Modern cars can tell a surprisingly detailed story about the people driving them. Location history, driving habits, and connected services generate information that can travel well beyond the dashboard. General Motors’ $220 million settlement over allegations involving the sale of drivers’ data has brought a familiar question back into focus: how much control do consumers really have over the information their vehicles collect and share?
In an October 30, 2026 report for CNET, journalist Omar Gallaga examines the settlement and the broader privacy concerns surrounding connected vehicles. Protegrity’s Clyde Williamson, senior security architect, offers perspective on why cars deserve the same privacy scrutiny as smartphones and what drivers can do to limit unnecessary data sharing.
Connected Cars Introduce New Data Privacy Concerns
Vehicles increasingly operate as connected devices, collecting information through navigation systems, mobile integrations, and other digital features. While these capabilities can improve convenience, they also introduce questions about how personal information is handled.
Williamson points out that connected cars can present privacy risks similar to smartphones, sometimes without receiving the same level of attention from consumers.
Unlike other connected devices, vehicles may transmit information through background systems that drivers have limited ability to inspect or control. This can make it difficult to understand what information is shared and which features depend on that collection.
What Drivers Can Do to Protect Their Information
Williamson acknowledges that consumers may have limited options for controlling the information their vehicles collect. However, there are practical steps drivers can consider to reduce unnecessary data sharing.
He recommends opting out of data sharing wherever possible, declining unnecessary permissions, and reviewing a Customer Disclosure Report to determine whether driving information has been recorded.
For vehicles with a modem that can be disabled, Williamson also suggests considering that option. Drivers should understand that disabling connected features may affect certain vehicle services and conveniences.
Data Privacy Requires Greater Transparency and Control
The GM settlement highlights the importance of transparency and consumer consent in connected-vehicle services. Under the agreement, GM must obtain affirmative express consent before collecting or disclosing covered driving and location information.
The broader discussion extends beyond automobiles. Organizations collecting personal information need to consider what data is necessary, how it is used, who can access it, and how it remains protected.
Strong data protection is one part of that responsibility, alongside clear disclosures and meaningful choices about how personal information is collected and shared.
Williamson’s perspective reinforces a practical message: as everyday products become increasingly connected, understanding and managing personal data sharing is an important part of protecting privacy.
This article summarizes commentary from Clyde Williamson in the CNET article “GM’s $220M Payout Shows How Cars Can Secretly Sell Your Driving Data.” Read the original publication for the complete reporting and additional perspectives on connected-vehicle privacy.