How to Opt Out of Connected Car Data Brokers (GM, LexisNexis & Verisk Guide 2026)

You buy a new car, drive responsibly for six months, and then receive an unexpected notice from your auto insurance provider: your monthly premium is increasing by 45%. When you call customer service to demand an explanation, the agent reads off a detailed log: *"On March 14 at 11:42 PM, your vehicle logged a hard-braking event. On April 2, you accelerated rapidly onto the highway. On April 18, you drove between midnight and 3:00 AM."*

You never signed up for an insurance tracking dongle. You never enrolled in a usage-based discount program.

Your car manufacturer silently harvested your driving telemetry and sold it to data brokers behind your back.

Modern connected vehicles—from General Motors, Ford, Honda, Toyota, Hyundai, Kia, Subaru, and Mercedes-Benz—are internet-connected data centers on wheels. Millions of drivers across North America and Europe have discovered that their daily driving habits are recorded frame-by-second and routed directly to commercial insurance data brokers, primarily LexisNexis Risk Solutions, Verisk Telematics Exchange, and Arity.

This exhaustive, whitehat 2026 guide explains how connected car data brokerage operates, how to check if your vehicle is transmitting driving logs, how to obtain your official Consumer Disclosure Reports, how to invoke your legal rights under the Fair Credit Reporting Act (FCRA), and the exact steps to opt out of vehicle tracking across every major automaker.

Key Takeaways

• Connected cars harvest granular telemetry continuously: Embedded cellular LTE/5G modems record speed, precise GPS coordinates, seatbelt usage, hard braking deceleration (G-forces), rapid acceleration, cornering force, and trip timestamps.
• LexisNexis, Verisk, and Arity operate commercial vehicle data exchanges: Automakers monetize driving logs by contracting with these consumer reporting agencies under vague "connected services" and "driver feedback" privacy policies.
• Data brokers sell risk scores directly to auto insurers: Insurance carriers (including Allstate, Progressive, State Farm, Liberty Mutual, and Nationwide) buy these telematics feeds to adjust policy tiers, hike premiums, or deny coverage entirely.
• The FTC enforced major regulatory actions against car data sales: In 2024 and 2025, federal regulators cracked down on deceptive automaker data enrollment practices, forcing companies like General Motors to terminate specific broker pipelines while leaving consumer disclosure rights active.
• You have statutory rights under the Fair Credit Reporting Act (FCRA): Because LexisNexis and Verisk are legally classified as Consumer Reporting Agencies, you are entitled to a free annual Telematics Disclosure Report and have the right to dispute inaccurate driving logs.
• Opting out requires a two-front defense: You must revoke data-sharing consent in your automaker's mobile app and infotainment dashboard AND submit formal suppression/deletion demands to LexisNexis, Verisk, and Arity.

The Invisible Surveillance System in Your Car

Modern automobiles are no longer purely mechanical machines. They are sophisticated computing networks equipped with up to 100 Electronic Control Units (ECUs) communicating over a Controller Area Network (CAN bus). An embedded Telematics Control Unit (TCU)—powered by a dedicated cellular modem—transmits real-time vehicle metrics directly to automaker cloud servers.

Real-World Case Study: The GM OnStar Telematics Controversy

In early 2024, investigative reporting by the *New York Times* revealed that General Motors had been collecting detailed driving logs from millions of Chevrolet, GMC, Buick, and Cadillac owners through its OnStar SmartDriver feature.

Many drivers were automatically enrolled into SmartDriver during vehicle purchase at the dealership or while setting up the myChevrolet mobile app. Unbeknownst to these drivers, GM contracted with LexisNexis Risk Solutions and Verisk Telematics Exchange to monetize this data. LexisNexis generated "Driver Risk Scores" and sold them to auto insurers.

