FTC's Crackdown on GM's Data Practices: Implications for North East India

The U.S. Federal Trade Commission (FTC) has imposed a five-year ban on General Motors (GM) from selling drivers' location data, marking a significant step in protecting consumer privacy. This move has far-reaching implications, especially for the growing automotive industry in North East India.

The Data Collection Scandal

In January 2025, the FTC charged GM and its subsidiary, OnStar, with collecting and selling the location and driving data of millions of drivers without consent. The data was gathered through OnStar's "Smart Driver" feature, which was marketed as a driving-habits self-assessment tool. The collected data was then sold to third parties, primarily insurance companies, leading to higher insurance rates or denial of coverage.

The FTC's Decision and Its Implications

The FTC's order, approved in January 2026, prohibits GM from sharing consumers' geolocation and driving behavior data with consumer reporting agencies for five years. For the entire 20-year duration of the order, GM must obtain express consent from consumers before collecting their data, using it, or sharing it. The company must also allow consumers to request copies of their data and seek its deletion.

Relevance to North East India

As the automotive industry in North East India continues to grow, concerns about data privacy and security will become increasingly relevant. The FTC's decision serves as a reminder for companies to prioritize consumer privacy and transparency in their data practices.

GM's Response and Future Steps

GM has responded to the settlement agreement by stating that it will provide customers with more transparency and control over their personal information. The company has expanded its privacy program to offer options for customers in all 50 states to access and delete their personal information.

Broader Indian Context

This incident is not isolated to the U.S. In January 2025, Texas Attorney General Ken Paxton filed a lawsuit against car insurance firm Allstate for unlawfully collecting and selling driving data from over 45 million Americans. Several car makers, including some with significant presence in India, were also involved in the allegations.

Reflections and Forward-Looking Perspectives

The FTC's decision against GM underscores the importance of consumer privacy in the digital age. As technology continues to evolve, it is crucial for companies to prioritize transparency and consumer consent in their data practices. This will not only help build trust with consumers but also prevent potential legal and reputational risks.