GM Privacy Statement

This document is General Motors' U.S. Consumer Privacy Statement, governing the collection, use, sharing, and retention of personal information across GM's vehicles, connected services (including OnStar), websites, mobile applications, and dealer interactions, with its legal basis rooted in consent, contractual necessity, and legitimate business interests as articulated throughout the statement. The policy states that GM collects a broad range of data categories including vehicle location and telematics data, driving behavior, biometric identifiers, precise geolocation, financial information, and inferences drawn from personal information, and the terms authorize sharing this data with affiliates, dealers, service providers, data brokers, and marketing partners. Notably, the policy discloses the collection and sharing of precise geolocation and detailed driving behavior data from connected vehicles, which creates operational exposure beyond typical website privacy policies; the statement also discloses that certain data sharing with third parties may constitute a 'sale' or 'sharing' of personal information under California law, triggering opt-out rights under CCPA/CPRA. The policy engages CCPA/CPRA for California residents (providing enumerated rights including deletion, correction, portability, and opt-out of sale/sharing), and may require evaluation under state biometric privacy laws such as Illinois BIPA where biometric identifiers are collected; federal frameworks including the FTC Act's unfair or deceptive practices standards and the Driver's Privacy Protection Act (DPPA) are also relevant given the nature of vehicle and driver data collected.