General Motors to pay $220 million settlement over sale of drivers’ private data
General Motors (GM) has agreed to a $220 million settlement with 36 U.S. states to resolve allegations that it illegally sold drivers’ private driving behavior and location data to data brokers. The settlement requires GM to obtain explicit consent from drivers before collecting or sharing their data and mandates a third-party assessment of its privacy compliance program.
Editor, Lazyfounder
What the settlement requires
The $220 million settlement resolves allegations that GM, through its OnStar service, sold precise geolocation and driving behavior data to data brokers such as LexisNexis and Verisk. These brokers reportedly resold the data to insurance providers, raising concerns about consumer privacy.
As part of the agreement, GM must now obtain express consent from drivers before collecting or sharing their driving and location data. The company is also required to undergo a third-party assessment of its privacy program to ensure compliance with the settlement’s terms.
GM has already discontinued its Smart Driver program, which was linked to the data collection practices under scrutiny. While the company will no longer sell vehicle information tied to individual drivers, it may still share anonymized data with partners.
Impact on drivers and data access
Drivers who decline to share their data may face limitations in accessing certain features, though the settlement does not specify which ones. The agreement reflects broader industry concerns about how automakers collect, use, and monetize driver data.
In a statement, GM emphasized its commitment to transparency and customer choice, stating that connected vehicle data enables "safer, more helpful and personalized experiences." The company added that it will no longer sell vehicle information linked to individuals, their location, or driving behavior.
What this means
Lazyfounder analysis — our interpretation, not reported fact.
This settlement signals a growing regulatory crackdown on how automakers handle driver data, particularly in industries like telematics and insurance. For founders and operators, it underscores the risks of monetizing user data without explicit consent—especially in markets with strict privacy laws. The requirement for third-party audits could also become a standard for companies collecting sensitive data, increasing compliance costs.
For startups in the automotive or data brokerage space, this case serves as a cautionary example: even anonymized data-sharing agreements may face legal scrutiny if regulators perceive a risk to consumer privacy. The settlement also highlights the tension between personalized services and data privacy, a balance that operators will need to navigate carefully.
Related on Lazyfounder
Sources
- TechCrunch · 2026-10-29
GM reaches $220M settlement over selling drivers’ private data
This story is an original summary drafted with AI by Lazyfounder from the reporting listed above and checked by automated validation. Facts are attributed to their original publishers; sections marked as analysis are Lazyfounder's. Where a source is in another language, facts were machine-translated and quotations are reported, not reproduced. Read the original coverage via the links, and see our AI policy and corrections policy.
About the author
Editor, Lazyfounder
Tarun Mottlia edits LazyFounders, covering Indian startups, funding rounds, AI and product launches. Every story on the site is AI-assisted and checked against its cited sources before publication.
More stories by Tarun MottliaGet the LazyFounder Brief
Startup, funding and AI news in a five-minute read. Join the early-access list.
