General Motors will pay $220m to 35 US states and the District of Columbia over drivers’ data. The states said GM sold it to data brokers, who sold it on to insurance companies. GM must now get drivers’ express consent before it collects or shares their driving and location data.