General Motors Reaches $220 Million Privacy Settlement

The automaker settles with 36 states and Washington, DC over allegations it sold driver data to insurance firms.

Updated on Oct. 29, 2026 in Insurance

Isometric editorial illustration of a metallic wheel assembly surrounded by geometric blocks, representing corporate data privacy regulations.
General Motors will pay $220 million to settle claims from 36 states and Washington, DC regarding unauthorized sharing of driver data with insurers. AI Illustration. Upload story photo >

Live Poll

Should companies be allowed to sell your vehicle's driving data to insurance providers?

General Motors has agreed to a $220 million settlement with 36 states and Washington, DC to resolve claims regarding the unauthorized sale of driver data to insurance companies. The agreement mandates that the company implement a comprehensive privacy program and restricts the future collection of specific data points.

Why it matters

The settlement addresses significant privacy concerns regarding how automotive manufacturers handle and monetize consumer driving behavior data. By restricting data collection, the agreement aims to protect driver information from being shared with third-party insurers without adequate transparency.

The $220 million agreement involves 36 states and Washington, DC. It remains unknown which specific categories of vehicle telematics data will be strictly prohibited from collection under the new privacy program requirements.

The players

General Motors

General Motors is a multinational automotive manufacturer that produces and sells vehicles under brands including Chevrolet, Buick, GMC, and Cadillac.

Connecticut

Connecticut is a U.S. state that acted as the lead authority in negotiating the multistate settlement regarding automotive data privacy.

The details

The settlement stems from allegations that General Motors provided driver behavior data to insurance companies, which was then allegedly used to adjust premiums. As part of the resolution, the automaker must overhaul its data practices to ensure compliance with privacy regulations.

Timeline

  1. Connecticut announced the multistate privacy settlement with General Motors on October 29, 2026.

Market Dynamics

This settlement follows the pattern set by the Federal Trade Commission's (FTC) data privacy enforcement framework in demanding corporate transparency. It marks a broader regulatory shift toward restricting how manufacturers monetize consumer data harvested through connected devices.

The settlement may influence future vehicle connectivity features and how insurance companies assess risk based on telematics. Readers should monitor their own auto insurance policies for changes in usage-based tracking requirements following these industry-wide privacy updates.

The takeaway

Drivers should be aware that their vehicle data is often collected and potentially shared with third-party insurers to determine policy costs. Reviewing your vehicle's privacy settings and the terms of service for connected apps is a proactive way to manage personal data exposure.

Further reading

For more information on current industry standards, visit the United States Insurance section.

Live Poll

Should companies be allowed to sell your vehicle's driving data to insurance providers?