GM's OnStar App Sold Drivers' Data Without Consent, It's Now Paying $220M To Settle
General Motors (GM) will pay a $220 million settlement for selling customer data collected through its Smart Driver program without consent, affecting 370,000 drivers. The settlement follows an investigation by 36 states, with GM agreeing to improve data privacy practices. The program was discontinued in 2024.
How this was made

The 30-second read
Why it matters
A multi-state AG investigation alleges GM sold driver behavior and location data to data brokers without consent and failed to properly notify users; GM now must fund a comprehensive data privacy program and add dealership-level oversight/training.
Market read
Traders may reprice GM’s connected-car data monetization risk due to a large, concrete privacy settlement and mandated compliance program.
What to watch
The article does not quantify GM’s ongoing annual compliance costs, nor does it specify whether data-sharing partners or insurers face separate actions, which could change the magnitude of future risk.
Background
GM’s OnStar Smart Driver program collected driving behavior and location data to support insurance discounts, but was discontinued in 2024 after user trust and privacy concerns.
Ticker impact
General Motors agreed to pay a $220M settlement after a state investigation found it sold OnStar Smart Driver data without consent.
Likely downside bias as investors price ongoing compliance costs and potential follow-on claims or restrictions on data sharing.
The article describes a concrete, large multi-state settlement tied directly to GM’s data collection and consent failures, which typically increases legal and compliance risk.
Market effects
Raises scrutiny for automakers’ telematics and in-car app data monetization models, potentially pressuring peers’ compliance and marketing practices.
US state AG enforcement spotlight increases near-term legal/regulatory risk premium for connected-car data providers.
May reinforce broader privacy enforcement trends that can spill into EU/UK connected mobility compliance expectations.
Counterpoint
The settlement could be viewed as a finite resolution that reduces uncertainty versus prolonged litigation, potentially limiting incremental downside beyond the announced payment.
Key entities
- companyGeneral Motors
Subject of the settlement over OnStar Smart Driver data sales without consent.
- programOnStar Smart Driver
GM program that collected driving results and location data and was later discontinued.
- regulatorWashington State Attorney General’s Office
Investigating authority cited as finding consent and notice failures.



