GM stops sharing driver data with brokers amid backlash

jdale

Ars Legatus Legionis
18,261
Subscriptor
"As of March 20th, OnStar Smart Driver customer data is no longer being shared with LexisNexis or Verisk. Customer trust is a priority for us, and we are actively evaluating our privacy processes and policies," GM told us in a statement.

That's the sort of overly-specific denial that should give you no comfort whatsoever. Are they now selling the data directly to insurance companies? Are they being sold to some other data brokers? The statement doesn't address those questions at all.

I would love to see a promise that the data will not be shared or sold with any company whatsoever, but ultimately it needs to be a law and not just a corporate promise.
 
Upvote
533 (533 / 0)

Mardan19

Smack-Fu Master, in training
92
Subscriptor++
"As of March 20th, OnStar Smart Driver customer data is no longer being shared with LexisNexis or Verisk. Customer trust is a priority for us, and we are actively evaluating our privacy processes and policies," GM told us in a statement.
"Dang it, you caught us. We will have to find a sneakier way to sell your data." FTFY
 
Upvote
355 (355 / 0)

Honeybog

Ars Tribunus Militum
2,738
It just says they aren't sharing with those two directly anymore. They could still share with, say, Dickhead McFuckdrip Enterprises, who then share with Lexis-nexis and verisk

“I promise won’t cheat on you again… with your sister… Carole… this year… at a Hilton Honors affiliated hotel… in the greater Cleveland metropolitan area.”
 
Upvote
434 (434 / 0)

OAW

Ars Tribunus Militum
1,535
I saw an article about this a week or so ago about a guy who was hit with a dramatically higher insurance premium who tracked it down to this data being sold without his knowledge or consent. In response I logged into my OnStar account and lo and behold I was enrolled in this "Smart Driver" program. Which I absolutely did not and would not sign up for. I immediately turned it off. I imagine a class action lawsuit is forthcoming. And GM deserves it. This is almost as boneheaded a move as no longer supporting CarPlay in their EV's.
 
Last edited:
Upvote
335 (336 / -1)

alicat

Smack-Fu Master, in training
74
Subscriptor
my preferred form of "decided to stop sharing driving data" would have also included a fine of 4% of their preceding-year global turnover (google that phrase if you need to), but the fact that public exposure of this led to them making at least this change to their practices is a small concession at least.

(yes, i'm aware of which jurisdiction this is)

for funsies:

GM reported full-year 2023 revenue of $171.8 billion, net income attributable to stockholders of $10.1 billion and EBIT-adjusted of $12.4 billion.
(source: investor.gm.com)

$171.8B * 4% = 6.87B
 
Upvote
76 (77 / -1)

Tagbert

Ars Tribunus Militum
2,002
Subscriptor
I couldn't believe it when I found out my Telluride has been tracking me. My odometer hit 50,000 miles and I got an email an hour later telling me I had scheduled maintence due that referenced the number of miles I have driven. Super creepy.
At least that is a notice from the manufacturer about maintenance of the vehicle instead of sending your data to third party data brokers like this.
 
Upvote
76 (80 / -4)

L0neW0lf

Ars Tribunus Militum
2,201
Subscriptor++
“Now, in what feels like an all-too-rare win for privacy in the 21st century, that data-sharing deal is no more.”

This is only a win for people who haven’t already had their data shared. People who have are fucked. I would hope there’s a class-action lawsuit targeting GM and the insurers.
 
Upvote
133 (133 / 0)

L0neW0lf

Ars Tribunus Militum
2,201
Subscriptor++
That's nice, GM. Now, what about all of your competitors?
Time to get Congress critters who will vote for modern, strong data privacy laws...

That will only happen when campaign finance laws are greatly enhanced in this country, and lobbying is heavily restricted.

And since we all know who is responsible for passing such laws…

1711140529314.jpeg
 
Upvote
47 (56 / -9)

xWidget

Ars Tribunus Militum
2,842
To make matters much worse, customers allege they never signed up for OnStar Smart Driver in the first place, claiming the choice was made for them by salespeople during the car-buying process.
People who sign contracts for other people without telling them need to be prosecuted for fraud.
 
Upvote
172 (172 / 0)

jdale

Ars Legatus Legionis
18,261
Subscriptor
This is really a fallout from weak or absent consumer privacy protection regulations.

I can't fathom this happening in Europe without major consequences for the company that shares driver information without consent.

Anyone from Europe or elsewhere have any insight here?
You could have just said "this is legal in the US, but not in the EU." Obviously that makes it more likely to happen here. And while its new to have confirmation that the data was going to insurance companies, it's not new that car companies in the US are terrible about privacy.
 
Upvote
-16 (6 / -22)
It just says they aren't sharing with those two directly anymore. They could still share with, say, Dickhead McFuckdrip Enterprises, who then share with Lexis-nexis and verisk
Came to say the same thing. The fact that they only say they aren't sharing with those two agencies implies that they are still sharing it with unknown other entities.

The only acceptable response is "we have shut down this program entirely and are no longer collecting this information at all."
 
Upvote
97 (97 / 0)

Frodo Douchebaggins

Ars Legatus Legionis
11,995
Subscriptor
Last edited:
Upvote
39 (43 / -4)

jdale

Ars Legatus Legionis
18,261
Subscriptor
Upvote
107 (107 / 0)

atu30004

Ars Scholae Palatinae
613
"...Customer trust is a priority for us, and we are actively evaluating our privacy processes and policies," GM told us in a statement.

Not to belabor the obvious, but if 'customer trust' were such a priority with GM, why'd they do it in the first pace?

I am SO TIRED of not only the cyborg-lawyer horseshit which accompanies every article such as this, but the tacit complicity of venues such as yours, Ars Technica, in NOT CALLING IT OUT FOR WHAT IT IS, and thereby treating us, your readers, as a bunch of mindless cabbages.

Hope you have a better day tomorrow. MUCH better. Seriously.
 
Upvote
61 (75 / -14)

ArsLongaVitaBrevis_4321

Ars Scholae Palatinae
665
Subscriptor
Just hoping to stretch out a few more years on my 2010 Honda, which doesn’t have anything more high-tech than Sirius-XM radio, which I’m pretty sure is receive-only.

After that, I’ll be looking to see if the powers that be in Washington have enacted any meaningful privacy legislation. Very preferably, a constitutional amendment. (Yeah, and the check’s in the mail…)

Barring that legal protection, my next car will be undergoing an immediate, and radical, transmitterectomy!
 
Upvote
40 (40 / 0)

thekaj

Ars Legatus Legionis
48,270
Subscriptor++
This is really a fallout from weak or absent consumer privacy protection regulations.

I can't fathom this happening in Europe without major consequences for the company that shares driver information without consent.

Anyone from Europe or elsewhere have any insight here?
There are states like California that have privacy laws similar to GDPR. I wonder if this runs afoul of their law.

I think the political reality is that it’ll take multiple larger states passing their own privacy laws before there’s a push by enough companies to just get a single federal law in place so they stop having to track 20 different privacy rules (the fun ones are when laws conflicts between the states, so that one way you do things is legal in one state but illegal in another). But it’s still probably a ways off before “too annoying to deal with all the separate laws” overrides “but we make so much money violating people’s privacy!”
 
Upvote
55 (55 / 0)