GM Allegedly Spied On Drivers And Sold Their Data, Now It's Paying A $220M Settlement
General Motors (GM) has agreed to a $220 million settlement after allegations of selling driver data to third parties without clear consent. The settlement includes terms to limit data collection and establish new privacy practices. According to reports, GM shared vehicle data, including trip details and driving behavior, with data broker LexisNexis, which insurers used to adjust rates. Drivers were often unaware of this data-sharing, and the process to opt-out was complex.
How this was made
The 30-second read
Why it matters
GM must implement a new privacy program within 180 days, appoint a Chief Privacy Officer, issue clearer privacy notices, obtain affirmative consent for certain data collection, request deletion of shared data before Jan. 16, 2025, and allow drivers to disable location services.
Market read
A material legal settlement with detailed privacy mandates creates near-term compliance deadlines and sustains litigation and reputational risk for GM.
What to watch
Insurance-rate impacts and driver opt-out friction are central to the allegations, but the article does not quantify ongoing revenue impact from data sales or the likelihood of additional private suits.
Background
The piece ties the dispute to a 2024 New York Times report alleging GM shared vehicle driving data with data broker LexisNexis, including speeding and hard-braking events, often without clear consent.
Ticker impact
General Motors agreed to a $220M settlement over alleged sale of driver data via OnStar Smart Driver, with mandated privacy and consent changes through 2046.
Likely downside bias as investors price ongoing privacy/compliance costs and reputational/legal overhang, partially offset by settlement finality.
The article describes a large settlement ($220M) plus specific operational requirements (new privacy program, Chief Privacy Officer, affirmative consent, deletion requests), which are direct risk and cost drivers for GM.
Market effects
Raises scrutiny for automakers’ connected-car data practices and could increase compliance costs across the auto IoT ecosystem.
US state AG coalition action highlights a multi-state enforcement model that can spread to other automakers.
May reinforce global privacy enforcement trends for vehicle telemetry and data brokers, affecting cross-border connected services.
Counterpoint
Settlement does not equal admission of wrongdoing, and GM has already discontinued Smart Driver, which may limit incremental financial exposure beyond the agreed terms.
Key entities
- companyGeneral Motors
Agreed to a $220M settlement and privacy/compliance obligations related to alleged driver data sharing via OnStar Smart Driver.
- companyLexisNexis
Data broker alleged to have received GM vehicle driving data used to build driver risk profiles.
- governmentOregon Attorney General
Co-leader in a multi-state coalition case alleging violations under Oregon’s Unlawful Trade Practices Act.
