FTC BANS GM FROM SELLING CUSTOMER DATA

The FTC's action marks an unprecedented enforcement move in the automotive industry, signaling growing regulatory scrutiny over how carmakers handle personal information collected from vehicles. General Motors has been selling detailed driving data—including location history, speed, acceleration patterns, and braking behavior—to data brokers and insurance companies. This information was then used to build consumer profiles and inform decisions on insurance rates and credit assessments. The penalty represents a significant shift in how regulators view automotive data practices. Cars today collect vast amounts of telemetry through onboard systems, navigation services, and connected features. This data has become increasingly valuable to insurers and financial institutions seeking granular risk assessments. Under the five-year ban, GM cannot monetize customer data in this manner. The company must also delete previously collected data and obtain explicit consumer consent before sharing any personal information with third parties. The case highlights a broader tension in the automotive industry. Modern vehicles generate continuous streams of behavioral data that manufacturers view as potential revenue sources. However, consumers often remain unaware of what information their cars collect and how it may be used. Other automakers have faced similar scrutiny. BMW, Mercedes-Benz, and other manufacturers have implemented data-sharing practices, though few have faced penalties of this magnitude. The GM ruling suggests the FTC intends to enforce stricter standards around automotive data privacy. Industry observers expect additional enforcement actions and potentially new regulations governing how carmakers handle customer information. Manufacturers will need to reassess data monetization strategies and transparency practices. The decision may also prompt changes across the industry, as companies evaluate compliance costs against potential regulatory exposure. For consumers, the ruling offers limited immediate relief. Existing privacy protections remain fragmented, and many drivers continue sharing vehicle data without clear understanding of its commercial use.