FTC finalizes order with General Motors over unconsented data collection

As noted by Bleeping Computer, the U.S. Federal Trade Commission has finalized an order with General Motors and its subsidiary OnStar addressing allegations of collecting and selling sensitive driver location and behavior data without explicit consent from millions of vehicle owners.

The FTC's complaint, filed in January 2025, detailed how GM, through OnStar's "Smart Driver" feature, allegedly collected precise geolocation and driving behavior data every three seconds. This information was reportedly sold to third parties, including consumer reporting agencies, which then used it to influence insurance rates. The finalized order prohibits GM from sharing such data with consumer reporting agencies for five years. For the next two decades, GM must obtain express consent before collecting, using, or sharing connected vehicle data, with exceptions for emergency services. The company is also mandated to provide consumers with options to access, delete, and opt out of data collection, and to disable precise geolocation tracking.

This FTC order signifies a significant regulatory action concerning automotive data privacy. The settlement also highlights a broader trend of increased scrutiny on data collection practices within the automotive industry, as evidenced by a similar lawsuit filed by the Texas Attorney General against Allstate and several car manufacturers for alleged unlawful data practices.

Source: Bleeping Computer