General Motors updated its privacy statement on June 18, 2026, with changes to how it defines personal information, describes data collection practices, and handles de-identified data. The updated statement narrowed the definition of personal information from 'identifies, relates to, or could reasonably be linked to you' to 'describes, relates to, or could reasonably be linked to you,' and reorganized its de-identification provisions with new language stating GM 'may use technical measures to remove information that could reasonably identify you.' The statement also clarified that its privacy protections apply to dealer disclosures to GM but not to other dealer data practices, and removed Cruise from the list of GM affiliates not covered by the policy.
The updated statement narrowed its definition of personal information from 'identifies, relates to, or could reasonably be linked to you' to 'describes, relates to, or could reasonably be linked to you.' This language change affects which information GM must treat as personal information under the policy. The revised de-identification section reorganizes prior language, now stating GM 'may use technical measures to remove information that could reasonably identify you or your vehicle' and requires 'the same safeguards from any third parties we share it with.' The policy clarifies that its protections apply to personal information dealers disclose to GM, but do not cover dealers' independent data practices. Cruise is no longer listed as a GM affiliate exempt from this privacy statement, though the scope of privacy protections for Cruise users depends on whether Cruise now operates under this statement or maintains separate privacy terms.
→ Review the updated privacy statement at gm.com to understand how the narrowed definition of personal information affects your data.
→ Confirm whether you are a Cruise user and check Cruise's privacy policy to understand coverage under the revised GM statement or Cruise's independent policy.
Narrowed from 'identifies, relates to, or could reasonably be linked to you' to 'describes, relates to, or could reasonably be linked to you,' which may affect what information qualifies for privacy protections.
Reorganized language now emphasizes technical measures to remove identifying information and requires third-party safeguards, with clarification that de-identified data may be used for purposes not described in the statement.
Clarified that the policy applies to personal information dealers disclose to GM, but not to dealers' own collection, use, or disclosure of data.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
General Motors modified its U.S. Consumer Privacy Statement on June 18, 2026, with material changes to personal information definition, de-identification procedures, and affiliate coverage. The narrowed definition of personal information from 'identifies, relates to, or …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003075.
General Motors updated its OnStar privacy disclosures on June 19, 2026, with three specific changes to its GM Privacy Statement. …
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.