When drivers saw their insurance rates jump by hundreds or thousands of dollars, they pulled their LexisNexis reports and found hundreds of pages detailing every trip taken—including timestamps, mileage, and instances of "hard braking" or "hard acceleration." Following widespread public backlash, class-action lawsuits (*In re General Motors OnStar Telematics Litigation*), and an inquiry by the Federal Trade Commission (FTC), GM announced in March 2024 that it was terminating its data-sharing partnerships with LexisNexis and Verisk.

However, GM is far from the only manufacturer engaging in telematics data commercialization. Most major automakers maintain active connected-vehicle data pipelines.

How Connected Car Data Brokerage Works

The vehicle data pipeline operates through a multi-tier commercial infrastructure:

```

┌─────────────────────────────────────────────────────────────────────────┐

│ YOUR VEHICLE (Sensors & CAN Bus) │

│ • Hard Braking (G-Force) • Rapid Acceleration │

│ • GPS Coordinates & Speed • Trip Start/End & Midnight Driving │

└─────────────────────────────────────────────────────────────────────────┘

│

▼ (Cellular LTE/5G Signal)

┌─────────────────────────────────────────────────────────────────────────┐

│ AUTOMAKER CLOUD INFRASTRUCTURE │

│ • GM OnStar • Toyota Connected Services • FordPass • HondaLink │

└─────────────────────────────────────────────────────────────────────────┘

│

▼ (Bulk Telematics Monetization Contract)

┌─────────────────────────────────────────────────────────────────────────┐

│ TELEMATICS CONSUMER REPORTING AGENCIES │

│ • LexisNexis Risk Solutions • Verisk Telematics • Arity (Allstate) │

└─────────────────────────────────────────────────────────────────────────┘

│

▼ (Risk Score Export & FCRA Reports)

┌─────────────────────────────────────────────────────────────────────────┐

│ AUTO INSURANCE UNDERWRITERS │

│ • Rate Increases • Policy Re-Tiering • Coverage Denials │

└─────────────────────────────────────────────────────────────────────────┘

```

The Data Harvested by Modern Automakers

Telematics exchanges categorize driving behavior into specific metrics that calculate a consumer's "Risk Score":

Deep Dive into the Major Telematics Brokers

1. LexisNexis Risk Solutions (Telematics Exchange)

LexisNexis Risk Solutions operates the largest telematics database in North America. Their Telematics Exchange aggregates driving data from multiple vehicle manufacturers and mobile insurance apps into a unified profile linked to your Driver's License Number and Vehicle Identification Number (VIN). Auto insurance carriers query LexisNexis during policy renewals or rate evaluations.

2. Verisk Telematics Data Exchange

Verisk Analytics provides data analytics and risk assessment to the insurance industry. The Verisk Telematics Data Exchange receives driving logs directly from connected vehicle partners (including Ford, Hyundai, and Kia) and translates raw sensor data into standardized risk scores for insurance underwriters.

3. Arity (Allstate Subsidiary)

Arity was founded by Allstate Insurance in 2016. Arity collects telemetry not only from connected vehicles but also through mobile app Software Development Kits (SDKs) embedded in popular third-party apps like Life360, GasBuddy, and MyRadar. If you use these apps and grant location permissions, Arity tracks your driving behavior even when you are a passenger in someone else's car.

Legal & Regulatory Framework: FCRA & State Privacy Laws

Consumers are not powerless against car data brokers. Several federal statutes and state privacy laws give you enforceable rights:

1. The Fair Credit Reporting Act (FCRA, 15 U.S.C. § 1681)

Because LexisNexis Risk Solutions and Verisk Telematics Exchange sell driving records to insurers to evaluate risk, they are classified as Consumer Reporting Agencies (CRAs) under the FCRA. This grants you three key protections:

• Section 609 (Right to Disclosure): You have the legal right to request and inspect every piece of telematics data associated with your name, driver's license, or Vehicle Identification Number (VIN).
• Section 611 (Dispute Procedure): If a telematics report attributes drives to your VIN when someone else was driving, or misclassifies an emergency stop as aggressive driving, the broker must investigate your dispute within 30 days or delete the record.
• Section 604 (Permissible Purpose): Brokers cannot sell your telematics report without a valid statutory permissible purpose.

