The FTC bans GM from selling driver behavior and geolocation data to consumer reporting agencies for five years, after finding GM didn't properly inform drivers
An investigation by the Federal Trade Commission determined that consumers had not been aware that the automaker was providing their driving information to data brokers.
Context & Ripple Effects
GM had already said it stopped sharing driving data with two brokers after scrutiny of its collection and sharing practices, and later reporting described an app enrollment flaw that could misstate drivers’ Smart Driver status. The FTC action turns that earlier voluntary halt into a defined restriction.
The case also follows the FTC’s broader move against location-data intermediaries, including limits on providers’ handling of sensitive-location data. It matters because vehicle telemetry can move from an in-car service feature into consumer-reporting and insurance-related data flows.
First-order effects
- GM cannot sell drivers’ behavior and geolocation data to consumer reporting agencies for five years, cutting off that channel for the company and its counterparties.
- Drivers gain a formal constraint on the onward use of data they were not properly told was being provided to brokers.
Second-order effects
- Automakers and connected-car service providers face pressure to audit consent notices, enrollment flows, and broker contracts—especially where data may influence insurance or consumer-reporting uses.
- Consumer reporting agencies and data brokers that rely on vehicle-derived signals may need to replace affected inputs or strengthen documentation of how those inputs were collected.
Third-order effects
- If enforcement continues, connected-vehicle data will be treated less as a general-purpose commercial asset and more as data whose permitted use depends on specific, understandable consent.
- The emerging boundary may favor data programs with clear user controls and traceable downstream sharing, while making opaque broker-based monetization harder to sustain.
The trend: Regulators are increasingly testing whether data collected through consumer products can be repurposed for consequential profiling without clear, specific permission.