Auto Apps · Auto App · Regulatory action
GM (myChevrolet / myGMC / myBuick / myCadillac)
Headline
GM sold ordinary customers' driving behavior — hard braking, speeding, late-night driving — to LexisNexis and Verisk, who fed it straight into INSURANCE RISK SCORES that raised people's rates, and the FTC alleged…
GM sold ordinary customers' driving behavior — hard braking, speeding, late-night driving — to LexisNexis and Verisk, who fed it straight into INSURANCE RISK SCORES that raised people's rates, and the FTC alleged customers were never clearly told they'd been enrolled. GM paid the largest CCPA fine in history over it ($12.75 million) — which sounds huge until you realize it works out to roughly 0.007% of GM's annual revenue.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. www.ftc.gov/news-events/news/press-releases/2026/01/ftc-finalizes-order-settling-allegations-gm-onstar-collected-sold-geolocation-data-without-consumers — Verified - primary source confirmed.
Terms
Arbitration
Same Vehicle Mobile App Terms as covered by GM's overall Consumer Privacy Statement; arbitration terms not independently confirmed this pass — verify the specific myChevrolet/myGMC app Terms of Service.
Data sharing
MAJOR REGULATORY ACTION: GM (via OnStar Smart Driver) sold driving-behavior data to LexisNexis Risk Solutions and Verisk Analytics, which fed into insurer risk scores/rate increases WITHOUT customers realizing they'd been enrolled. FTC filed a complaint (Jan 2025) calling GM's enrollment process misleading; consent order finalized Jan 14, 2026, now requiring affirmative express consent before collecting/using driving behavior data. California AG separately announced a $12.75M CCPA settlement (May 8, 2026) — reportedly the largest CCPA fine in history, though by this tracker's own arithmetic it is roughly 0.007% of GM's annual revenue. The FTC's final order bars GM for five years from disclosing consumers' geolocation and driver-behavior data to consumer reporting agencies; no public GM announcement 'ending' its LexisNexis/Verisk partnerships was located.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
| Claim | Kind | Support | Sources |
|---|---|---|---|
| 1. GM sold ordinary customers' driving behavior data to third parties. | fact | supported | none recorded |
| 2. The driving behavior data included hard braking, speeding and late-night driving. | fact | unsupported | none recorded |
| 3. GM sold the data to LexisNexis and Verisk. | fact | unsupported | none recorded |
| 4. LexisNexis and Verisk fed the data into insurance risk scores. | fact | unsupported | none recorded |
| 5. The insurance risk scores raised people's rates. | fact | unsupported | none recorded |
| 6. Customers were never clearly told they had been enrolled. | fact | supported | none recorded |
| 7. The FTC found that customers were not clearly told about enrollment. | fact | contradicted | 1 (0 confirmed) |
| 8. GM paid a $12.75 million fine over it. | fact | unsupported | 1 (0 confirmed) |
| 9. The fine was imposed under the CCPA. | fact | unsupported | 1 (0 confirmed) |
| 10. It was the largest CCPA fine in history. | fact | unsupported | 1 (0 confirmed) |
| 11. The $12.75 million works out to roughly 0.007% of GM's annual revenue. | fact | unsupported | 1 (0 confirmed) |
| 12. The fine sounds huge but is trivial relative to GM's size. | characterization | n/a | none recorded |
0 of 12 claims have a confirmed source of their own.
Sources
| Source | Claim | Tier | Status | Quote |
|---|---|---|---|---|
| regulator · 2026-01-14 www.ftc.gov/news-events/news/press-releases/2026/01/ftc-finalizes-order-settling-allegations-gm-onstar-collected-sold-geolocation-data-without-consumers | Claim 7 | Unassigned | corrected | “alleged that GM used a misleading enrollment process to get consumers to sign up for its OnStar connected vehicle service” Quote basis: not recorded. |
| none | Claim 8 | Unassigned | not found | No quote recorded. Quote basis: not recorded. |
| none | Claim 9 | Unassigned | not found | No quote recorded. Quote basis: not recorded. |
| none | Claim 10 | Unassigned | not found | No quote recorded. Quote basis: not recorded. |
| none | Claim 11 | Unassigned | not found | No quote recorded. Quote basis: not recorded. |
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy gm.com/privacy-statement | Not fetched yet | NO (HTML only) |
| Terms of service gm.com/legal/vehicle-terms (Vehicle Mobile App Terms — not individually confirmed as direct PDF this pass) | Not fetched yet | NOT CONFIRMED |
| Website No URL recorded | Not fetched yet | — |
| Primary source https://www.ftc.gov/news-events/news/press-releases/2026/01/ftc-finalizes-order-settling-allegations-gm-onstar-collected-sold-geolocation-data-without-consumers Verification: Verified - primary source confirmed | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.