General Motors ($GM) agreed to pay $220 million to settle allegations that it sold drivers’ personal driving and location data without adequate disclosure or consent. The October 29 settlement with 36 attorneys general addresses information passed through data brokers to insurers, which used it in setting premiums.

• Washington and Oregon co-led the investigation. Washington will receive $12.3 million.
• Authorities alleged GM enrolled millions of drivers in its Smart Driver program between 2016 and 2024 while failing to disclose that their data would be sold for insurance purposes.
• The investigation found the OnStar app incorrectly told more than 370,000 drivers they were not enrolled while GM collected and sold their data.
• The settlement requires affirmative express consent for covered driving and location data collection and disclosure, subject to specified exceptions.
• GM must implement privacy safeguards, internal and external assessments, and dealership oversight and training.
• The consent decree contains no admission of the alleged facts or liability by GM.

Relevant Companies

• General Motors ($GM) — Faces the settlement payment and ongoing privacy-compliance requirements.

Editor’s Note: This is a developing story. This article may be updated as more details become available.