2. State Privacy Statutes (CCPA, VCDPA, TDPSA, CPA)

If you reside in California, Virginia, Texas, Colorado, Oregon, or other states with comprehensive privacy laws:

• You have the right to Opt Out of the Sale or Sharing of Personal Data (including vehicle location and sensor logs).
• You can demand the Permanent Deletion of historical telematics records compiled without explicit, opt-in consent.

Step 1: Check If Your Driving Data Is Being Sold

Before submitting opt-outs, audit what information has already been collected on your vehicle and identity.

1. Request Your LexisNexis Telematics Report (Free)

LexisNexis maintains the largest telematics database in North America. By law, your report is free once every 12 months.

1. Go to the official LexisNexis Consumer Center: consumer.risk.lexisnexis.com.
2. Click "Request a Consumer Disclosure Report."
3. Fill out the required identity verification details:

• Full Legal Name
• Current Address and Previous Addresses (Past 5 years)
• Date of Birth
• Driver's License Number and State
• Social Security Number (Required for positive credit file matching)

1. Under report options, ensure "Telematics Report" is selected.
2. Submit the form. LexisNexis will mail a physical paper report or provide a secure digital download link within 7 to 14 business days.
3. Review the Report: The document will detail every logged trip, start/stop times, distance, VIN, and specific hard-braking or acceleration events.

2. Request Your Verisk Consumer Report

Verisk operates the Verisk Telematics Data Exchange, used by underwriters like Progressive and Ford Insure.

1. Visit the Verisk Consumer Inquiry Center.
2. Download and fill out the Consumer Report Request Form.
3. Provide your full name, address, driver's license number, and vehicle VIN.
4. Submit the request online or via mail to Verisk Consumer Relations.

3. Request Your Arity Driving Data Report

Arity collects telemetry across third-party mobile apps and connected vehicles.

1. Visit arity.com/privacy-center.
2. Submit a "Access My Data" request to view any driver scores linked to your mobile device or VIN.

Step 2: Opt Out of Your Automaker's Telematics Sharing

To cut off the flow of new data at the source, you must disable telematics sharing within your vehicle's software and connected mobile applications across major vehicle brands:

```

[ Step 1: Audit Vehicle Mobile App Settings ]

│

▼

[ Step 2: Revoke In-Dash Infotainment Privacy Consents ]

│

▼

[ Step 3: Call Automaker Customer Care for Master Opt-Out ]

```

General Motors (Chevrolet, GMC, Buick, Cadillac)

Following an FTC inquiry, GM shut down its SmartDriver program in early 2024 and severed ties with LexisNexis and Verisk. However, OnStar data collection remains active for vehicle diagnostics and location features unless managed.

1. Open the myChevrolet, myGMC, or myCadillac app.
2. Go to Account > Settings > Privacy & Permissions.
3. Verify that SmartDriver and Usage-Based Insurance Data Sharing are toggled OFF.
4. Press the blue OnStar button in your vehicle and tell the advisor: *"I request an explicit opt-out of all third-party commercial data sharing and telematics monetization."*

Toyota & Lexus

Toyota shares driving telemetry through its "Insure Connect", "Safety Connect", and "Drive Pulse" programs.

1. Open the Toyota App or Lexus App.
2. Navigate to Account (top right icon) > Data Privacy Portal.
3. Select Insure Connect and switch consent status to Decline / Opt-Out.
4. Select Service Connect and review data-sharing permissions.
5. If you do not use remote start features, you can disable Master Data Consent.

