The Federal Trade Commission (FTC) has finalized an order with General Motors (GM) and OnStar, addressing allegations that they collected, used, and sold consumers' precise geolocation and driving behavior data without adequate notification and consent.

Under the finalized order, GM, which includes General Motors LLC, General Motors Holdings LLC, and OnStar, is prohibited from sharing certain consumer data with consumer reporting agencies. The company is also required to enhance transparency and provide consumers with more choices regarding the collection and use of their connected vehicle data.

The FTC's complaint, initially announced in January 2025, claimed that GM misled consumers during the enrollment process for its OnStar connected vehicle service and the OnStar Smart Driver feature. It was alleged that GM did not clearly disclose the collection of precise geolocation and driving behavior data, which was sold to third parties without consumer consent.

The final order imposes a five-year ban on GM from disclosing consumers' geolocation and driving behavior data to consumer reporting agencies. Additionally, for the entire 20-year duration of the order, GM must obtain affirmative express consent from consumers before collecting, using, or sharing connected vehicle data, with some exceptions for emergency responders. The company is also required to create a mechanism for U.S. consumers to request their data and seek its deletion, allow consumers to disable geolocation data collection, and provide an opt-out option for data collection.

The Commission voted 2-0 to approve the final order and the complaint, along with responses to public comments.