General Motors faces a US$12.75 million fine for selling driving data it explicitly promised not to monetize. The settlement reveals GM collected roughly US$20 million from the data sales, meaning the company profited US$7.25 million after the penalty.

The violation stems from GM's failure to honor privacy commitments made to vehicle owners. Customers who purchased or leased GM vehicles understood their driving data would remain protected, yet the automaker sold this information to third parties for profit. This breach of trust exposes a broader industry problem: automakers increasingly view customer data as a revenue stream, despite explicit privacy assurances.

Data monetization represents a growing business for legacy automakers trying to offset slowing vehicle sales and transition costs to electrification. GM, Ford, and others have aggressively pursued data partnerships with insurance companies, fleet operators, and tech firms. The fine signals regulatory pushback against these practices when they violate consumer agreements.

The penalty's structure matters. At US$12.75 million, it undercuts the actual revenue GM generated from the sale. This creates weak enforcement incentives. Companies calculating risk versus reward see that selling data yields higher net gains than any likely regulatory fine. For genuine deterrence, penalties need to substantially exceed ill-gotten gains.

GM has not publicly detailed which third parties purchased the data or what specific driving information changed hands. The automaker will likely argue the settlement closes the matter while avoiding deeper disclosures that could expose other contracts or partnerships.

This case arrives as regulators globally scrutinize connected vehicle data practices. The Federal Trade Commission has already opened investigations into Tesla, Honda, Hyundai, and BMW over similar concerns. Consumer privacy advocates push for stricter data governance rules that impose meaningful financial consequences and require explicit opt-in consent rather than fine-print opt-out clauses.

GM's settlement demonstrates that current penalties remain business costs rather than