GM to Pay $220 Million Settlement Over Private Driver Data Sales to Insurance Companies

General Motors Settles Driver Data Suit for $220 Million With Connecticut Securing $6 Million Cut

General Motors has agreed to a $220 million multistate settlement after investigators found the automaker secretly tracked drivers’ habits behind the wheel and sold the data to third-party brokers who resold it to auto insurers. Connecticut will receive at least $6 million from the agreement, CT Capitol Dispatch reported.

The case centers on GM’s Smart Driver program, a feature bundled with the OnStar vehicle safety service that executives marketed to customers as a tool to improve road safety. Instead, according to an investigation led by state attorneys general, the automaker enrolled millions of drivers between 2016 and 2024 and harvested granular telematics data—including trip start and end times, total distance, speeding instances, and hard braking or acceleration.

Connecticut Attorney General William Tong noted that his office’s probe was among the state’s initial enforcement actions under the Connecticut Data Privacy Act, which passed in 2022 and took effect the following year. More than 100,000 residents in the state may have been affected by the unauthorized data sharing.

GM SETTLEMENT — $220 Million Over Secret Driver Data Sales

How the Smart Driver Program Fed Data Directly to Insurance Rating Systems

Drivers were routinely told that their information would not be shared with insurance companies without explicit consent. In practice, the data went to data brokers like LexisNexis and Verisk.

Insurance companies then tapped those brokers to acquire driving behavior profiles, using the harvested metrics to quietly adjust customer insurance premiums upward. Drivers paid higher rates based on surveillance metrics they never knowingly authorized.

“GM turned private vehicles into mobile insurance surveillance machines without consumer consent or awareness,” Tong said, according to WFSB reporting cited by hoodline.com. “GM profited from the sale of this personal driving data, and consumers paid the price in the form of higher premiums.”

Compounding the disclosure failures, the OnStar app mistakenly told more than 370,000 drivers nationwide that they were not actually enrolled in Smart Driver when they were actively being tracked. GM continued holding onto consumer data even after individuals were removed from the program.

States Secure Millions in Multistate Settlement over Data Sales

Across the United States, more than 10.2 million drivers were impacted by GM’s data collection and sale practices. Connecticut’s $6 million payout is part of the broader $220 million agreement that spans 36 participating states. California previously reached a separate $12.75 million settlement with the automaker in May over the same data practices, which included a five-year ban on selling personal data to brokers.

Gm to pay over secret driver data sales connecticut gets cut
Photo: hoodline.com

A GM spokesperson stated that the multistate agreement formally addresses the Smart Driver program, which the company discontinued in 2024. Media reporting had previously exposed the practices, prompting Ars Technica to report that GM stopped sharing Smart Driver data with LexisNexis and Verisk as of March 20, 2024.

Under the terms of the new settlement, GM must obtain explicit affirmative consent from consumers before collecting or disclosing any future driving and location data, strictly limit the total volume of driving data it gathers, and maintain a comprehensive privacy program to safeguard personal information.

Earlier coverage: GM to pay $220 million in multistate settlement over driver data privacy