Insurance Daily News

GM Settles Driver Privacy Lawsuit for $220 Million

General Motors has agreed to a $220 million settlement to resolve claims that the automaker improperly sold sensitive driver location and behavior data to third-party brokers. This agreement concludes a legal challenge brought by a coalition of attorneys general representing 35 states and the District of Columbia. The dispute centered on GM’s "Smart Driver" program, which operated from 2016 until it was shut down in 2024. The program, which often bundled services with the company’s OnStar diagnostic and navigation features, was marketed as a tool to enhance personal driving safety. However, regulators argued that the company failed to uphold its commitment to protect user privacy, instead sharing data with brokers who subsequently provided it to insurance companies for rate-setting purposes.

This settlement is significant for the automotive and software industries, as it highlights the growing tension between the monetization of connected vehicle data and consumer privacy rights. While insurers like Progressive, Allstate, and Geico have long utilized telematics to adjust premiums based on driving habits, this case underscores the legal risks associated with how that data is harvested and shared. Beyond the financial penalty, the agreement mandates that GM must restrict the volume of driving data it collects and secure explicit permission from drivers before any future data collection or sharing occurs.

Contextually, this settlement reflects a broader regulatory crackdown on how corporations handle consumer information. This follows a $12.75 million agreement in May regarding a California investigation into similar data practices and a January 2025 pact with the Federal Trade Commission. Under that FTC agreement, GM committed to withholding geolocation and driving behavioral data from consumer reporting agencies for a five-year period. For the automotive sector, this signals a transition toward more transparent data governance models.

From an industry perspective, this case serves as a warning for software developers and data architects working in the Internet of Things (IoT) and connected systems space. As vehicles become increasingly digitized, the line between helpful diagnostic telemetry and invasive surveillance is blurring. Companies must now prioritize "privacy by design" to avoid similar litigation. Moving forward, stakeholders should monitor how other automakers adjust their data collection policies to comply with these heightened expectations. The shift suggests that future connected vehicle services will likely require more granular user consent mechanisms, potentially slowing down the rapid integration of data-driven insurance products into standard vehicle software suites.

Why it matters

This settlement establishes a critical legal precedent for how automotive companies must handle connected vehicle data, signaling an end to the era of opaque data sharing between manufacturers and insurers.

FAQ

What was the core allegation against General Motors?
GM was accused of selling private driver location and behavior data to brokers without permission, which was then used by insurers to determine or increase insurance premiums.

Which program was at the center of this legal dispute?
The Smart Driver program, which was active between 2016 and 2024, is the primary focus of the settlement.

What are the new requirements for GM under this settlement?
GM is required to limit the amount of driving data it collects and must obtain explicit consent from drivers before collecting or sharing any of their data.

Source: Claims Journal. See the original source for full details.