Keeping Customer Information Secure

The Safeguards Rule and the Auto Dealership

Michael De Carlo 2015

The Gramm-Leach-Bliley Act restricts with whom businesses can share customer information… Mandates they take steps to safeguard information

Inform customers how information will be used.

Safeguards Rule

Safeguards Rule

The Gramm-Leach-Bliley Act required Government agencies to oversee and establish standards. The Federal Trade Commission enacted the ‘Safeguards Rule’ and the ‘Privacy Rule’

The FTC’s Privacy Rule Covers how you share information about consumers that apply for credit or lease products.

Safeguards Rule

The FTC’s Safeguards Rule Requires auto dealers to protect personal information about their finance, lease and service customers.

Safeguards Rule

Dealers should implement an ‘Information Security Program’ that meets these objectives: Insure security and confidentiality of customer

Information Protect against anticipated threats to security and

integrity of customer information Protect against unauthorized access or use that

results in harm to customer.

Safeguards Rule

‘Information Security Program’ should have a designated Program Coordinator. Develops, implements, and maintains the Program Risk Assessment Ensure Vendors are in compliance

Safeguards Rule

Information Security Program extends to your: DMS system computer internet and access personal tablets and phones firewalls and password policies and any service providers you hire

Safeguards Rule

Overseeing ‘Service Providers’ Rule requires the dealer selects service providers capable of maintaining appropriate safeguards.

Safeguards Rule

‘Service Provider has an obligation to maintain a sufficient level of security.’ Encryption technology for digital files Back-up important data Security from unauthorized access from the internet Industry Certifications

Safeguards Rule

Information Security Program also covers how you secure your file rooms and document shredding or disposal policies.

Secure Your Files

Paper files and documents are vulnerable to human misuse by an employee, an intruder, and hazards like fire or flood.

Secure Your Files

Secure Your Files

Secure Your Files

Paper files are vulnerable to human misuse, an intruder, and hazards like fire or flood.

Electronic Document Management Systems Help you comply: Scan paper files to secure electronic files System guards against unauthorized access Grant access to only specific employees who need it Track and log who looks at specific documents Limits exposure to identity theft

Secure Your Files

Secure Your Files