Ohio to receive $8 million from GM data privacy settlement

Ohio will receive approximately $8 million from a $220 million settlement with General Motors regarding driver data privacy.

The state joined 34 other states and Washington, D.C., in a lawsuit alleging that General Motors collected and sold driver data without permission. The legal action focused on the Smart Driver program, a service operated by the company's subsidiary OnStar. Drivers could access their own driving behavior through a smartphone app, which the company initially marketed as a tool for monitoring performance.

The dispute began in 2024 when The New York Times reported that General Motors sent driver behavior data to LexisNexis without consumer approval. LexisNexis then provided reports based on this data to insurance companies. Insurers used the information to adjust premium costs or deny coverage for specific drivers. In response to the findings, General Motors discontinued the Smart Driver product in 2024.

Ohio Attorney General Andy Wilson stated that the OnStar app indicated to 380,000 drivers that they were not enrolled in the data collection program, even though they were. Wilson said, "GM broke consumers trust by selling such data without their knowledge and consent." He added that Ohio residents should not fear that information collected by their vehicles will be used against them. Wilson emphasized that companies must be held accountable when they prioritize profits over consumer privacy.

Attorneys for the nationwide coalition of state attorneys general announced the settlement in late October. The agreement includes specific requirements for General Motors to limit and protect the driving data it collects. The settlement mandates third-party assessments of data protection practices.

The Federal Trade Commission imposed additional rules on the company earlier in 2026. The FTC issued a five-year ban on General Motors disclosing driver location and behavior data to consumer reporting agencies. The agency also required the company to obtain affirmative express consent from consumers before collecting or using data. General Motors must now make it easier for consumers to opt out of data collection and delete data that has already been collected.