General Motors has agreed to pay approximately ₹2,088 crore to resolve allegations that it improperly gathered and sold drivers’ private location and behaviour records to commercial data brokers. The settlement, finalized on Thursday with attorneys general representing 35 US states and the District of Columbia, brings an end to extensive regulatory inquiries into the automaker’s Smart Driver programme. Investigators found that the collected telematics information was routinely forwarded to insurance carriers, who subsequently analyzed motorists’ individual driving habits to adjust and, in multiple instances, raise their automotive insurance premiums without adequate transparency.
Deceptive Marketing and OnStar Data Sharing
The multi-state investigation focused heavily on how General Motors operated and promoted its Smart Driver initiative, which enrolled millions of motorists between its launch in 2016 and its termination in 2024. Regulators accused the Detroit-based car manufacturer of marketing the system as an internal tool designed to enhance road safety, while quietly breaching commitments that customer driving records would remain confidential and unmarketed without explicit authorization. A large portion of affected customers had initially signed up for GM’s OnStar platform to access routine safety, navigation, and diagnostic support, unaware that background sensors were tracking their movement patterns. The state coalition, spearheaded by Oregon Attorney General Dan Rayfield and Washington Attorney General Nick Brown, argued that motorists were left uninformed regarding third-party commercial transfers. Rayfield emphasized the broader consumer protection issue by pointing out that car buyers purchased personal vehicles rather than tracking equipment.
Stricter Consent Rules and Industry Insurance Practices
Under the binding provisions of the settlement, General Motors must significantly scale back the volume of driving metrics it compiles and secure the express consent of customers prior to gathering or distributing any connected-vehicle data. Responding to the announcement, a company spokesperson stated that the agreement reinforces internal reforms undertaken to upgrade GM’s data privacy practices. The automaker maintained that vehicle connectivity provides safer and more personalized consumer services, adding that it remains committed to transparent communication about data safeguards and customer controls. At the same time, the proceedings have intensified scrutiny over automotive telematics across the wider insurance market. Firms such as Allstate, Progressive, and Berkshire Hathaway subsidiary Geico rely on driving diagnostics to evaluate risk profiles. While insurers contend that tracking systems reward responsible behaviour with reduced premiums, the GM case raised fundamental questions regarding whether safety systems should secretly double as underwriting tools.
Mounting Penalties Over Connected Vehicle Privacy
The financial settlement adds to a string of enforcement measures levied against General Motors over its handling of private consumer details. The automaker previously agreed to pay roughly ₹121 crore in May to resolve a California state probe concerning allegations that it sold driving files to two data brokers. That action followed an earlier January 2025 settlement with the US Federal Trade Commission, which barred GM from transferring vehicle geolocation coordinates and behavioural logs to consumer reporting organizations for a period of five years. This latest pact with the 35-state coalition imposes even broader compliance obligations on the capture and dissemination of digital mobility records. As modern cars become increasingly computerized, the settlement establishes an important legal standard concerning informed consent, commercial profiling, and the limits of data extraction from connected vehicles.
