Court Rules
All enforcement actions
SettlementCritical RiskMultistate

New York and Multistate Coalition Secure $220 Million from General Motors Over Driver Data Sales

General Motors LLCOctober 29, 2026New York Attorney General

Penalty Amount

$220,000,000

Summary

New York Attorney General Letitia James and a bipartisan coalition secured a $220 million settlement from General Motors LLC for selling drivers’ personal driving and location data to data brokers without adequate disclosure or consent. GM must limit the driving data it collects and implement privacy assessments and dealership oversight and training.

Remedy

GM must pay $220 million to the states, including $12,054,341 to New York; limit the driving data it collects; establish in-house and third-party data protection and privacy assessment programs; and implement dealership oversight and training to prevent enrollment in data collection programs without consumer consent.

Monetary PenaltyInjunctionAudit RequirementCompliance Program

Contract Impact

Review vendor and data-processing agreements with data brokers, analytics providers, and connected-vehicle service providers for clear limits on collection, use, onward sale, and disclosure of driving and location data, including prohibitions on insurance underwriting or rate-setting uses unless expressly authorized. Check customer-facing terms, privacy notices, and consent flows to ensure they accurately explain data tracking and sharing and obtain affirmative consent where required; assess whether bundled enrollment with services such as roadside assistance could obscure consent. Review dealership agreements for enrollment practices, incentive structures, oversight, and training, and add audit and remediation rights, data-minimization obligations, and requirements to correct inaccurate enrollment notices and address data already shared.

Contract Search Terms

express consent for data sharingdriving and location datadata broker restrictionsinsurance use of consumer datadata minimizationprivacy notice accuracyconnected vehicle data processingdealer enrollment consentthird-party privacy assessments

Violation Types

Entity Details

Entity

General Motors LLC

Industry

Automotive

Multistate Coalition

Alabama Attorney GeneralAlaska Attorney GeneralArizona Attorney GeneralColorado Attorney GeneralConnecticut Attorney GeneralDelaware Attorney GeneralFlorida Attorney GeneralHawai’i Attorney GeneralIdaho Attorney GeneralIllinois Attorney GeneralKansas Attorney GeneralKentucky Attorney GeneralMaine Attorney GeneralMassachusetts Attorney GeneralMaryland Attorney GeneralMichigan Attorney GeneralMississippi Attorney GeneralNevada Attorney GeneralNew Hampshire Attorney GeneralNew Jersey Attorney GeneralNorth Carolina Attorney GeneralNorth Dakota Attorney GeneralOhio Attorney GeneralOklahoma Attorney GeneralOregon Attorney GeneralPennsylvania Attorney GeneralSouth Carolina Attorney GeneralSouth Dakota Attorney GeneralUtah Attorney GeneralVermont Attorney GeneralVirginia Attorney GeneralWashington Attorney GeneralWisconsin Attorney GeneralDistrict of Columbia Attorney General

Official Sources

Source Evidence

Entity Name
"General Motors (GM)"
Fine Amount
"GM will pay $220 million"
Violation Types
"for illegally selling drivers’ private driving and location data to data brokers who then sold the information to insurance companies."
Violation Types
"GM did not disclose to drivers that their data would be sold for this purpose."
Violation Types
"In many cases, dealership employees allegedly accepted terms and conditions on behalf of customers without their consent."
Remedy Summary
"GM will also establish an in-house data and privacy protection assessment program in addition to a third-party data protection and privacy assessment program to ensure it is abiding by best practices."

Related Enforcement Actions

CT

General Motors LLC

$220.0M

Connecticut and a coalition of 36 attorneys general reached a $220 million settlement with General Motors over the collection and sale of consumers’ driving behavior and location data to data brokers and insurers without adequate disclosure or consent. The settlement requires affirmative express consent before collecting or disclosing driving and location data, limits data collection, and imposes privacy program assessments and dealership oversight and training.

NY

Trump administration

New York Attorney General Letitia James and a coalition of 24 other states and the District of Columbia challenged a federal rule imposing additional proof requirements on some medically frail Medicaid recipients. The U.S. District Court for the District of Massachusetts granted summary judgment, declaring a central provision of the rule illegal and blocking it.

NY

Frank W. Cawood & Associates, Inc.

$24K

New York Attorney General Letitia James secured a settlement with Frank W. Cawood & Associates, Inc. over mailers that advertised books as free or no-risk while obscuring payment and return terms. The company must end the program in New York, pay $23,500, and provide refunds to eligible consumers.

NY

New York Office of the Attorney General

New York Attorney General Letitia James issued a consumer alert about fire risks from e-bike and other lithium-ion batteries and shared safety and disposal recommendations. The release describes no privacy enforcement action, monetary penalty, or remedy.

NY

U.S. Department of the Treasury

New York Attorney General Letitia James and 20 other attorneys general sued to block a Treasury Department rule that exempts domestic companies and U.S. owners of foreign companies from Corporate Transparency Act ownership disclosures. The coalition alleges the rule is unlawful and unconstitutional, including because Treasury plans to delete information collected from companies now exempted, and seeks a court order blocking its implementation.

NY

BCMB1 Trust, First Age LLC, NS194 LLC, Second Start LLC, and Southern MBA Trust

$240K

The New York Attorney General investigated a group of debt buyers for filing foreclosure actions seeking payment of long-expired mortgage debts. The companies agreed to pay $240,000 in penalties and more than $242,000 in consumer restitution, stop seeking payment of time-barred debts, and amend claims in pending foreclosure cases.