FTC Safeguards Rule and Data Protection.
The amended FTC Safeguards Rule classifies auto dealers as covered financial institutions. That means several controls are not optional. Dealers need a written information security program, a designated qualified individual, annual risk assessments, MFA on any system with customer non-public information, and an incident response plan. We implement and maintain the technical portions of the Safeguards program, document the administrative controls, and prepare the evidence your compliance partner needs at audit time.
