AG announces $4.5M settlement with General Motors for sharing drivers' private data
General Motors (GM) will pay $220M to settle allegations of illegally selling driver data to third parties, including insurers. Vermont will receive $4.54M. The settlement follows claims that GM's Smart Driver program collected and sold data without proper consent, affecting millions of drivers. GM must now obtain explicit consent and improve data protection.
How this was made

The 30-second read
Why it matters
The settlement mandates affirmative express consent before collecting or disclosing driving and location data, plus limits on collected data and requirements for a comprehensive privacy program, dealership oversight, and training.
Market read
For traders, this is a concrete regulatory enforcement outcome with explicit consent and privacy-program obligations that can affect GM’s connected-vehicle strategy and compliance risk profile.
What to watch
Deal terms emphasize consent and privacy-program assessments, but the article does not quantify future cost impact or whether GM faces additional private litigation, which could be the next driver.
Background
Vermont and a bipartisan coalition of 35 state attorneys general investigated GM’s Smart Driver program, which tracked driving behavior and location and was allegedly sold downstream to data brokers and insurers.
Ticker impact
General Motors agreed to a $220M settlement over allegations it sold Smart Driver and location data to brokers and insurers without express consent.
Likely downside bias as investors price ongoing regulatory and compliance costs plus potential further scrutiny of connected-vehicle data practices.
The article describes a material enforcement settlement with specific consent and privacy-program obligations, which typically increases future operating and legal/regulatory risk.
Market effects
Connected-car and telematics data monetization models face heightened regulatory and consent requirements, potentially pressuring peers’ compliance costs and business practices.
US state AG coordination signals broader enforcement risk across jurisdictions, not limited to Vermont.
May reinforce global privacy enforcement trends for automotive data and location tracking, affecting multinational OEM compliance strategies.
Counterpoint
The settlement is a finite monetary resolution and GM discontinued Smart Driver after reporting, so incremental downside may be limited if remediation is already underway.
Key entities
- companyGeneral Motors
Subject of the settlement, accused of selling consumers’ driving behavior and location data without express consent.
- government_officeVermont Attorney General Charity Clark
Announced the settlement and will receive $4.54M as Vermont’s share due to leadership in the investigation.




