Penalty Amount
$7,095,664
A bipartisan coalition of 36 attorneys general settled allegations that General Motors collected and sold drivers’ driving-behavior and location data to data brokers, whose customers included insurance companies. GM will pay $220 million nationally, with Minnesota receiving $7,095,664, and must obtain affirmative express consent before collecting or disclosing driving and location data.
GM must pay Minnesota $7,095,664 as part of the $220 million national settlement, obtain affirmative express consent before collecting or disclosing consumer driving and location data, limit the driving data it collects, and protect personal information through a comprehensive privacy program. The settlement also requires internal and external privacy-program assessments and dealership oversight and training.
Review connected-vehicle, telematics, data-processing, and data-sharing agreements with vendors and data brokers for clear limits on collection, disclosure, onward sale, and insurance-related use of driving and location data, and require affirmative express consent where applicable. Review customer-facing privacy notices and consent flows to ensure they accurately describe tracking and sharing, and check dealership agreements and employee procedures for safeguards against enrolling customers without consent. Add or strengthen audit and assessment rights, data-minimization and retention obligations, privacy-program controls, and oversight and training requirements; verify that downstream recipients are bound to equivalent restrictions.
Entity
General Motors
Industry
AutomotiveOfficial Press Release
https://www.ag.state.mn.us/Office/Communications/2026/10/29_General-Motors.asp
7734 General Motors Consent Judgment
https://www.ag.state.mn.us/Office/Communications/2026/docs/7734_General-Motors_Consent-Judgment.pdf
7734 General Motors Complaint
https://www.ag.state.mn.us/Office/Communications/2026/docs/7734_General-Motors_Complaint.pdf
Minnesota Attorney General Enforcement Page
https://www.ag.state.mn.us/consumer/
"settlement with General Motors (“GM”)."
"Minnesota will receive $7,095,664 from the settlement."
"Minnesota Consumer Data Privacy Act (MCDPA)"
"Settles allegations General Motors sold consumers’ private driver behavior data and location information to third parties, including data brokers who sold data to insurance companies"
"The settlement also requires GM to obtain affirmative express consent from consumers before collecting or disclosing consumer driving and location data."
"The settlement also requires GM to limit the driving data it collects from consumers and protect their personal information going forward as part of a comprehensive data privacy program."
$220.0M
General Motors agreed to a nationwide $220 million settlement over allegations that it sold drivers’ identifiable driving behavior and location data to data brokers, which then sold it to insurers. The settlement requires affirmative express consent before collecting or disclosing driving and location data, limits data collection, and imposes privacy-program assessments and dealership oversight and training.
$220.0M
General Motors agreed to pay $220 million to resolve allegations that it sold identifiable driver behavior and location data to data brokers and insurers without adequately disclosing the practice or obtaining consumers’ consent. The settlement requires affirmative express consent before collecting or disclosing driving and location data, limits data collection, and imposes privacy-program assessments and dealership oversight and training.
$12.8M
California Attorney General Rob Bonta, along with multiple district attorneys and the California Privacy Protection Agency, announced a $12.75 million settlement with General Motors for illegally selling hundreds of thousands of Californians' location and driving data to data brokers Verisk and LexisNexis without notice or consent. The settlement includes the largest CCPA penalty to date, a five-year ban on selling driving data to consumer reporting agencies, and requirements to delete retained data and implement a robust privacy program.
$12.8M
CalPrivacy and the California Attorney General secured a $12.75 million settlement from General Motors for data sharing practices from connected vehicles. The settlement includes injunctive terms to change business practices.
Texas Attorney General Ken Paxton filed a lawsuit against General Motors for unlawfully collecting private driving data from over 1.5 million Texas drivers without consent and selling the data to third parties including insurance companies. GM allegedly deceived customers into enrolling in products like OnStar Smart Driver by falsely claiming enrollment was required to retain vehicle safety features, while concealing that enrollment authorized systematic collection and sale of detailed driving data. The action follows an investigation launched in June 2024 as part of the Texas AG’s data privacy initiative, and seeks to hold GM accountable for violating state privacy laws.
Minnesota Attorney General Keith Ellison joined a multistate coalition suing to block a FinCEN rule that exempted nearly all businesses from Corporate Transparency Act reporting and announced that it would delete existing ownership information. The coalition alleges violations of federal law and asks the court to invalidate the rule and require FinCEN to continue collecting and maintaining the database; no penalty or court order is reported.