Lawsuitsby GlyphFTC: General Motors and OnStar, driving data privacy case
Regulator
Federal Trade Commission
acted against
Against
The FTC alleged GM collected and sold precise geolocation and driving behavior data from millions of vehicles, used to set insurance rates, without adequate notice or consent.
The case
- Regulator
- US Federal Trade Commission
- Decided
- Jan 16, 2025
- Status
- SettledOrder finalized January 2026.
- Outcome
- GM and OnStar are banned for five years from disclosing drivers' geolocation and driving behavior data to consumer reporting agencies.
History
1 dated entryFTC: General Motors and OnStar, driving dataSource
Related cases
United States sued v. 
Cerebral (health data for ads)The FTC alleged the telehealth firm shared sensitive health data with third parties for advertising, failed to secure it and made cancellation difficult.$7 millionJury trialS.D. Fla.filed Apr 2024
Irish Data Protection Commission: GoogleThe Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location dataIrish DPCIsbell sued v. 
SunoRecording artists including Jason Isbell and David Lowery allege Suno's generator reproduces their voices, names and likenesses without consent, pleading BIPA and state right-of-publicity claims.D. Mass.
Dutch DPA fine: Uber, automated driver deactivationThe Dutch DPA, working with the CNIL on a French drivers' complaint, found Uber used fully automated decisions to temporarily or permanently deactivate drivers over suspected fraud or low ratings and did not properly inform them.EUR 824,990,000Dutch Data Protection Authority (Autoriteit Persoonsgegevens)Texas AG acted against v. 
Meta and WhatsApp: encryption claimsTexas sued Meta and WhatsApp alleging they misled users about end-to-end encryption and the privacy of WhatsApp messages.Texas Attorney GeneralFlowers sued v. 
MicrosoftAlleges Microsoft's Copilot and other voice products captured users' biometric voiceprints without BIPA consent.N.D. Ill.Amer sued v. 
ElevenLabsIllinois plaintiffs allege ElevenLabs captured biometric voiceprints from real voices to build its voice AI without BIPA consent.N.D. Ill.
Dutch DPA fine: Yango (MLU B.V.), transfers to RussiaJoint investigation with the Norwegian and Finnish authorities found the company behind the European Yango taxi app transferred driver and customer data to Russia without adequate protection.EUR 100 millionDutch Data Protection Authority (Autoriteit Persoonsgegevens)