The FTC’s data-sharing order against GM is finally settled

The Federal Trade Commission said Wednesday it has finalized an bid that bans General Motors and its OnStar telematics work from sharing definite user information with user reporting agencies. The finalized order, which comes a twelvemonth aft the bureau reached a proposed settlement with GM, besides requires the automaker to beryllium much transparent with its consumers and get their explicit consent connected immoderate information collection.

The finalized order comes astir 2 years aft a New York Times study showed however GM and OnStar collected, used, and sold drivers’ precise geolocation information and driving behaviour to 3rd parties, including information brokers LexisNexis and Verisk. The information was collected done GM’s Smart Driver program, a escaped diagnostic contained wrong its connected car apps that tracked and rated driving behaviors and seatbelt use. Data brokers sold this accusation to security providers, which could impact customers’ rates, the NYT reported astatine the time.

GM discontinued the Smart Driver programme successful April 2024 crossed each of its brands, citing lawsuit feedback. GM said astatine the clip it unenrolled each customers and ended its third-party telematics relationships with LexisNexis and Verisk.

The FTC alleged that GM and OnStar utilized a misleading enrollment process to get consumers to motion up for its OnStar connected conveyance work and OnStar Smart Driver feature. The FTC besides alleged the automaker failed to intelligibly disclose that the information would beryllium collected and sold to 3rd parties.

Under the bid finalized Wednesday, GM is besides required to get explicit consent from consumers anterior to collecting, using, oregon sharing connected conveyance data. This process occurs astatine the dealership erstwhile a user buys a car from a GM brand. At that point, the OnStar strategy is linked to that peculiar conveyance VIN fig and the caller proprietor is asked whether they hold oregon not with information collection, according to GM.

There are immoderate exceptions to the information postulation ban, however. GM is allowed to stock determination information with exigency archetypal responders and for interior research, the FTC said. GM confirmed this, noting it collects information for interior probe and improvement and sometimes shares de-identified, oregon anonymized information (not associated with circumstantial drivers oregon vehicles) with prime partners to heighten metropolis infrastructure and amended roadworthy safety. For instance, information has been shared with the University of Michigan, which utilized it for urban planning.

GM indispensable besides found a mode for each U.S. consumers to petition a transcript of their information and question its deletion and springiness them the quality to disable the postulation of precise geolocation information from their vehicles. GM says it has already complied with these mandates.

GM says it began overhauling its policies and programs connected information postulation and privateness successful 2024. For instance, the automaker said it has consolidated galore of its U.S. privateness statements into a single, simpler connection and expanded its a GM privateness programme that allows customers to entree and delete their idiosyncratic information.

“The Federal Trade Commission has formally approved the statement reached past twelvemonth with General Motors to code concerns,” an emailed connection from GM reads. “As conveyance connectivity becomes progressively integral to the driving experience, GM remains committed to protecting lawsuit privacy, maintaining trust, and ensuring customers person a wide knowing of our practices.”