GM reaches $220 million settlement over driver-data sharing
The settlement addresses allegations about sales of driving and location data and requires affirmative express consent for collection or disclosure.

Connected-car data can influence more than the driving experience. GM’s $220 million settlement highlights the consequences when vehicle data reaches insurers without adequate customer consent.
What happened
On 29 October, a coalition of 36 attorneys general announced a settlement under which General Motors will pay $220 million to resolve allegations that it sold identifiable driving behaviour and location information without consumers’ consent.
The allegations concern information passed to data brokers and subsequently to insurers. The settlement requires affirmative express consent before collecting or disclosing driving and location data, along with privacy safeguards and oversight.
Why it matters
Vehicle manufacturers, telematics providers and insurance platforms need to account for how information moves between businesses. A customer’s understanding of a driving feature may differ substantially from the downstream uses of the data it collects.
The bigger picture
The commercial value of connected-car information depends partly on trust and valid permission. For companies building data-driven services, the settlement makes consent, data minimisation and controls across distribution partners operational priorities.
