GM Settles Data Privacy Lawsuit for $220 Million
Automaker reaches agreement with 35 states over unauthorized sharing of driver behavior data.
1Unauthorized Data Monetization
General Motors faced legal scrutiny after marketing its Smart Driver system as a safety tool for parents and adults. Investigations revealed the company shared driving behavior data with third-party brokers without explicit user consent. These brokers subsequently sold the sensitive information to insurance providers, leading to unexpected premium hikes for many unsuspecting vehicle owners.
2Multi-State Legal Action
Following an initial settlement with the Federal Trade Commission, General Motors reached a new agreement to pay 220 million dollars. This resolution involves the District of Columbia and 35 individual states. Attorneys general from these jurisdictions collectively sued the automaker, citing significant privacy violations regarding the handling of customer geolocation and driving habits.
3FTC Settlement Precedents
Last year, GM and its subsidiary OnStar entered a formal settlement with the FTC to address these privacy concerns. The agreement prohibited the companies from sharing specific types of driver data with third parties for a five-year period. This regulatory action served as the primary catalyst for the subsequent multi-state litigation and financial penalties.
4Discontinuation of Smart Driver
In response to the mounting legal pressure and public backlash, General Motors officially discontinued the Smart Driver program across its entire vehicle range. The company ceased the collection and sharing of geolocation and driver behavior data to comply with the finalized January agreement. This move marks a complete pivot in their connected vehicle strategy.
5Impact on Insurance Premiums
The core of the consumer grievance centered on the financial impact of shared data. Drivers reported that their insurance costs increased directly due to the information provided by brokers to insurers. Many affected individuals claimed they never authorized the sharing of their driving metrics for commercial purposes, highlighting a major breakdown in transparency.
6Regulatory Compliance Requirements
The settlement mandates strict adherence to data sharing prohibitions for the next five years. GM must ensure that geolocation and driving behavior data remain protected from third-party brokers. This oversight is designed to prevent the recurrence of the practices that led to the initial lawsuits and the subsequent multi-state financial settlement agreement.
7Consumer Privacy Expectations
This case underscores the growing tension between connected vehicle features and user privacy rights. As automakers integrate more tracking technology, the expectation for clear, informed consent becomes paramount. The legal outcome serves as a warning for the industry regarding how customer data is processed, shared, and monetized within the broader insurance ecosystem.
8Industry Accountability Standards
The 220 million dollar payment reflects the severity of the privacy breach and the collective action of state regulators. By holding a major automaker accountable, the states have set a firm precedent for data handling in the automotive sector. Future vehicle software deployments will likely require more rigorous privacy audits and transparent disclosures.
Original article: Ars Technica - All content — GM Settles Data Privacy Lawsuit for $220 Million