# Kentucky Secures GM Data Privacy Settlement

Kentucky Attorney General Russell Coleman announced a multistate **$220 million settlement** with General Motors over the collection and sale of drivers’ behavior and location data. Kentucky is expected to receive nearly $6.5 million. The settlement requires consumer consent for data collection or disclosure, limits data collection, and establishes privacy protections, dealership oversight, and training. No procurement solicitation or contract award is identified, but the terms are relevant to government buyers and contractors that handle connected-vehicle or consumer data.

- Companies providing connected-vehicle, data analytics, or related services should assess whether their data collection, disclosure, and consent practices align with the settlement’s terms; the stated requirements apply to GM and should not be treated as a general mandate for all contractors.
- Government procurement teams can use the settlement as a relevant example when evaluating privacy protections, data-use practices, and oversight provisions for vendors handling sensitive consumer or location data.
- The announcement identifies no new contract opportunity, solicitation, or procurement deadline.

**Jurisdictions:** sled
**Industries:** Information Technology
**Topics:** Regulatory Compliance
**Published:** October 29, 2026

### Government Entities
- Kentucky Attorney General’s Office
- Washington Attorney General’s Office
- Oregon Attorney General’s Office

### Vendors
- General Motors (settling party)

### Key Quotes
> We are committed to protecting Kentuckians, their data privacy and their wallets. Kentucky drivers can rest assured their Attorney General’s Office stands at the ready to fight for their families.
> — Russell Coleman, Attorney General

### Sources
- [
	
	Activity Stream
](https://kentucky.gov/Pages/Activity-stream.aspx?n=AttorneyGeneral&prId=2012) - KY