Independent dealership compliance management

Compliance your dealership can stand behind — and prove.

Dealer EducationFX is an independent automotive training and cybersecurity solutions provider specializing in dealership regulatory compliance management. We help dealerships establish a Good Faith Compliance Effort — the gold standard of legal protection under the FTC Safeguards Rule.

Request a consultation View services
Experience
25 years
Focus
Auto retail
Standard
Good Faith
Dealership showroom with customers and sales staff among new vehicles
Since 2023 The FTC requires every dealership to designate a Qualified Individual to run its Information Security Program.

The challenge

Sales teams are measured on profit. Compliance is measured on restraint. Both report to you.

Dealerships struggle to maintain compliance operations linked to legal mandates and regulations, their third-party software vendors, and across multiple locations — because essential producers and managers driving dealership sales often have conflicting agendas: profits versus compliance.

  • Legal mandates and regulations

    Federal rules written for financial institutions, enforced against dealerships, with penalties that scale per violation.

  • Third-party software vendors

    DMS, CRM, F&I menus and lender portals each handle customer data the dealership remains accountable for.

  • Multiple locations

    One information security program across many rooftops, with a different person responsible at each.

Services

Five solutions. One coordinated compliance effort.

Training for the FTC's mandated Qualified Individual role, dealership IT cybersecurity risk management, online IT security awareness training, phishing defense and simulation, and Safeguards Rule mandated best-practice policies and procedures.

The FTC requires every dealership to designate a Qualified Individual to oversee its Information Security Program, but did not define that person’s experience or role. This program establishes a knowledge-based approach to Safeguards Rule compliance and cybersecurity best practices, with content and references specific to automotive retail. Participants receive a Qualified Individual Designation (QID) on completion.

  • Safeguards Rule ISP fundamentals for dealership staff
  • Cyber incident response planning, roles and responsibilities
  • Qualified Individual Designation (QID) on completion

A written risk assessment of the dealership IT environment — networks, vendors, access and data flows — mapped to the Rule’s requirements and to the questions cyber insurance providers ask before they quote.

  • Written risk assessment
  • Third-party vendor and access review
  • Cyber insurance application readiness

Online training for every role that handles customer information, from BDC to F&I to the service department, with completion records that satisfy the Rule’s training requirement.

  • Role-based online modules
  • Knowledge checks and completion records
  • Annual refresh as threats change

Controlled phishing simulations against your own staff, with immediate coaching for anyone who clicks. Email remains the most common way dealerships are breached.

  • Scheduled simulation campaigns
  • Click and report rates by location
  • Targeted remediation training

Safeguards Rule mandated best-practice policies and procedures, written for how a dealership actually operates and maintained as the Rule changes.

  • Information Security Program policy set
  • Procedures by department
  • Change log ready for regulators

Why Dealer EFX

We do not sell the software. We protect the dealership.

We leverage the experience of our partners to establish a “Good Faith Compliance Effort” strategy — the gold standard of legal protections — built on 25 years of dealership compliance operations, cybersecurity standards and frameworks.

Years of dealership compliance operations

Programs shaped by decades of hands-on dealership compliance, not generic corporate IT training.

Fully independent

No DMS, CRM or hardware to sell. Our recommendations are shaped only by your regulatory exposure.

A defensible legal standard

A documented Good Faith Compliance Effort is what regulators and courts look for when something goes wrong.

Recognized by insurers

The controls we install overlap PCI DSS and cyber insurance requirements — practices carriers reward with premium and deductible reductions.

The FTC Safeguards Rule · 16 C.F.R. § 314

Eight obligations every dealership must meet.

The updated Safeguards Rule requires motor vehicle dealers to develop, implement and maintain a comprehensive information security program. Each obligation maps to a Dealer EFX service.

Discuss your current program
  1. Designate a Qualified Individual to oversee the information security programQualified Individual Training
  2. Develop a written risk assessmentCybersecurity Risk Management
  3. Limit and monitor who can access sensitive customer informationCybersecurity Risk Management
  4. Encrypt all sensitive informationPolicies & Procedures
  5. Train security personnelIT Security Awareness Training
  6. Develop an incident response planQualified Individual Training
  7. Periodically assess the security practices of service providersCybersecurity Risk Management
  8. Implement multi-factor authentication for anyone accessing customer informationPolicies & Procedures

Request a consultation

Put your dealership's compliance effort on solid ground.

Tell us about your locations and who holds the Qualified Individual role today. We will reply with a scoped plan within one business day. No software demonstration, no obligation.

Your information is used only to respond to this request.