Key Facts
What information may General Motors collect about interactions with AI assistants?
General Motors may collect information about interactions with AI assistants used in its vehicles or Vehicle Mobile Apps, including information the user chooses to share and information about what the user is trying to do.
May General Motors collect information about what the user is trying to do?
General Motors may collect information about interactions with AI assistants used in its vehicles or Vehicle Mobile Apps, including information the user chooses to share and information about what the user is trying to do.
What does General Motors require before selling or sharing an individual's personal information if General Motors has actual knowledge the individual is between 13 and 15 years of age?
General Motors requires affirmative authorization from an individual before selling or sharing that individual's personal information if General Motors has actual knowledge the individual is between 13 and 15 years of age.
When does General Motors disclose personal information to the government?
General Motors discloses personal information to the government only as reasonably necessary to comply with a lawful government request, regulatory requirement, legal order, or similar obligation, and such request must be in the form of a warrant or court order, absent exigent circumstances or applicable statutory authority.
May General Motors use and disclose de-identified data for purposes not described in its Privacy Statement?
General Motors may use and disclose de-identified data for purposes not described in its Privacy Statement.
What information about how you drive does General Motors collect?
General Motors collects information about how you drive a vehicle that is linked or reasonably linkable to you, including vehicle speed, seatbelt use, braking and acceleration habits, and related trip time and duration.
Does General Motors collect information about vehicle speed, seatbelt use, braking and acceleration habits?
General Motors collects information about how you drive a vehicle that is linked or reasonably linkable to you, including vehicle speed, seatbelt use, braking and acceleration habits, and related trip time and duration.
When does General Motors share driver behavior information and precise geolocation information with General Motors Insurance?
General Motors shares driver behavior information and precise geolocation information with General Motors Insurance only when the consumer has given affirmative consent for that disclosure for usage-based insurance offers or to help determine the consumer's rate for an insurance quote or policy.
What does General Motors not do regarding the personal information of children it knows or should have known to be under 18 years of age?
General Motors does not sell or process for profiling or targeted advertising the personal information of children it knows or should have known to be under 18 years of age.
May General Motors collect the location of the vehicle?
General Motors may collect the location of the vehicle, including precise geolocation, while the vehicle is in use, upon the occurrence of certain events, and to deliver OnStar services.
Summary
This document explains what personal information General Motors collects when you use a GM vehicle or its apps — including exactly how you drive, where you go, and what you say to in-vehicle AI assistants — and how that information may be shared. Your precise location data can be kept for up to three years. You have the right to opt out of General Motors selling your personal information, and if you are between 13 and 15 years old, GM requires your affirmative authorization before selling or sharing your data.
Analysis
This Privacy Statement establishes General Motors' data collection, use, sharing, and retention practices for personal information tied to vehicle use and digital interactions. General Motors collects granular driving behavior data (speed, braking, acceleration, seatbelt use, trip duration), precise geolocation for up to three years, and AI assistant interaction data including user intent. Sharing with government entities is gated on a warrant or court order absent exigent circumstances or applicable statutory authority; sharing of driver behavior and precise geolocation with General Motors Insurance requires affirmative consumer consent. De-identified data falls outside the Statement's use restrictions entirely, and the Statement does not govern personal information GM dealers collect independently beyond what they disclose to General Motors.
What this means for you
General Motors collects detailed, individually attributable data about driving behavior, precise vehicle location, and AI assistant interactions — including what a user is trying to do — whenever a vehicle is in use or certain events occur. Precise geolocation data is retained for up to three years. General Motors will not share driver behavior or precise location data with General Motors Insurance unless you affirmatively consent, and it will not sell or use for profiling or targeted advertising the personal information of anyone it knows or should have known is under 18. The Privacy Statement does not protect personal information that GM dealers collect on their own, so separate inquiries to dealers apply for that data. You can exercise your right to opt out of the sale of your personal information directly with General Motors.
2 important changes detected
3 versions captured · Last updated: June 2026
What changed
General Motors updated its OnStar privacy disclosures on June 19, 2026, with three specific changes to its GM Privacy Statement. First, the policy removed language stating 'We may disclose Driver Behavior Information' before listing recipient categories, replacing it with a direct list of recipients without that introductory phrase. Second, the policy changed 'Visiting GM's U.S. Consumer Privacy Request Form' to 'Completing GM's U.S. Consumer Privacy Request Form' when describing how to submit privacy requests. Third, the retention schedule section now specifies 'To prevent, detect, protect against, or respond to security incidents' (using 'protect against') instead of 'To prevent, detect, protect again', which appears to correct incomplete or truncated language in the prior version. These changes clarify procedures and correct apparent text errors but do not materially expand or restrict data-sharing permissions or retention periods.
Why this matters
The updated disclosures clarify the process for submitting privacy requests and correct apparent text errors in the retention schedule section. The changes do not materially expand or restrict how GM collects, shares, or retains vehicle data. Consumers can continue to submit privacy requests by completing the form or calling 1-866-MYPRIVACY, as stated in the revised language.
View full change record →
What changed
General Motors updated its privacy statement on June 18, 2026, with changes to how it defines personal information, describes data collection practices, and handles de-identified data. The updated statement narrowed the definition of personal information from 'identifies, relates to, or could reasonably be linked to you' to 'describes, relates to, or could reasonably be linked to you,' and reorganized its de-identification provisions with new language stating GM 'may use technical measures to remove information that could reasonably identify you.' The statement also clarified that its privacy protections apply to dealer disclosures to GM but not to other dealer data practices, and removed Cruise from the list of GM affiliates not covered by the policy.
Why this matters
The updated statement narrowed its definition of personal information from 'identifies, relates to, or could reasonably be linked to you' to 'describes, relates to, or could reasonably be linked to you.' This language change affects which information GM must treat as personal information under the policy. The revised de-identification section reorganizes prior language, now stating GM 'may use technical measures to remove information that could reasonably identify you or your vehicle' and requires 'the same safeguards from any third parties we share it with.' The policy clarifies that its protections apply to personal information dealers disclose to GM, but do not cover dealers' independent data practices. Cruise is no longer listed as a GM affiliate exempt from this privacy statement, though the scope of privacy protections for Cruise users depends on whether Cruise now operates under this statement or maintains separate privacy terms.
View full change record →