GM to pay Connecticut more than $6 million in driver data settlement
General Motors (GM) will pay Connecticut $6 million as part of a $220 million settlement with 35 states over allegations of illegally selling customer data to insurers. The settlement requires GM to obtain consent before collecting or disclosing data. GM tracked over 10.2 million Americans, including 123,143 Connecticut residents, between 2016 and 2024. The company ended the program in 2024 and has committed to strengthening privacy practices.
How this was made
The 30-second read
Why it matters
The settlement is a direct enforcement action with monetary payment and mandated consent and data-protection program requirements, which can affect GM’s connected-vehicle strategy and litigation exposure.
Market read
Traders may reassess GM’s privacy and connected-car data monetization risk, including compliance costs and overhang from remaining class actions.
What to watch
Pending consumer class actions and the FTC’s earlier limited injunctive relief could extend uncertainty; the settlement’s operational requirements (consent, data limits, dealership training) may affect near-term connected-vehicle feature rollouts.
Background
Connecticut alleges GM sold identifiable driving data via brokers to insurers, enabling rate-setting without proper consent; GM disputes wrongdoing but agreed to settlement terms.
Ticker impact
General Motors agreed to pay Connecticut over $6M as part of a $220M multistate settlement over alleged illegal sale of driver data to brokers used by insurers to set rates.
Likely downside bias as investors price ongoing privacy litigation risk and potential limits on connected-vehicle data collection and sharing.
The article describes a concrete state settlement with monetary payment and mandated consent, data limits, and dealership training, which typically raises compliance costs and litigation overhang.
Market effects
Raises scrutiny for automakers’ connected-car data sharing models and could increase compliance costs across the auto and insurtech data supply chain.
Connecticut enforcement adds to US state-level privacy pressure, potentially influencing other states’ approaches.
Supports a broader global trend toward stricter consent requirements for personal data processing in mobility and insurance ecosystems.
Counterpoint
GM says it ended the Smart Driver program in 2024 and has strengthened privacy practices, so incremental risk may be limited to remaining class actions and compliance implementation.
Key entities
- companyGeneral Motors
Subject of the settlement, accused of selling customer driving data to brokers used by insurers to set premiums.
- governmentConnecticut Attorney General William Tong
Announced the Connecticut payment and described the multistate settlement terms.
- regulatorFederal Trade Commission
Previously settled with GM with limited injunctive relief and no monetary payment, per the article.
