Sterling Safeguard
FTC Safeguards Rule updates, plain-English guides, and practical compliance advice — written for independent auto dealers, not lawyers.
September 5, 2026 · Jonah Gobah
A Written Information Security Program (WISP) is the core document the FTC Safeguards Rule requires. Here's what WISP software actually needs to do differently than a downloaded template.
Read More →September 5, 2026 · Jonah Gobah
Every Safeguards Rule compliance program needs a named Qualified Individual with real authority — here's what the role actually requires and who typically fills it at a small dealership.
Read More →September 5, 2026 · Jonah Gobah
The Safeguards Rule's protections hinge on a specific definition of customer information. Here's what actually counts, and what commonly gets overlooked.
Read More →September 5, 2026 · Jonah Gobah
Any vendor that touches customer financial data needs to be part of your risk assessment — and the list is usually longer than dealers expect. Here's how to build it.
Read More →September 5, 2026 · Jonah Gobah
The Safeguards Rule is a federal floor, not the whole picture. Most states layer their own data breach notification laws on top, and a few have broader privacy requirements too.
Read More →September 5, 2026 · Jonah Gobah
Floor-plan lenders and finance partners are increasingly asking dealers to prove FTC Safeguards Rule compliance directly. Here's what they actually want to see.
Read More →September 5, 2026 · Jonah Gobah
No — and this is one of the most common and expensive misunderstandings independent dealers have about the FTC Safeguards Rule. Here's the difference, and exactly what to ask your MSP.
Read More →September 5, 2026 · Jonah Gobah
A risk assessment isn't a one-time task. Here's how often the FTC actually expects dealers to revisit it, and the specific events that should trigger an update sooner.
Read More →September 5, 2026 · Jonah Gobah
The FTC's March 2026 warning letters to 97 dealer groups were about pricing, not data security — but the timing is a signal independent dealers shouldn't ignore.
Read More →September 5, 2026 · Jonah Gobah
Penalty figures you'll find online vary widely, and for good reason — but real enforcement actions against dealer groups show the practical cost goes well beyond any single fine amount.
Read More →September 5, 2026 · Jonah Gobah
The FTC updated the Safeguards Rule in 2023 with specific, testable requirements. Here's exactly what's new and what independent dealers need to do differently.
Read More →September 5, 2026 · Jonah Gobah
The specific list of documents an audit-ready dealership actually needs on hand under the FTC Safeguards Rule — not a vague description, an actual checklist.
Read More →September 5, 2026 · Jonah Gobah
Since May 2024, the Safeguards Rule has its own specific breach reporting requirement — separate from your general incident response plan. Here's exactly what it requires and when it applies.
Read More →September 5, 2026 · Jonah Gobah
An employee pulling a neighbor's or acquaintance's credit application out of curiosity is a real, common incident type — and it needs a different response than an external hack.
Read More →September 5, 2026 · Jonah Gobah
Short answer: almost certainly yes. Here's how to check whether your dealership is covered, and what happens if you skip it.
Read More →September 5, 2026 · Jonah Gobah
Passing an audit once doesn't mean staying compliant. Here's the difference between audit prep and actual ongoing compliance tracking — and why the gap between them is where most dealers get caught.
Read More →September 5, 2026 · Jonah Gobah
The first 24-48 hours after discovering a breach matter, both for containing the damage and for showing you actually had an incident response plan. Here's what to do, step by step.
Read More →September 5, 2026 · Jonah Gobah
A breakdown of what to look for in FTC Safeguards Rule compliance software, and why generic GRC tools don't fit independent dealerships.
Read More →September 5, 2026 · Jonah Gobah
A written risk assessment is the foundation the FTC Safeguards Rule requires everything else to be built on. Here's what risk assessment software actually does, and why a manual version usually falls short.
Read More →September 5, 2026 · Jonah Gobah
The FTC Safeguards Rule is a data security law before it's a paperwork requirement. Here's what cybersecurity compliance software needs to actually cover for a dealership.
Read More →August 27, 2026 · Jonah Gobah
Having a WISP, a risk assessment, and training records isn't the same as being able to prove your program is actually operating. Here's why compliance evidence — not just compliance documents — is what holds up when someone asks.
Read More →August 13, 2026 · Jonah Gobah
Having an IT company isn't the same thing as having an FTC compliance program. Here are the seven most common mistakes independent dealers make — and what to do instead of each one.
Read More →August 12, 2026 · Jonah Gobah
A WISP shouldn't be a generic document with your dealership's name swapped in. Here's what a real Written Information Security Program actually needs to cover — and why a document that doesn't match reality is worse than no document at all.
Read More →August 11, 2026 · Jonah Gobah
A 16-point checklist to find out where your dealership actually stands with the FTC Safeguards Rule — before an examiner asks you to prove it.
Read More →August 11, 2026 · Jonah Gobah
If your dealership finances, facilitates financing, or leases vehicles for more than 90 days, the FTC may already consider you a financial institution — with a written information security program required by law. Here's what that actually means.
Read More →July 5, 2026 · Jonah Gobah
Most of what's been written about the FTC Safeguards Rule was written by lawyers, for lawyers. This isn't that. Here's what you actually need to know — and do — if you run an independent dealership.
Read More →Sterling Safeguard gives independent dealers a complete FTC compliance system — without the law firm price tag.
Get Sterling Safeguard Verified™ →