36 state attorneys general settle with General Motors $220 million over driver data sales

What happened

• The settlement resolves the lawsuit without admission of wrongdoing.
• The agreement includes commitments to change data‑sharing practices.

Why it matters

Automakers and telematics providers must reassess how they collect, retain and share driver‑behavior data to avoid similar liability. Review privacy notices and obtain clear consent before any data sale.

Business impact

The settlement imposes a substantial financial hit and forces GM to overhaul its data‑sharing processes, likely prompting industry‑wide reviews of telematics data practices.

What to check

1. 1

   audit data practicesCritical priority

   Conduct a comprehensive audit of driver‑behavior data collection, storage and sharing.

2. 2

   update privacy noticesHigh priority

   Revise privacy policies to clearly disclose any data sharing with third parties.

3. 3

   implement consent controlsHigh priority

   Add explicit opt‑in mechanisms before selling or sharing driver data.