GM reaches $220M settlement over selling drivers' private data
GM will pay $220M to 36 states to settle allegations of selling drivers' private data. The automaker must now obtain express consent before collecting or sharing data and undergo third-party compliance assessments. GM discontinued the Smart Driver program in 2024 and faces similar FTC and California settlements.
How this was made

The 30-second read
Why it matters
The multistate settlement adds express-consent requirements and a third-party compliance assessment, increasing governance and potentially constraining connected-car features for users who decline data sharing.
Market read
A concrete legal settlement with explicit consent and third-party compliance oversight changes GM’s connected-vehicle data risk profile and operating requirements.
What to watch
The article notes GM may still share anonymized data with partners; the market impact may hinge on how much revenue or functionality depends on identifiable data versus aggregated insights.
Background
The settlement resolves allegations that GM’s Smart Driver program sold precise driving behavior and geolocation data to data brokers, which then sold it to insurance providers. GM previously ended Smart Driver in 2024 and faced an FTC order in January banning certain data sharing.
Ticker impact
GM will pay $220M to 36 states and must obtain express consent before collecting or sharing driving and location data, plus add third-party compliance review.
Likely downside bias as investors price ongoing privacy/compliance costs and reputational or product-access constraints, partially offset by reduced legal overhang.
The article describes a concrete multistate settlement with explicit consent requirements and a new third-party assessment mandate, which are direct operational and risk changes for GM.
Market effects
Connected-car and telematics data monetization faces tighter consent and oversight expectations, raising compliance scrutiny across automakers offering similar services.
US state AG enforcement reinforces a US regulatory framework for consumer data sharing in connected vehicles.
Could influence global privacy expectations for automotive data ecosystems, though the settlement is US-focused.
Counterpoint
GM may treat this as a manageable compliance upgrade, and the settlement could reduce uncertainty versus prolonged litigation, limiting downside.
Key entities
- companyGeneral Motors
Subject of the multistate $220M settlement over selling drivers’ private driving and location data, with new consent and compliance-assessment requirements.
- product_serviceOnStar
GM telematics service referenced in the FTC order and implicated in connected-camera and data-sharing practices.
- data_brokerLexisNexis
Named as a data broker that received sold geolocation and driving behavior data in the prior reporting described.
- data_brokerVerisk
Named as a data broker that received sold geolocation and driving behavior data in the prior reporting described.
- regulatorFederal Trade Commission
Issued an order in January banning GM and OnStar from sharing certain consumer data.




