Your Car’s Driving Data Can Reach the Insurance Industry

Some GM vehicles reported their location as often as every three seconds, according to the Federal Trade Commission. The agency alleged that driving records collected through OnStar reached companies whose reports helped insurers set prices and deny coverage. A service sold around convenience and safety had become a route from the driver's seat to an insurance decision.

CASE STATUS: Documented commercial use; FTC allegations settled under a final order announced January 14, 2026. This case concerns an operating data system, rather than a patent filing. How we assign status.

The journey became a record

In its January 2025 enforcement announcement, the FTC described collection involving millions of vehicles. Its allegations covered precise location and behavior such as hard braking, speeding and late-night driving. The agency said consumer reporting companies used GM's information in reports supplied to insurers.

The dispute also concerned how people were enrolled. According to the FTC, some consumers did not know they had joined OnStar Smart Driver, while others understood it as a way to assess their own driving. The agency alleged that the enrollment process obscured the collection and sale of their information.

A driver can understand why a navigation service needs a location without expecting the trip to become an input into somebody else's assessment of them. Once information crosses that boundary, the company receiving it may have very different interests from the person who generated it.

What the order actually changes

The final order prohibits GM from disclosing covered driver data to consumer reporting agencies for five years. Its definition covers location and specified driving events linked to a US consumer. Replacing a name with an identifier tied to a vehicle identification number does not, by itself, make those records deidentified.

The order requires affirmative express consent for covered collection, use and third-party disclosure, subject to stated exceptions. Separate, unrelated features require separate consent. The required explanation must sit apart from the privacy policy or terms of service.

Consumers must also have a simple way to request their covered data and seek deletion. The order requires controls to disable location collection where the vehicle supports them, with exceptions including safety-related responses and legal requirements. GM and OnStar neither admitted nor denied the complaint's allegations as part of the settlement.

The risk survives the individual case

The FTC's January 2026 announcement separates the five-year reporting-agency ban from obligations lasting through the order's 20-year term. This is a restriction on the companies named in the case, not a shutdown of connected-car sensing across the industry.

For OPD, the concern is the commercial incentive: ordinary activity becomes something another business can evaluate, price or trade. Better disclosures can make that exchange more visible, but the underlying ability to collect a detailed record remains valuable to the organizations controlling it.

The same tension appears inside the home. Our Wi-Fi sensing case file examines how connected equipment can turn movement into information. In both settings, useful devices create a second product: records about the people using the space.

Source record: FTC matter 2423052, docket C-4828. Case documents and timeline. Checked September 14, 2026. Hero artwork is a conceptual illustration.

Connected-car control extends beyond data collection. Our Ford repossession case file examines an abandoned U.S. application for automated payment pressure through vehicle controls. Deployment of that proposed system remains unverified.