The News
The Federal Trade Commission ordered General Motors to stop selling customer driving data to consumer reporting agencies and third-party data brokers for five years. The penalty followed an examination of GM’s collection of vehicle telemetry, including records of speeding incidents and nighttime driving. GM had transferred those records to outside parties that compile consumer reports or resell data. The order marks the first time the commission has applied this type of restriction to a major automaker.
Context
GM equips many of its vehicles with connected services that record driver behavior through onboard sensors and telematics modules. Those systems log metrics such as acceleration patterns, speed relative to posted limits, and time-of-day usage. Before the FTC order, the company treated the resulting datasets as assets it could license or sell without additional consumer-reporting obligations. The commission’s action changes that treatment for a fixed period. The ban applies only to transfers that reach entities defined as consumer reporting agencies or data brokers; GM may still use the same data for its own products and services.
Detail
The order identifies two categories of prohibited recipients. Consumer reporting agencies prepare reports used for credit, insurance, employment, or other eligibility decisions. Third-party data brokers aggregate and resell personal information to marketers, insurers, or analytics firms. GM’s prior practice included sending driving-behavior files to parties in both groups. The five-year term blocks both direct sales and any indirect transfers that would otherwise continue under existing contracts. The commission left GM’s internal analytics and customer-facing features untouched.
The Verge covered the development in its Stepback newsletter, which examines cars, data privacy, and autonomous-vehicle topics. The publication described the penalty as unprecedented in scope for an automaker. No other vehicle manufacturers appear in the current order. The FTC did not release detailed financial penalties or additional compliance requirements beyond the sales prohibition.
Why It Matters
The ruling draws a line between data an automaker keeps for product improvement and data it moves into external commercial markets. Engineers building telematics platforms now face clearer constraints on which data flows require explicit regulatory review. Product teams that previously relied on automaker datasets for insurance scoring, targeted advertising, or driver-risk models must locate alternative sources or redesign pipelines within the five-year window. Drivers who enabled connected features receive a temporary limit on how far their vehicle-generated profiles travel, even if the underlying collection continues.
For the broader industry, the decision signals that regulators view certain vehicle telemetry as reportable personal information once it leaves the manufacturer. Companies that have built business models around purchasing this data will need to adjust sourcing strategies. The fixed term gives both GM and its counterparties a concrete deadline to renegotiate contracts and implement new data-handling controls. Whether the commission extends similar restrictions to other automakers remains open; the current order applies only to GM.
---
Sources:
{"word_count": 612, "sources_used": ["https://www.theverge.com/column/994172/your-car-is-selling-your-data"]}
No comments yet