Acting Attorney General Cori Mills Announces that GM Will Pay Alaska $2.5 Million for Selling Drivers’ Private Data
General Motors (GM) will pay $220 million, including $2.5 million to Alaska, to settle allegations it sold drivers' private data to third parties without consent. The settlement requires GM to obtain explicit consent before collecting or sharing data and to implement a data privacy program. GM's Smart Driver program, which tracked driving habits, was found to have shared data with insurers, affecting premiums.
How this was made
The 30-second read
Why it matters
The settlement mandates affirmative express consumer consent and requires GM to implement and assess a robust data privacy program, plus dealership oversight and training to prevent unauthorized enrollment in data collection.
Market read
Traders may reprice GM’s connected-vehicle data monetization risk and compliance burden following a multi-state privacy enforcement settlement with explicit consent requirements.
What to watch
The article does not quantify GM’s ongoing compliance cost, potential class-action exposure, or whether similar consent practices are already being implemented, which could change the magnitude of financial impact.
Background
The coalition alleges GM sold Smart Driver driving and location data to data brokers, which then sold it to insurers to adjust premiums.
Ticker impact
Alaska AG settlement requires GM to obtain express consent before collecting or disclosing Smart Driver driving and location data, with $2.5M to Alaska.
Likely modest downside or volatility as investors price ongoing privacy/compliance costs and potential follow-on scrutiny.
The article describes a coalition settlement with specific consent and program obligations tied to GM’s Smart Driver and OnStar data sharing, which can affect costs and risk profile even without guidance changes.
Market effects
Connected-car and telematics data monetization models face heightened consent and oversight expectations, potentially pressuring peers’ compliance costs.
US state AG coalition enforcement highlights a multi-state regulatory approach that can spread to other states and jurisdictions.
Adds to global privacy enforcement momentum, reinforcing stricter data governance expectations for automakers with connected services.
Counterpoint
The settlement is a finite monetary payment and may be viewed as a contained remediation step, limiting longer-term earnings impact.
Key entities
- companyGeneral Motors
Subject of the multi-state AG settlement over Smart Driver data collection and sharing practices.
- governmentAlaska
Receives $2,508,188 from the settlement as part of the coalition action.
- personCori Mills
Acting Alaska Attorney General announcing the settlement.
