General Motors to pay Connecticut over $6 million for selling drivers’ private data
General Motors (GM) agreed to a $220 million settlement with a coalition of 36 states, including Connecticut, over allegations of selling drivers' private data to third parties without consent. Connecticut's share is over $6 million. The settlement requires GM to obtain explicit consent before collecting or sharing driving and location data. The case involved GM's Smart Driver program, which allegedly impacted over 10.2 million Americans.
How this was made
The 30-second read
Why it matters
The settlement resolves allegations of unlawful data sales and requires affirmative express consent before collecting or disclosing driving and location data, increasing compliance obligations and reducing monetization flexibility.
Market read
A multistate AG settlement with a large automaker adds concrete legal and regulatory cost and constrains connected-car data practices, which can affect investor risk models for GM and the broader auto-tech data ecosystem.
What to watch
The article does not quantify ongoing operational impact beyond consent and oversight mandates, and it does not state whether GM faces additional penalties or specific data-sharing contract terminations beyond the settlement terms.
Background
The Smart Driver program enrolled millions of drivers (2016-2024) and was marketed as improving safety, with allegations that GM sold sensitive driving and location data to third parties used by insurers to set premiums.
Ticker impact
Connecticut and a coalition of AGs settled with General Motors over alleged unlawful sale of drivers’ location and driving-behavior data, including a $220M deal and consent requirements.
Likely downward pressure as investors price ongoing privacy enforcement and potential limits on Smart Driver data usage.
The article describes a material multistate settlement ($220M total, with Connecticut’s share over $6M) plus affirmative express-consent mandates, which directly affect GM’s data collection and disclosure model.
Market effects
Raises scrutiny for automakers’ connected-car and telematics data monetization, potentially pressuring peers’ privacy compliance and contract terms with data brokers/insurers.
Connecticut’s enforcement action signals aggressive state-level privacy oversight that can drive similar multistate actions.
Supports a broader global trend toward stricter consent requirements for location and behavioral data, affecting cross-border connected mobility strategies.
Counterpoint
The settlement may be viewed as a finite remediation cost, with injunctive relief already partially addressed by the FTC settlement in 2025, limiting incremental downside.
Key entities
- companyGeneral Motors
Subject of the multistate settlement over alleged unlawful sale of drivers’ private location and driving-behavior data.
- government_officialConnecticut Attorney General William Tong
Led the Connecticut portion of the settlement and framed it as enforcement of the Connecticut Data Privacy Act.
- regulatorFederal Trade Commission
Previously settled with GM on Jan. 16, 2025, providing injunctive relief but no monetary payment.
