General Motors has finalized a $12.75 million settlement with California authorities following a two-year investigation into its practice of selling detailed driving data of customers to third-party data brokers.
- GM settled a data sale lawsuit for $12.75 million
- The automaker will halt selling driver data for five years
- GM must delete existing data unless drivers consent
What happened
General Motors faced legal scrutiny from California's Attorney General over allegations that it sold sensitive driving data of hundreds of thousands of customers to data brokers such as Verisk Analytics and LexisNexis Risk Solutions. The data included personally identifiable information, geolocation tracking, and driving behavior. The investigation started following reports by The New York Times in 2024 that raised concerns about insurance companies potentially using this information to influence rates.
The resulting two-year legal battle culminated with GM agreeing to pay $12.75 million in penalties. As part of the settlement, GM committed to stopping the sale of driver data to consumer reporting agencies for five years, deleting existing driving data within 180 days unless drivers explicitly permit retention, and implementing a formal privacy program to manage its data practices.
Why it matters
This settlement highlights the growing importance of consumer privacy protections related to connected vehicle data. By sharing detailed location and behavioral information, automakers can inadvertently expose highly personal insights about drivers' lives, including home address, workplaces, and daily routines. The case emphasizes the regulatory scrutiny automakers face in managing this sensitive data responsibly.
For consumers, the agreement offers more control and transparency regarding their driving data. Although the investigation found that California law restricts using such data for insurance rates, the unauthorized disclosure to brokers raised significant privacy concerns. GM's commitment to overhaul its data policies signals a shift toward stronger privacy safeguards within the automotive industry.
What to watch next
Moving forward, it will be important to observe how GM implements its new privacy program and whether other automakers face similar legal challenges as vehicles become increasingly connected. Industry-wide standards and clearer regulatory frameworks for vehicle data collection and sharing may emerge in response to this case and others like it.
Additionally, consumer advocacy groups and regulators may push for stronger laws to govern driving data, influencing how insurance companies, data brokers, and manufacturers handle this information. GM's financial gains from data sales, which reportedly exceeded $20 million, suggest automakers remain motivated to monetize vehicle data under tighter restrictions.