driving rearview mirror
Resources / Blog

6 Tips to Make Your Dealership CCPA Compliant

By Erik NachbahrMay 2, 2019 · 3 min read

Note: This post was created prior to the implementation of the CCPA. The law is now in effect as of January 1, 2020. Keep reading to learn more about CCPA compliance and how your dealership may be affected.

While the California Consumer Privacy Act may seem like a pain for businesses, it’s actually a valuable opportunity for dealerships to improve their IT systems and data security while building trust with customers in the process.

In order to comply with the law and even take advantage of the changes it will bring, it’s important to have a plan in place. Here are some tips for making your dealership compliant:

  1. Choose a person or team to be in charge of CCPA compliance.

In order to ensure your dealership is heading in the right direction when it comes to the CCPA, it’s a good idea to have a person or team of people leading the charge. This helps consolidate responsibility and leads to greater accountability in meeting deadlines.                                                                                    

  1. Don’t go it alone — work with an IT service provider.

The process of changing cybersecurity controls and consumer information collection methods is best handled by an experienced IT service provider who has done similar projects in the past.

In order to complete the necessary changes on time and avoid fines and lawsuits, the entire compliance effort must be well-coordinated and technically robust. Service providers who have experience working with dealerships are the best option for a smooth transition.

  1. Develop a strategic roadmap for achieving compliance (and stick to it).

Proper planning will help ensure that changes related to the CCPA will be finished on time. By putting a roadmap together with your IT service provider, you’ll have precise milestones to orient the project and ensure it stays on track.

  1. Put yourself in the consumer’s shoes.

The CCPA can feel like another regulatory headache. But in thinking about the law, it’s valuable to see things from the customer’s perspective.

Consumers are increasingly concerned about how their data is managed, especially after several notable data breaches. Many businesses across California will be making changes to comply with the law, and consumers will start to take notice. By being upfront with customers, you can set your dealership apart from the pack.

Greater transparency and concise explanations can help build trust, which is an important part of the dealer-consumer relationship. Customers that think you have their best interests at heart are more likely to buy or lease from your dealership.

  1. Don’t stop where the law does.

It’s a good idea to see the CCPA as a starting point and not the final word on consumer privacy. As things evolve, more provisions or stricter regulations could be coming down the pike.

It’s smart to look beyond the law when strengthening data security and privacy controls. An IT service provider can identify ways to further shore up your processes and IT systems.

  1. Stay up to date on the latest developments.

Data privacy laws continue to evolve in response to consumer demand, and it’s important for dealerships to stay informed about the latest developments. Knowing about privacy issues provides an opportunity to be proactive; dealerships that successfully cater to consumer demands may end up with a competitive advantage.

By keeping these tips in mind and developing a checklist, you can put your dealership on the path to timely compliance.

About the author

Erik Nachbahr

Founder & President, Helion Technologies

Erik Nachbahr founded Helion Technologies in 1997 and has spent nearly 30 years working exclusively with automotive and heavy truck dealerships. Helion now supports more than 2,000 dealerships and 35,000 end users with managed IT, cybersecurity, FTC Safeguards compliance, Tekion enablement, and managed AI, all under one team. A CISSP, Erik writes and speaks about the parts of dealership technology most operators inherit rather than choose: vendor sprawl, AI governance, and cyber risk. His goal is simple: make the technology work so dealerships can focus on what they do best, selling and servicing cars and heavy trucks.

Confidence in your current setup and actual protection aren't always the same thing. The only way to know which one you have is to look.

Get Your Complimentary IT & Cybersecurity Assessment →