FTC Safeguards Rule compliance for Utah dealerships

The rule requires a written security program, a Qualified Individual, MFA, encryption and a yearly written report to your owner or board. Since May 2024, a breach involving 500 or more customers must be reported to the FTC within 30 days. We help your stores put each requirement in place and keep the records.

Your DMS and your data

We map where customer financial data lives: the DMS, credit applications, F&I tools and scanned deal jackets.

The required controls, in place

MFA, encryption and access reviews, plus the penetration tests and vulnerability scans the rule puts on a schedule.

Records for the yearly report

Your Qualified Individual reports in writing to the owner or board at least once a year. We keep the evidence that report needs.

How it works

Tell us about your stores

How many rooftops and which DMS. The form takes about a minute.

Gap review

We compare what's running at your stores with each element of the rule.

Close and document

We fix the technical gaps and keep the records current.

Safeguards Rule elements16 CFR 314
PEOPLEA named Qualified Individual
DOCSWritten risk assessment
ACCESSMFA for anyone reaching customer data
DATAEncryption in transit and at rest
TESTYearly pen test, scans every six months
DOCSWritten incident response plan
DOCSYearly written report to the board

Summary only. Some elements don't apply to dealers with records on fewer than 5,000 consumers.

Why dealers bring us in

IT support that already knows dealership systems

  • Support for dealership systems including Reynolds and Reynolds and DealerTrack
  • Clients include Murdock Auto Team and Lucky's Auto Credit
  • Penetration tests run by our own ethical hacking team
  • 24/7 system monitoring
  • Offices in Orem, South Jordan and Price for on-site work

Trusted by 100+ companies

  • Liberty Safe
  • Acadia Law Group
  • CandyCo
  • American Fork City
  • Salem City
  • Lucky's Auto Credit
  • Murdock Auto Team
  • GPS

SAFEGUARDS RULE REVIEW

Tell us about your stores

A Tech Legion engineer will call to schedule your Safeguards Rule review.

95%of clients stay with us
100+companies supported
4offices in Utah and Nebraska

Why teams trust us with this

  • Dealer groups including Murdock Auto Team and Lucky's Auto Credit use Tech Legion.
  • Our ethical hacking team runs the penetration tests the rule requires.
  • Microsoft-certified technicians, plus A+ and Network+ certified staff.
95% of clients stay with us

Our team holds

  • Microsoft 365 Certified: Administrator Expert badge
  • CompTIA Network+ certification badge
  • CompTIA A+ certification badge

We use your details only to schedule your review. See our Privacy Policy.

Questions before you ask

Does the rule apply to my dealership?

If you arrange financing or leasing for customers, the FTC treats your dealership as a financial institution under the rule. The FTC's dealer FAQ covers the details, and your attorney can confirm.

Who can be our Qualified Individual?

An employee or someone at a service provider. If you use a provider, your dealership stays responsible and must name a senior staff member to oversee them.

Is this legal advice?

No. We handle the technical safeguards and the records. Your attorney should confirm how the rule applies to you.

Are we locked into a contract?

Ongoing service agreements begin after an initial period. We walk you through the terms before you sign anything.

Have the records ready before the FTC asks

A Safeguards Rule review for your stores, from a team that supports Utah dealer groups.