{"id":81126,"date":"2023-04-21T12:00:00","date_gmt":"2023-04-21T16:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=81126"},"modified":"2023-05-25T12:48:51","modified_gmt":"2023-05-25T16:48:51","slug":"new-ftc-rules-for-car-dealers","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/new-ftc-rules-for-car-dealers","title":{"rendered":"What New FTC Rules for Car Dealers Mean for MSPs"},"content":{"rendered":"\n

There is a looming deadline that MSPs need to be aware of when it comes to their clients in the Car Dealers space. This includes Car Dealerships along with their counterparts in boats, RVs, and motorcycles. The FTC (Federal Trade Commission) has found that car dealers deal with a lot of personal customer data. This makes dealers a highly desirable target for cybercriminals.<\/p>\n\n\n\n

So, on June 9th, 2023, all car dealers in the US will need to comply with new FTC Safeguard Rules<\/a>. <\/p>\n\n\n\n

What Are the New FTC Rules?<\/h2>\n\n\n\n

The National Automobile Dealers Association has a great document on the revised safeguard rules<\/a> for their member organizations. These are the key security measures the dealership will be required to secure in order to prove compliance: <\/p>\n\n\n\n

1. Designate a qualified individual to implement and supervise your information security program. <\/h3>\n\n\n\n

The dealer needs to appoint a qualified individual to oversee this process. This designation can be outsourced to an MSP but the dealer will still be required to designate an in-house senior employee to supervise the program.<\/p>\n\n\n\n

2. Conduct a risk assessment. <\/h3>\n\n\n\n

The risk assessment needs to take into account all potential risks around customer information. It should review and assess if customer information can be accessed by bad players and how that customer information could be misused, altered, or destroyed. Compliance measures must be reviewed and assessed regularly.<\/p>\n\n\n\n

3. Design and implement safeguards to control the risks identified. <\/h3>\n\n\n\n

This process includes, but is not limited to, the following actions:<\/p>\n\n\n\n