A new General Motors settlement puts connected-car privacy back in the spotlight. On October 29, a coalition of 36 attorneys general announced a $220 million agreement resolving allegations that GM shared identifiable driving and location data without customers’ consent.
What the case covers
According to the Michigan Attorney General, the allegations concern GM’s Smart Driver program and data passed to brokers that supplied insurers. The program operated from 2016 through 2024. This is a settlement of allegations—not an announcement that every connected vehicle or aftermarket device behaves the same way.
What changes—and what does not
The announced requirements include express customer consent before collecting or disclosing driving and location data, stronger privacy safeguards, and dealership oversight and training. Michigan’s announcement also makes an important distinction: this settlement does not provide consumer restitution. A separate private class-action case seeking monetary relief remains pending.
The practical takeaway for connected-car owners
Our takeaway is straightforward: treat account setup and data permissions as part of understanding a vehicle’s connected features. Ask what information a service collects, who receives it, and which choices belong to the vehicle owner. A consent screen deserves the same attention as a subscription price.
This story is about factory connected services. It is not evidence that replacing a radio, adding a dash camera or installing an amplifier causes—or fixes—the practices described in the case.
Reporting reflects the announced settlement; this is not advice about eligibility for an individual claim.
Image: General Motors corporate logo, via Wikimedia Commons (originally supplied by GM).