Ford & Lincoln

1. Sitting in your vehicle, turn on the infotainment screen (SYNC 3 or SYNC 4).
2. Go to Settings > General > Connectivity.
3. Select Customer Connectivity Settings.
4. Toggle Vehicle Data Transmission and Location Services to OFF.
5. Open the FordPass App, go to Account > Privacy Center, and opt out of Insurance Driver Scoring.

Honda & Acura

1. Open the HondaLink or AcuraLink app.
2. Go to Settings > Privacy Settings.
3. Toggle off Driver Feedback Program, Vehicle Data Analytics, and Third-Party Data Sharing.

Hyundai & Kia

1. Log into your MyHyundai (Bluelink) or Kia Access web portal.
2. Navigate to Vehicle Digital Services > Data & Privacy.
3. Opt out of Driving Score, Insurance Analytics, and Usage-Based Program Sharing.

Subaru

1. Open the MySubaru app or visit `mysubaru.com`.
2. Go to STARLINK Safety and Security > Privacy Settings.
3. Opt out of Driver Feedback and Third-Party Telematics Sharing.

Tesla

Tesla collects extensive camera, sensor, and driving logs for Autopilot and Safety Score calculations.

1. On the vehicle touchscreen, tap Controls > Software > Data Sharing.
2. Toggle off Allow Auto-Pilot Analytics & Improvement Data Sharing.
3. Toggle off Road Segment Analytics Sharing.

Step 3: Opt Out & Delete Historical Records at Brokers

Disabling your car's cellular transmission stops future tracking, but it does not remove historical records already residing in LexisNexis, Verisk, or Arity databases. You must submit direct deletion and suppression requests.

1. Opt Out at LexisNexis Risk Solutions

1. Visit the LexisNexis Non-FCRA Opt-Out Portal: optout.lexisnexis.com.
2. Click "Submit a Request to Opt-Out."
3. Select your reason for opting out (e.g., *Concern for Personal Safety / Privacy Protection*).
4. Provide your legal name, home address history, VIN, driver's license number, and email.
5. Save your Confirmation Reference Number. LexisNexis will process the suppression request within 7 to 14 business days.

2. How to Dispute Inaccurate Telematics Entries Under the FCRA

If your LexisNexis or Verisk report contains incorrect data (such as hard braking logged when a valet was driving, or trips assigned to you when your car was being serviced):

1. Draft a formal FCRA Dispute Letter using this exact structure:

```text

LexisNexis Risk Solutions Consumer Center

P.O. Box 105108

Atlanta, GA 30348

RE: FCRA Section 611 Telematics Dispute & Data Correction Request

Consumer Name: [Your Full Name]

Driver's License Number: [State & Number]

Vehicle Identification Number (VIN): [17-Digit VIN]

To Consumer Relations:

I am writing to formally dispute the accuracy of telematics logs contained in my Consumer Disclosure Report under Section 611 of the Fair Credit Reporting Act (15 U.S.C. § 1681i).

Specifically, I dispute the following entries:

• Date/Time: [Insert Timestamp]
• Disputed Data: [e.g., Hard-braking event of 9.2 mph/s]
• Basis of Dispute: [e.g., Vehicle was operated by third-party service center / Data fails to prove driver identity]

Under 15 U.S.C. § 1681i, you are required to conduct a reasonable investigation within 30 days of receiving this notice. If you cannot verify the accuracy and driver identity of these specific logs, you must permanently delete them from my file.

Sincerely,

[Your Signature]

[Your Printed Name]

```

1. Send the letter via Certified Mail with Return Receipt Requested.
2. The broker must investigate and send a written response within 30 days.

