GM Settles Driver Data Privacy Lawsuit for $220 Million
General Motors resolves allegations regarding unauthorized driver data sharing with insurance brokers.
1Multistate Legal Settlement Reached
General Motors agreed to a $220 million settlement with 35 states and the District of Columbia. This resolution addresses allegations that the automaker collected and sold driver data without informed consent. The agreement follows investigations into how vehicle metrics were shared with data brokers and subsequently utilized by insurance companies for premiums.
2Scope of Data Mismanagement
Investigators found that GM collected precise location information, speed, and seatbelt usage metrics. This data was funneled to brokers, bypassing customer knowledge. The practice persisted despite company claims that information would not be shared with insurers without express consent. The settlement covers jurisdictions that challenged these specific data handling and disclosure practices.
3Incentivized Enrollment and Deception
The Washington Attorney General’s office revealed that dealerships were incentivized to enroll customers in the Smart Driver program. In some instances, employees accepted terms on behalf of drivers without their knowledge. Furthermore, the OnStar app incorrectly informed over 370,000 drivers that they were not enrolled, even while data collection remained active.
4Financial Impact vs Net Income
The $220 million penalty represents less than 7 percent of GM’s $3.3 billion net income reported for the third quarter ending September 30, 2026. While significant, the figure is relatively small compared to the company's quarterly earnings, leading some observers to characterize the payment as a minor financial consequence for the automaker.
5Program Termination and Regulatory Pressure
GM officially terminated the Smart Driver program in April 2024, shortly after a New York Times investigation exposed the data-sharing practices. This move followed intense scrutiny regarding the lack of transparency. The company previously finalized a separate settlement with the Federal Trade Commission in January 2026 to address similar privacy concerns.
6New Privacy Compliance Requirements
Under the new agreement, GM must limit the driving data it collects and enhance the protection of customer personally identifiable information. The company is mandated to establish a comprehensive data privacy program. These requirements build upon previous FTC orders that demand express consent before collecting, using, or sharing any covered driving metrics.
7Ongoing Legal and Regional Actions
Legal challenges remain active in various regions, including a separate ongoing case in Texas. California previously secured a distinct $12.75 million settlement with GM in May regarding the same data practices. The current multistate agreement is described by the Washington Attorney General’s office as the strongest resolution reached with GM thus far.
8Corporate Stance on Data Usage
Despite the settlement, a GM spokesperson maintained that driver data collection remains a best practice for enabling personalized vehicle experiences. The company claims it is committed to transparency regarding information protection and customer choice. This highlights the ongoing tension between connected vehicle functionality and the regulatory requirements for user data privacy.