# GM Settles Driver Data Privacy Lawsuit for $220 Million General Motors resolves allegations regarding unauthorized driver data sharing with insurance brokers. - **Source:** [www.theregister.com - Articles](https://www.theregister.com) - **Published:** 2026-10-30 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/cead61b0-09be-4923-9824-a208de7305c5 ## Multistate Legal Settlement Reached General Motors agreed to a $220 million settlement with 35 states and the District of Columbia. This resolution addresses allegations that the automaker collected and sold driver data without informed consent. The agreement follows investigations into how vehicle metrics were shared with data brokers and subsequently utilized by insurance companies for premiums. ## Scope of Data Mismanagement Investigators found that GM collected precise location information, speed, and seatbelt usage metrics. This data was funneled to brokers, bypassing customer knowledge. The practice persisted despite company claims that information would not be shared with insurers without express consent. The settlement covers jurisdictions that challenged these specific data handling and disclosure practices. ## Incentivized Enrollment and Deception The Washington Attorney General’s office revealed that dealerships were incentivized to enroll customers in the Smart Driver program. In some instances, employees accepted terms on behalf of drivers without their knowledge. Furthermore, the OnStar app incorrectly informed over 370,000 drivers that they were not enrolled, even while data collection remained active. ## Financial Impact vs Net Income The $220 million penalty represents less than 7 percent of GM’s $3.3 billion net income reported for the third quarter ending September 30, 2026. While significant, the figure is relatively small compared to the company's quarterly earnings, leading some observers to characterize the payment as a minor financial consequence for the automaker. ## Program Termination and Regulatory Pressure GM officially terminated the Smart Driver program in April 2024, shortly after a New York Times investigation exposed the data-sharing practices. This move followed intense scrutiny regarding the lack of transparency. The company previously finalized a separate settlement with the Federal Trade Commission in January 2026 to address similar privacy concerns. ## New Privacy Compliance Requirements Under the new agreement, GM must limit the driving data it collects and enhance the protection of customer personally identifiable information. The company is mandated to establish a comprehensive data privacy program. These requirements build upon previous FTC orders that demand express consent before collecting, using, or sharing any covered driving metrics. ## Ongoing Legal and Regional Actions Legal challenges remain active in various regions, including a separate ongoing case in Texas. California previously secured a distinct $12.75 million settlement with GM in May regarding the same data practices. The current multistate agreement is described by the Washington Attorney General’s office as the strongest resolution reached with GM thus far. ## Corporate Stance on Data Usage Despite the settlement, a GM spokesperson maintained that driver data collection remains a best practice for enabling personalized vehicle experiences. The company claims it is committed to transparency regarding information protection and customer choice. This highlights the ongoing tension between connected vehicle functionality and the regulatory requirements for user data privacy. ## Sources covering this story - https://www.theregister.com/security/2026/10/30/gm-cracks-the-petty-cash-box-for-multistate-driver-tracking-settlement/5306721 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._