General Motors has agreed to pay $220 million to resolve allegations that it improperly shared customers’ driving behavior and vehicle-location information with data brokers. Those brokers supplied the records to insurance companies, which investigators said used them to set rates and, in some cases, raise premiums.
The agreement was announced by attorneys general from 35 states and the District of Columbia. It concerns GM’s Smart Driver program, which operated from 2016 through 2024 and collected information from millions of motorists. The program included customers who used GM’s OnStar safety, navigation and vehicle-diagnostic services.
What the agreement requires
Under the agreement, GM must restrict its collection of driving information and obtain motorists’ express consent before collecting or sharing that data. The allegations center on the way the program was presented to customers and how their information was later handled.
- GM must limit the collection of driving information.
- The company must obtain explicit permission before collecting or sharing driving data.
- The agreement addresses information about driving behavior and vehicle locations gathered through Smart Driver and related services.
State investigators alleged that GM marketed Smart Driver as a way for motorists to improve driving safety, while personal information was sold without proper permission. The records included details about how people drove and where their vehicles traveled. Data brokers then provided that information to insurers for use in determining auto-insurance pricing.
“People bought a car, not a tracking device.” — Dan Rayfield, Oregon attorney general
Rayfield and Washington Attorney General Nick Brown led the bipartisan coalition that investigated GM’s data practices. The case illustrates how information collected through connected-car services can move beyond vehicle safety, navigation or diagnostics and become relevant to financial decisions such as insurance pricing.
What GM said
A GM spokesperson said the resolution reinforces privacy measures the company had already introduced. The agreement applies to the automaker’s collection and sharing of driving information and requires permission before those activities occur.
| Item | Details |
|---|---|
| Settlement amount | $220 million |
| States involved | 35 states and the District of Columbia |
| Program period | 2016-2024 |
| Information at issue | Driving behavior and vehicle-location data |
The agreement does not change the fact that the allegations were resolved through a settlement rather than a trial finding described in the report. State investigators said the information affected insurance decisions, including premiums. GM said the resolution supports privacy protections already put in place.
For consumers, the action places connected-vehicle data in the broader debate over personal information used in pricing. The agreement specifically addresses when GM may collect or share driving records and requires a clear consent step before those practices occur.
