GM reaches $220M settlement over selling drivers’ private data

General Motors volition wage $220 cardinal to 36 states to settee allegations that it illegally sold backstage driving behaviour and determination accusation to information brokers.

As portion of the settlement, GM indispensable get drivers’ explicit consent earlier it collects oregon shares their driving and determination information — presumption that are successful enactment with abstracted agreements it antecedently reached with California and the Federal Trade Commission. This colony does incorporate a caller request that GM indispensable person a third-party measure the automaker’s compliance with the privateness programme it has enactment successful place.

The statement announced Thursday settles a suit brought by a conjugation of attorneys wide from 36 states that alleged GM had sold the accusation to information brokers, which successful crook past sold it to security providers.

“This statement addresses Smart Driver, a merchandise we ended successful 2024, and reinforces steps we’ve taken to fortify our privateness practices,” GM said successful an emailed statement. “Safer, much adjuvant and personalized experiences are enabled by connected conveyance data, and GM is committed to being wide astir what accusation is used, however it’s protected, and the choices customers person astir what they share.” 

The colony comes much than 2 years aft a New York Times report showed however GM and OnStar collected, used, and sold drivers’ precise geolocation information and driving behaviour to 3rd parties, including information brokers LexisNexis and Verisk. The information was collected done GM’s Smart Driver program, a escaped diagnostic contained wrong its connected car apps that tracked and rated driving behaviors and seatbelt use. Data brokers sold this accusation to security providers, which could impact customers’ rates, the NYT reported astatine the time.

GM discontinued Smart Driver successful 2024, but that didn’t halt ineligible action. In January, the FTC finalized an order that bans GM and its OnStar telematics work from sharing definite user data. The FTC settlement, arsenic good arsenic the multi-state 1 announced Thursday, besides requires GM to beryllium much transparent with its consumers and person their explicit consent for definite collection.

GM present says it is focused connected protecting the privateness of its customers and volition nary longer merchantability conveyance accusation that tin beryllium linked to an individual, their conveyance location, oregon however they drive. However, GM whitethorn inactive disclose anonymized information not tied to an idiosyncratic with definite partners. GM has besides updated the connection successful its privateness argumentation and created a consumer-facing Privacy Center.

GM’s colony and mandated changes to however it handles lawsuit driving information travel arsenic much sensor-laden vehicles equipped with computing powerfulness participate the market. Automakers person made ample bets connected software-centric vehicles that drivers and passengers tin interact with and link with different integer apps specified arsenic their calendar, messages, and email.

GM, for instance, is adding a idiosyncratic AI assistant to OnStar, its 30-year-old information and roadside assistance service. Cameras connected the conveyance volition beryllium connected to the bundle to connection unrecorded views arsenic good arsenic clang and information recordings. Users volition besides beryllium capable to usage dependable to power definite functions connected the vehicle, including climate, and inquire questions astir immoderate circumstantial conveyance feature.

The automaker emphasized its privateness protections erstwhile it announced the caller adjunct during its GM Forward lawsuit successful October. The institution said customers volition person the quality to determine what information is shared and that the recordings person clip limits and are encrypted. GM said it and OnStar cannot entree Connected Camera recordings. Customers volition besides beryllium capable to negociate permissions. However, customers who opt not to stock their information volition apt person constricted entree to definite features, according to GM.