Penalty Amount
$220,000,000
Consumers Affected
370,000
A 36-attorney-general coalition resolved allegations that General Motors collected and sold identifiable driver behavior and location data to data brokers, which supplied it to insurers for use in assessing drivers and potentially raising premiums. The $220 million nationwide settlement requires affirmative express consent before collecting or disclosing driving and location data, limits data collection, and imposes privacy-program assessments and dealership oversight and training.
GM agreed to a $220 million nationwide settlement, of which New Jersey will receive $8.9 million. The settlement requires affirmative express consent before collecting or disclosing driving and location data, limits the driving data GM collects, requires a comprehensive privacy program with internal and external assessments, and provides for dealership oversight and training.
Review vendor data-processing and data-sharing agreements with telematics providers, analytics vendors, and data brokers for express-consent requirements, purpose limitations, restrictions on insurance underwriting and onward transfers, data minimization, retention and deletion terms, audit rights, and accurate disclosures about collection and sharing. Review customer terms and privacy notices to ensure they clearly explain driver behavior and location-data uses and that consent is affirmative, separately captured, and documented before collection or disclosure. Review dealership and connected-services agreements for controls on enrollment, authority to accept terms on a customer’s behalf, oversight, training, and incentive structures; consider employee or dealer policies that support those controls.
Entity
General Motors, Inc.
Industry
AutomotiveOfficial Press Release
https://www.njoag.gov/new-jersey-to-receive-8-9-million-from-multistate-settlement-resolving-allegations-that-general-motors-illegally-sold-consumers-private-data/
2026.10.29 GM Complaint Filed
https://www.njoag.gov/wp-content/uploads/2026/10/2026.10.29-GM-Complaint-Filed.pdf
2026.10.29 Consent Judgment Filed
https://www.njoag.gov/wp-content/uploads/2026/10/2026.10.29-Consent-Judgment-Filed.pdf
New Jersey Attorney General Enforcement Page
https://www.njoag.gov/about/divisions-and-offices/division-of-consumer-affairs/
"General Motors, Inc. (GM)"
"which resulted in a $220 million nationwide settlement."
"New Jersey will receive $8.9 million from a multistate settlement"
"GM illegally sold consumers’ private driver behavior data and location information to third parties, including data brokers who sold the data to insurance companies."
"The settlement requires GM to obtain affirmative express consent from consumers before collecting or disclosing their driving and location data."
"The OnStar app mistakenly told 370,000 drivers that they were not enrolled in Smart Driver, when they actually were enrolled, and GM was collecting and selling their data."
New Jersey, the FTC, and a coalition of 19 other states sued Dollar General, alleging that customers were repeatedly charged more at checkout than prices displayed on shelves, tags, and advertisements. The complaint alleges deceptive pricing practices and inadequate safeguards despite consumer complaints; the release does not describe a settlement, penalty, or other remedy imposed.
New Jersey joined a coalition of state attorneys general in filing a notice in Character Technologies, Inc.’s bankruptcy proceedings, raising concerns about the company’s safety and privacy practices and the sensitive conversations it holds, including those involving children and mental health. The states seek safeguards for consumers’ personal information in any sale or transfer of the company’s business or assets; the release does not report a fine or final finding of violations.
A multistate coalition co-led by New Jersey won a federal court order rejecting the Trump Administration’s decision not to request funding for the CFPB. The order struck down that decision and directed the Administration to follow the law and fund the agency; no monetary penalty or privacy violation is described.
New Jersey’s Attorney General and Division of Consumer Affairs alerted the public that three synthetic kratom-related compounds became illegal to possess or sell in the state under a temporary federal scheduling order. The release describes a controlled-substance alert, not a privacy enforcement action, and identifies no company, privacy violation, or monetary penalty.
$2.3M
Laboratory Corporation of America Holdings agreed to pay $2,287,455 to participating states and strengthen its security and vendor-management practices following an investigation into the 2019 breach at its debt-collection vendor, AMCA. The breach potentially exposed information of more than 27.5 million people nationwide, including sensitive information belonging to approximately 10.2 million LabCorp patients.
$694.0M
New Jersey's Attorney General and Division of Consumer Affairs, along with 41 Attorneys General, reached a $694 million settlement with subprime auto lender Credit Acceptance Corporation over allegations it originated unaffordable loans its own systems predicted borrowers could not repay, employed aggressive debt-collection tactics, and failed to prevent deceptive vehicle-service contract and GAP product 'packing' by dealers. The multistate settlement stepped in after the CFPB permanently dropped its 2023 enforcement action against CAC in 2025. CAC will provide $60 million in cash restitution, $634 million in debt relief, an additional $15 million to the states, and implement injunctive lending reforms including loan off ramps, pre-loan disclosures, add-on packing safeguards, and a seven-year vehicle price cap. Note: this is a consumer-protection lending enforcement action, not a privacy matter; violation categories are best-fit mappings from the available taxonomy.