How to Protect Your Auto Dealership

Right now, somewhere in your dealership, a manager just pasted a customer's full deal into ChatGPT. Name. Phone number. Address. Trade details. Finance terms. All of it. They asked ChatGPT how to respond. This is happening across the industry today. Most owners have no idea. Here is why this is bigger than a data privacy problem. If you are in active litigation and your manager pasted the relevant correspondence into an AI tool on a personal account, that is discoverable. It is not protected by attorney-client privilege. A plaintiff's attorney can ask for it. The TCPA lawsuits were bad. What happens when plaintiffs' attorneys figure this out will be worse. Think thousands of customer records. Think large fine per incident. Do the math. Three things every dealer needs in place right now. A written AI usage policy. Who uses what tools. What data categories are completely off limits. No exceptions. Corporate AI accounts. Not personal accounts on personal devices. You need audit control. A data architecture that keeps customer PII out of AI models entirely. The technology exists. It is called a RAG. Your customer becomes an anonymous ID before it ever touches a model. I have spent 36 years in this business. I have watched dealers survive interest rate spikes, financial crises, and Japanese imports. None of those created liability out of thin air on a Tuesday afternoon because a sales manager had a question. This one does. Free AI policy template in the comments. Have your attorney localize it for your state and add anything they determine necessary. But get something in writing before one of your managers creates a problem you cannot walk back. Are you running corporate AI accounts in your stores yet?

As a smaller dealership, it’s normal to have people wearing multiple hats. One person might touch parts, service, sales, receiving, and a few corners of the Lightspeed DMS all in the same week. But as you grow, that should change. The bigger the dealership gets, the more specialized the roles become. People get better and better in their lane, and naturally some of their knowledge in other areas starts to fade. That’s exactly why security access should get narrower as the store grows, not broader. Too many dealers do the opposite. They keep stacking permissions on top of old permissions until half the staff can get into areas they have no business touching. That doesn’t just create security holes. It also wrecks data quality, accountability, and process discipline. Over the years I have worked with hundreds of dealers, most of them on Lightspeed. For the ones who complain about constant system glitches and problems, in the majority of cases I find these are being created by incorrect settings and staff having too much access. Not saying it's never the DMS, but it's rarely the DMS, and almost always the users. Checks and balances matter. Clean permissions help protect your inventory, your financials, and the accuracy of what goes into and out of your DMS. And let’s be honest, once you have a bigger team, you better assume not everyone is handling that access responsibly. Do you really want someone’s side hustle to be selling accessories they stole out of your store? If your security settings look like a Christmas tree lit up with checkmarks, it’s time to start unchecking boxes. Who owns security access reviews in your dealership today? #Powersports #Dealers #Leadership #InventoryControl #TeamCulture #DealershipOperations

🚨 Compliance Alert: New Jersey Attorney General announces a staggering $840,000 judgment against a used car dealership for an alleged pattern of activities that lacked transparency. In the Consent Order, the court found a "pattern of non-compliance" that included over 500 violations in a single two-month period. Key allegations included: • Advertising Deception: Hiding mandatory fees in online listings and failing to include required legal language regarding price disclosures; • Junk Fees & Itemization Failures: Charging for products/services of no value and failing to itemize costs on finance agreements; • Concealing Defects: Withholding critical information about vehicle history, including mechanical defects and odometer readings; •Failure to Disclose "Gray Market" Vehicles: Selling cars imported without authorization that may not meet U.S. safety or emissions standards without notifying the buyer; and • Violation of Prior Orders: Perhaps most damagingly, the dealer ignored a prior 2018 Consent Order and continued violating the law. 🛡️ How to Protect Your Dealership Compliance is your best defense. To avoid these types of claims, ensure your team is doing the following: • Audit Your Advertising: Every advertisement should clearly disclose the price and any additional permissible fees with the correct font size and placement; • Itemize Everything: Ensure every fee is clearly itemized and explained on the retail order and finance agreement; • Display the FTC Buyers Guide: Prominently display the correct version on every used vehicle and ensure it is properly completed; • Verify Vehicle Origin: Implement a robust VIN-checking process to identify and disclose "gray market" or salvage vehicles immediately; • Obey Consent Orders: If you’ve previously settled with the state, follow the requirements. Compliance isn't about checking boxes; it’s about building a culture of transparency. In today's regulatory environment, the "sell at all costs" mentality is simply too expensive. To learn more about how KPA can help your dealership implement a compliance program that is driven by software, experts, and amazing content, schedule a meeting at: https://lnkd.in/enYr7npx?