Step 4: Hardware & Physical Isolation Options

For drivers seeking absolute assurance that vehicle telemetry cannot leave the vehicle:

```

┌─────────────────────────────────────────────────────────────────────────┐

│ PHYSICAL TELEMATICS ISOLATION OPTIONS │

├─────────────────────────────────────────────────────────────────────────┤

│ 1. OBD-II Inspection & Dongle Removal │

│ • Remove insurance dongles (Progressive Snapshot, State Farm). │

│ • Check for aftermarket OBD trackers installed by auto dealers. │

├─────────────────────────────────────────────────────────────────────────┤

│ 2. Telematics Control Unit (TCU) Fuse Removal │

│ • Locate the TCU / OnStar / Telematic fuse in your car's fuse box. │

│ • Pulling the fuse cuts power to the embedded cellular modem. │

│ ► WARNING: Disables emergency SOS calling (eCall) & built-in GPS. │

└─────────────────────────────────────────────────────────────────────────┘

```

Used Cars & Rental Vehicle Privacy Hygiene

What Happens When You Buy a Used Car?

When buying a pre-owned vehicle, the previous owner's mobile app or telematics profile may still be linked to the VIN.

1. Perform a Master Factory Reset on the vehicle's infotainment system.
2. Contact the manufacturer's customer care to register yourself as the new owner of the VIN and request disassociation of all prior accounts.
3. Check the OBD-II port under the dashboard for third-party tracking dongles left behind by former owners or dealerships.

Clearing Infotainment Data in Rental Vehicles

Connecting your smartphone via Bluetooth or USB to a rental car transfers personal data (contacts, call logs, text messages, location history) to the vehicle's head unit.

1. Before returning a rental vehicle, go to Settings > Bluetooth / Devices and delete your paired phone.
2. Perform a System Reset or Clear Personal Data in the rental car's dashboard menu.

Frequently Asked Questions

Will opting out of car data sharing raise my insurance rates?

No. Opting out simply returns your insurance underwriting to traditional actuarial risk factors (age, geographic ZIP code, vehicle make/model, clean driving record). It prevents surprise rate hikes caused by automated telematics algorithms.

Does Privacy4Cars remove my data from LexisNexis?

No. Privacy4Cars is a software service designed to clear personal data (synced phone contacts, garage door codes, location history) stored locally in a car's infotainment system when selling or returning a rental vehicle. It does not send deletion requests to external data brokers like LexisNexis or Verisk.

How did my insurance company get my driving data if I never used their app?

Car manufacturers embedded opt-in clauses deep within digital terms-of-service agreements when you bought the vehicle or downloaded the brand's mobile app. Automakers then sold these data streams to LexisNexis or Verisk, which matched your VIN to your auto insurance policy.

Can I request a telematics opt-out for a leased or rented vehicle?

Yes. As the authorized driver and policyholder, you have legal standing under the FCRA and state privacy laws to request that telematics data linked to your driver's license and identity be suppressed from commercial risk reports.

What should I do if my insurance company already raised my rates based on telematics data?

Request your free LexisNexis Telematics Report immediately. Review every logged entry for inaccuracies. Under FCRA rules, if you are subjected to an "Adverse Action" (higher rates or coverage denial) based on a consumer report, the insurer must provide an Adverse Action Notice identifying the exact report used. File an FCRA dispute for any inaccurate entries.

Complete Car Data Privacy Checklist

• ] Order your free **LexisNexis Telematics Report** at [consumer.risk.lexisnexis.com.
• [ ] Order your Verisk Telematics Report via their Consumer Inquiry Center.
• ] Request your **Arity Driver Data Report** at [arity.com/privacy-center.
• [ ] Open your automaker's mobile app (myChevrolet, Toyota App, FordPass, etc.) and toggle OFF all driving score and insurance sharing programs.
• [ ] Sit in your vehicle and disable data-sharing consents within the Infotainment Settings menu.
• ] Submit a formal non-FCRA telematics opt-out request at [optout.lexisnexis.com.
• [ ] Send an FCRA Section 611 dispute letter for any inaccurate driving entries.
• [ ] Audit your vehicle for aftermarket OBD-II tracking devices.
• [ ] Set a calendar reminder every 12 months to re-verify your LexisNexis telematics file.