Regulators Crack Down on Automakers Trading Driver Data as Privacy Scrutiny Intensifies

The connection between your steering wheel and your privacy is drawing renewed attention after federal regulators took an unusually aggressive step against one of America’s largest automakers. The Federal Trade Commission has finalized an order barring General Motors from selling customer driving data to consumer reporting agencies and third-party data brokers for five years — a penalty that privacy advocates are calling unprecedented in the automotive sector.

How the data pipeline worked

According to the FTC’s allegations, GM collected detailed behavioral information on drivers through its connected-vehicle services, including how frequently drivers exceeded speed limits and whether they tended to drive after dark. That data was then passed along to brokers, where it could ultimately influence insurance-related decisions without drivers clearly understanding what was being shared.

The practice reflects a broader shift in the auto industry, where modern vehicles — packed with sensors, telematics, and always-on connectivity — have become prolific generators of personal data. As carmakers search for recurring revenue streams beyond vehicle sales, information about driving behavior has become a commodity, often disclosed in fine-print consent agreements that few customers read.

A signal for the wider tech landscape

The order lands amid heightened regulatory focus on how companies across the technology sector monetize user data. Publicly traded firms in adjacent parts of the tech economy are watching the enforcement environment closely. Block, Inc. (XYZ), the payments and financial services company behind Square and Cash App, traded at $79.40 on the day, down 1.0% from its previous close of $80.20, with a market capitalization of roughly $47.7 billion. While Block operates in fintech rather than automotive data, the case underscores how aggressively regulators are now policing data flows across consumer-facing technology businesses.

For automakers, the GM order may serve as a template. The FTC’s structure — a multi-year ban rather than a monetary fine alone — suggests the agency is willing to impose operational restrictions on how connected-car programs collect and share information.

The bigger picture

Connected vehicles now routinely transmit location, speed, braking, and cabin-sensor data back to manufacturers. What happens to that information afterward has historically been murky, spanning insurance scoring, marketing, and analytics partnerships. The GM action signals that regulators intend to make those data flows far more transparent — and that companies profiting from them could face consequences.

What to watch

• Whether other automakers revise their connected-vehicle data policies or face similar FTC inquiries.
• General Motors’ upcoming earnings calls, where executives may face questions about the compliance requirements of the order.
• Potential legislation at the state and federal level addressing automotive data privacy.
• How insurers and data brokers adjust their sourcing practices in response to the five-year ban.

Source: original release