My team and I have conducted audits for over 100 dealerships using our FTC-aligned process, and every single one had violations in one or more of the FTC’s 16 consumer protection and competition provisions. Every. Single. One. Many dealers are making a dangerous assumption right now… They’re thinking: “My store didn’t receive an FTC warning letter, so we’re probably fine." The absence of a letter does not mean the absence of risk, though. All dealers must take action right now to protect their stores. My recommendation? Audit everything. Take a thorough look at your website, social media, email campaigns, vehicle listings, pricing disclosures, and reviews, including those on Google, DealerRater, Cars(dot)com, and CarGurus. Everything a consumer can see. Fines of up to $53,088 per violation add up quickly. Trust me. Among the audits we’ve conducted, the total penalties these stores could face if not addressed promptly, include… #1 39 violations | Projected Penalties $1.36M to $3.01M #2 48 violations | Projected Penalties $1.63M to $3.65M #3 62 violations | Projected Penalties $2.25M to $4.73M #4 76 violations | Projected Penalties $2.70M to $5.72M #5 90 violations | Projected Penalties $3.15M to $6.72M You might look at this list and think, “Yeah, but these are the five stores with the most violations… out of more than 100.” That’s not the case at all, though. These are actually the five BEST stores I audited. In other words, the stores that stand to pay the least in FTC fines were they investigated today. As a former dealer and long-time dealer advocate, an even bigger concern than the fines would be the associated legal costs and even more costly reputational damage. Please, don’t wait. Please, take this seriously before it’s too late. Please, get an audit of your store ASAP. An audit will help you get ahead of issues, make immediate corrections for any violations, and establish clear guidelines for your team and your marketing agency. Otherwise, you’ll be playing catch-up in a game that has no winners. If you need help or are interested in our industry-leading, incredibly affordable audit process, DM me, and I will be in touch personally. #FTC #dealers #retailautomotive #automotiveindustry

🚨 The FTC just changed the game for auto dealers… and most aren’t ready. The Federal Trade Commission and the Maryland Attorney General didn’t just settle a case with Lindsay Automotive. They sent a message to the entire industry. Allegations: • Advertised prices that weren’t real • Mandatory add-ons buried at signing • Customers paying thousands more than expected The outcome: • Over $75 million in potential consumer refunds • Civil penalties • Mandatory upfront “true price” disclosure Source: Federal Trade Commission (April 2026 enforcement action) But here’s where it gets interesting… Just weeks earlier, the FTC sent warning letters to 97 dealer groups nationwide. Not about fraud. About pricing practices. Source: Federal Trade Commission (March 2026 dealer warning letters) Let that sink in. This isn’t one bad actor. This is a system-wide crackdown on how vehicles are priced, advertised, and sold. And now… dealers are being encouraged to report competitors who aren’t playing by the rules. Here’s the reality most aren’t talking about: When regulators invite dealers to turn each other in, the risk shifts overnight. It’s no longer just: “Will I get audited?” Now it’s: “Will my competitor report me first?” What smart dealers should do right now: 1. Audit your pricing everywhere Website, third-party listings, Google, social If the price changes when the customer shows up, you have exposure 2. Kill forced add-ons without consent If it’s not clearly disclosed and agreed to, it’s a liability 3. Align ops + pay plans If your comp plan rewards behavior the FTC is targeting… you have a culture problem, not just a compliance problem 4. Tighten your process From first click to final signature, everything needs to match 5. Train your team Because one bad experience is no longer just a bad review… it’s evidence This isn’t about politics. This is about math. Transparency is becoming the standard because: • Consumers expect it • Big tech is enforcing it • Regulators are escalating it And now… competitors may weaponize it. The dealers who win won’t be the ones who fight this. They’ll be the ones who operationalize trust. Or said another way… If your deal can’t survive being recorded, reviewed, and reported… it won’t survive what’s coming. What changes have you made to your pricing strategy lately?

Why 73% of Car Dealerships Are Just One Click Away from Disaster (My Ridgeback Security Investigation) During my extensive research into automotive dealership networks, I discovered something alarming: the vast majority of car dealers are operating with cybersecurity systems that might as well be unlocked doors with neon "ENTER HERE" signs for hackers. The numbers are staggering: ➡️ The average data breach costs dealerships $180,000+ in damages ➡️ Customer financial data is typically accessible within just 22 minutes of network penetration ➡️ DMS and CRM systems are the lifeblood of your dealerships operations are often the least protected 𝗪𝗵𝗮𝘁 𝗺𝗮𝗸𝗲𝘀 𝘁𝗵𝗶𝘀 𝘀𝗼 𝗱𝗮𝗻𝗴𝗲𝗿𝗼𝘂𝘀? Most dealerships are using passive security systems that simply watch breaches happen instead of stopping them. In my investigation, I found that Ridgeback's approach is fundamentally different. Rather than just monitoring threats, they actively engage and neutralize attackers before damage occurs using phantom decoys that trap hackers and prevent them from reaching your critical systems. 𝗧𝗵𝗲 𝗞𝗲𝘆 𝗗𝗶𝗳𝗳𝗲𝗿𝗲𝗻𝗰𝗲: Traditional security waits to alert you after the breach. Ridgeback stops attacks as they happen. For dealerships processing hundreds of financial transactions daily, this isn't just a security upgrade, it is business protection that pays for itself. In the full article below, I break down exactly how Ridgeback creates a real-time defense shield specifically designed for automotive retail environments, complete with visual examples of their network monitoring capabilities. If you are responsible for protecting your car dealership's data (and your customers' trust), this is the most important cybersecurity development you need to understand in 2025. 👇 Full details in the article below 👇 #ridgeback #network #defense