal information. This shift aims to prevent the unauthorized transfer of driving habits to external entities, ensuring greater transparency regarding how vehicle telematics are utilized.

4Leadership and Legal Oversight

Oregon Attorney General Dan Rayfield and Washington Attorney General Nick Brown co-led the coalition against the automaker. The group included representatives from major states such as New York, Florida, and Pennsylvania. Their investigation concluded that drivers were essentially misled, believing the program was for safety rather than a tool for data monetization.

5Corporate Response and Stance

GM spokesperson Charlotte McCoy stated that the company ended the Smart Driver program in 2024. The firm claims this settlement reinforces existing efforts to strengthen internal privacy practices. GM maintains that connected vehicle data is intended to enable safer and more personalized experiences, despite the previous failures in managing consumer data disclosures.

6Precedent of Legal Challenges

This national settlement follows a smaller $12.75 million agreement reached in California just months prior. These recurring legal challenges highlight the growing scrutiny surrounding automotive data privacy. As vehicles become increasingly connected, regulators are intensifying their focus on how manufacturers handle the vast amounts of behavioral information generated by modern driving systems.

7Impact on Insurance Markets

The core issue involved the secondary market for driving habit data, which directly influenced insurance pricing models. By selling this information to brokers, GM enabled insurers to adjust premiums based on granular driving metrics. The settlement effectively disrupts this specific data pipeline, forcing a re-evaluation of how insurers access and utilize driver-specific telematics.

8Future of Connected Vehicles

The resolution underscores a critical shift in the automotive industry regarding consumer trust and data governance. Manufacturers must now balance the technical benefits of connected services with strict regulatory compliance. Future product development will likely prioritize explicit user control, as the cost of non-compliance has proven to be substantial for major automotive players.

Original article: The Verge (theverge.com) — GM Settles Driver Data Privacy Claims for $220 Million