General Motors is now staring down a massive settlement after allegations that it gathered and passed along driver data without proper consent. The deal lands at $220 million and puts fresh pressure on the automaker’s privacy practices, dealership behavior, and the way connected-car services have been used behind the scenes.
Washington State announced the settlement on October 29, with 36 attorneys general involved in the case. The issue centered on GM’s Smart Driver program and the way it handled personal information tied to vehicles and their owners. Around 370,000 drivers were told they were not enrolled, even though data tied to their driving was still being collected and shared.
The information at the center of the case was not some harmless technical blur. It included location history, how often people drove, how long they stayed on the road, and patterns like braking and acceleration. State officials said that kind of information was personal, identifiable, and specific, which makes it a big deal when it moves around without clear permission.
The settlement breaks down across multiple states, with Washington set to receive $12.3 million. Oregon will get $10.4 million, Michigan will take in $7.2 million, and New York is set to receive more than $12 million. The rest of the money is being distributed among the states that joined the lawsuit.
GM is not just writing a check and moving on. The company will face tighter limits on the driving data it can collect in the future, and it must get drivers’ permission before gathering or sharing information about their habits or locations. That is the kind of restriction that changes the whole playbook, especially for a business built around connected services.
Outside reviewers will also be watching to see whether GM follows through. That matters because this case was not just about money, it was about trust, and trust gets wrecked fast when drivers feel they were tracked without knowing it. Once that confidence is gone, it takes more than a settlement to win it back.
At the center of the problem was a system that rewarded dealerships for pushing OnStar signups. The more customers who were enrolled, the more salespeople could benefit, and the better the dealerships could climb in GM’s internal rankings. That kind of incentive structure can turn a simple add-on into a pressure campaign.
According to the lawsuit, dealerships were heavily encouraged to get drivers into OnStar, sometimes in ways that crossed the line. Some employees were accused of signing customers up without their consent, while others allegedly made changes behind the scenes without making it obvious to the driver. It is the sort of thing that feels small in the moment and huge once the details come out.
Even after some drivers were quietly removed from the program, the data did not just vanish. Reports indicated that information about driving behavior may still have been sitting with data brokers and insurance companies, where it could influence rates and other decisions. That is what makes this kind of case sting: the damage can keep echoing long after the original signup.
Earlier reporting helped shine a brighter light on the issue and raise questions about whether GM was working too closely with insurers. Those concerns helped fuel the backlash that eventually forced the Smart Driver program off the road. Now the automaker has to operate under a stricter standard, with express consent becoming the new baseline for collecting or sharing location and driving data.
The dealership side is under the microscope too, with new oversight and training expected to curb future abuse. That may sound routine on paper, but it signals a deeper shift in how automakers handle digital data inside the showroom. The easy days of quietly bundling services and hoping nobody notices are gone, and this case made that painfully clear.
