01. Driving data sold for insurance use
States alleged that GM sold identifiable driving and location data to brokers for insurance products, after telling drivers it would not share that data with insurers without express consent.
General Motors: $220M multistate privacy settlement
A 36-attorney-general settlement resolves allegations that General Motors sold drivers' Smart Driver behavior and location data to brokers and insurers. GM will pay $220 million and must get affirmative consent before collecting or disclosing that data.
- State AG
- United States (multistate)
Last updated
Enforcement snapshot
- Amount
- $220M
- Regulator
- 36 attorneys general
- Sector
- Automotive
- Published
- October 2026
Technical failure modes
What states alleged
02. Dealerships enrolled drivers without their consent
States alleged that dealerships signed customers up for Smart Driver and OnStar in one process, and that employees accepted the terms while bonuses rewarded the signup.
03. The app showed the wrong enrollment state
States alleged that the OnStar app told more than 370,000 drivers they were not in Smart Driver while GM was collecting and selling their data.
04. Unenrollment left the data in place
States alleged that GM later unenrolled those drivers without explaining the error, and left the data with the brokers and insurers.
Remediation path
What Ketch would help validate
Related paths
Related product and solution paths
More enforcement analysis
Other settlements with the same failure modes
Next step
Do not wait for a demand letter to find the gap
The General Motors settlement is the connected-vehicle consent case. Affirmative consent has to come before driving and location data is collected or shared.
Get Started Free
Get started in less than 5 min