FTC Finalizes Order on GM and OnStar Data Collection and Disclosure Practices

The order follows a complaint first announced in January 2025 and addresses how consumer geolocation and driving behavior data were handled across millions of vehicles.

Published on January 16, 2026

data collection
"Alma, Canada- August 4, 2012: Series of brand new 2012 GMC Trucks in a local Dealership. General Motors Company, commonly known as GM, formerly incorporated (until 2009) as General Motors Corporation, is an American multinational automotive corporation headquartered in Detroit, Michigan, and the world's largest automaker, by vehicle unit sales, in 2011"

On Jan. 14, 2026, the Federal Trade Commission finalized an order with General Motors and OnStar resolving allegations related to the collection, use, and sale of connected vehicle data. The order follows a complaint first announced in January 2025 and addresses how consumer geolocation and driving behavior data were handled across millions of vehicles.

Background of the FTC Allegations

According to the FTC, General Motors LLC, General Motors Holdings LLC, and OnStar LLC, collectively owned by General Motors Company, used an enrollment process that the agency described as misleading. The FTC alleged that this process enrolled consumers in the OnStar connected vehicle service and the OnStar Smart Driver feature without clearly disclosing key data practices.

Specifically, the complaint alleged that GM collected precise geolocation data and driving behavior data through the Smart Driver feature and sold that information to third parties. The FTC also alleged that GM did not adequately notify consumers or obtain their affirmative consent before collecting and selling this data.

Key Provisions of the Final Order

Under the finalized order, GM is prohibited from sharing certain consumer data with consumer reporting agencies. In addition, the order requires GM to take steps intended to increase transparency and consumer choice regarding connected vehicle data.

The order imposes a five-year ban on disclosing consumers’ geolocation and driver behavior data to consumer reporting agencies. The Commission described this restriction as fencing in relief in light of the alleged conduct.

For the full 20-year duration of the order, GM must also comply with several ongoing requirements:

• Obtain affirmative express consent from consumers before collecting, using, or sharing connected vehicle data, including sharing data with consumer reporting agencies. The order includes limited exceptions, such as providing location data to emergency first responders.
• Create a method for all U.S. consumers to request a copy of their data and to request deletion of that data.
• Allow consumers to disable the collection of precise geolocation data from their vehicles when the vehicle has the necessary technology.
• Provide consumers with a way to opt out of the collection of geolocation and driver behavior data, subject to limited exceptions.

Commission Vote and Process

The Commission voted 2-0 to approve the final order and complaint. As part of the process, the FTC also issued responses to public comments submitted on the matter.

FTC Role and Consumer Advisory

The FTC stated that its work focuses on promoting competition and protecting and educating consumers. The agency reiterated that it does not demand money, make threats, instruct people to transfer funds, or promise prizes. The FTC directs consumers to its official websites for information on consumer topics and for reporting fraud, scams, and deceptive business practices.

Get the latest insurance market updates and discover exclusive program opportunities at ProgramBusiness.com

Are you a retail Agent Looking for a Quote?